Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File:                     SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier:          ZqUaDzVAdfHdC7FGXA+DPzze/ooMZ+kU9xnBqo8FItA=
Subject key identifier:   1E:CC:52:4F:1D:AE:BA:D9:D0:01:FB:BB:C1:55:C6:A1:24:9A:05:7D
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer:       /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial:       01978CFF1A8EC23622BB2FE6C92E7C9A546E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number:          03AF
Signing time:             Fri 20 Jun 2025 11:00:18 +0000
Manifest this update:     Fri 20 Jun 2025 11:00:18 +0000
Manifest next update:     Sat 21 Jun 2025 11:00:18 +0000
Files and hashes:         1: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: RWpk/6me8+yxNMmVBkkddsMJJPmkPrMLV9EV8ff9PVs=)
                          2: ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa (hash: GBFEJYPtX3jgZYzHGm9uh7GT7ECNm8iOg9HQZDPhsqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Jun 2025 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8c:ff:1a:8e:c2:36:22:bb:2f:e6:c9:2e:7c:9a:54:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
        Validity
            Not Before: Jun 20 11:00:18 2025 GMT
            Not After : Jun 21 11:00:18 2025 GMT
        Subject: CN=1ecc524f1daebad9d001fbbbc155c6a1249a057d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:30:d5:f8:31:ac:4b:a7:ee:d0:37:3d:95:
                    f2:ed:31:a3:3f:60:54:c5:fc:f7:e6:f5:ee:f1:4a:
                    70:7f:a5:cb:c1:97:54:12:6c:5f:50:e5:37:81:87:
                    54:55:ef:4b:ee:f0:48:9c:41:66:c1:49:34:63:64:
                    66:37:d0:3d:0b:7c:97:c3:06:da:fb:65:b6:9d:c7:
                    81:0c:50:9c:d6:06:c6:85:af:a4:7e:77:3e:1b:33:
                    0b:c0:f8:90:38:8c:63:90:32:1e:01:85:c7:d4:c0:
                    28:9f:29:20:8e:f9:a6:10:2e:44:41:bd:36:8d:2f:
                    e5:80:61:cf:ff:b4:a4:cf:b7:50:75:94:aa:fe:de:
                    79:7f:43:08:8b:b2:6e:6e:e5:71:3f:f8:c2:78:fa:
                    28:2d:cf:d4:ae:c5:6a:1f:15:5f:f9:78:41:f0:a1:
                    de:78:9c:01:9e:1f:3b:42:f8:18:7f:5a:4d:f4:35:
                    3b:a9:be:80:e8:6f:c1:25:2a:fb:93:ce:48:d9:c6:
                    72:82:1f:a2:4e:2b:d7:08:d8:d4:04:d0:e0:01:67:
                    2c:67:5e:07:3b:19:e3:77:e1:a0:4e:04:68:f5:7c:
                    81:57:ca:94:7a:03:83:0e:93:66:28:09:e0:2d:72:
                    35:25:f9:f2:05:4e:35:b0:dd:bb:c2:bb:eb:84:75:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CC:52:4F:1D:AE:BA:D9:D0:01:FB:BB:C1:55:C6:A1:24:9A:05:7D
            X509v3 Authority Key Identifier:
                keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:81:cb:c2:f8:d1:65:d4:85:1d:6c:0a:66:1e:8e:42:31:
         26:85:c6:f5:8f:37:04:a7:d5:5a:92:85:f5:4b:24:0e:27:87:
         63:33:c2:5b:b9:c3:cd:46:10:8d:ed:6a:9a:ae:b8:28:08:5f:
         ff:f2:3d:be:a2:af:0a:f5:70:11:d2:7b:f4:e0:c1:ef:6e:eb:
         bf:59:6f:e5:10:43:56:9b:a6:c2:63:39:82:f3:a8:6b:ac:27:
         c4:dc:c8:75:a7:a0:58:e4:2c:8f:28:d8:c0:80:ef:6b:24:29:
         f5:d4:b3:40:6e:32:4e:74:7e:e5:07:5b:2c:0b:ed:2a:b5:63:
         18:6f:c7:c0:7a:e9:a4:a4:21:c2:f7:ec:21:2f:67:f8:af:40:
         dc:27:e4:7d:6d:e9:4b:fa:be:82:e2:0d:a0:81:d0:c4:71:71:
         7c:3a:90:bd:66:08:74:1a:ef:74:29:e4:8f:05:3a:10:e0:52:
         f9:37:e2:d4:06:70:f0:b9:0f:53:02:95:90:da:97:5a:66:56:
         14:b8:79:1a:13:64:0a:ae:60:e6:42:ec:17:9d:a9:db:63:aa:
         53:d2:0e:0a:ec:6d:71:51:4d:c1:28:a7:b2:b7:6d:5c:28:8d:
         b6:88:a6:21:dc:71:dd:a5:d3:f5:3b:28:ed:51:29:39:a3:44:
         b2:a8:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:04:25 2025 by rpki-client