Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
File:                     Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft (raw, json)
Hash identifier:          O0wzNDD9lybBpMiOQdxW2CNpvCXKv6ZW61X6En1zxy8=
Subject key identifier:   2B:AF:3C:24:EE:E8:DC:CE:C9:A4:2E:3D:00:91:A1:AF:40:16:3A:22
Authority key identifier: 4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61
Certificate issuer:       /CN=4a883e94aa1451ba748d6a5bf175a43fe816e661
Certificate serial:       0196CB3BBF1B48F73F0BA8E7177289AC585A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
Manifest number:          6B
Signing time:             Tue 13 May 2025 20:00:12 +0000
Manifest this update:     Tue 13 May 2025 20:00:12 +0000
Manifest next update:     Wed 14 May 2025 20:00:12 +0000
Files and hashes:         1: Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl (hash: Q8U+igxJLI6oEi1uYD4RE8uw6Q6FVUlpoxNV9KqYuQQ=)
                          2: jzdzn8fNPZYhsNzLFvnNEAiNqfQ.roa (hash: CgAcBMHOHIF/zsicGTopucDznqKVIIzdoQQgNx76Mfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 20:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:3b:bf:1b:48:f7:3f:0b:a8:e7:17:72:89:ac:58:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a883e94aa1451ba748d6a5bf175a43fe816e661
        Validity
            Not Before: May 13 20:00:12 2025 GMT
            Not After : May 14 20:00:12 2025 GMT
        Subject: CN=2baf3c24eee8dccec9a42e3d0091a1af40163a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:4a:32:7c:a5:86:e1:d4:d1:f0:f9:7d:ca:
                    49:95:28:13:4a:e0:c3:b2:5a:82:76:dc:bf:29:d0:
                    d1:2a:39:ec:89:d3:7d:c8:fe:66:54:8d:67:a1:04:
                    c4:dc:cc:bb:88:a3:9f:9f:7b:49:46:8f:19:6e:d0:
                    95:86:cf:8f:81:5f:b0:a9:41:96:8b:f7:8b:b8:c2:
                    9e:e2:02:cb:a9:24:e1:60:9b:78:12:47:f9:38:98:
                    da:a5:2c:cc:ba:0a:37:84:cb:c1:f6:e0:92:15:0d:
                    6c:80:d0:3c:40:8d:a9:56:8d:30:63:81:f0:dd:ff:
                    ec:62:74:10:6f:27:a6:d1:da:5f:82:96:9d:d9:84:
                    f3:52:9e:3f:0d:69:82:e5:88:41:ef:1d:0f:23:9c:
                    9c:82:aa:1e:c7:4d:46:14:34:4d:22:28:18:ff:73:
                    8c:ec:04:32:dc:56:a5:f0:82:af:f6:96:c8:9f:72:
                    85:80:03:ac:58:57:0c:8d:d2:a2:31:96:a6:7b:bd:
                    5f:80:bd:95:ee:ff:be:e9:ca:dc:36:84:42:87:0e:
                    f0:dc:46:1a:0c:2c:1f:39:78:08:80:a6:94:48:c2:
                    8b:0c:0c:79:e2:dd:d6:9a:07:01:b3:ce:10:30:d0:
                    08:da:ed:d9:c9:e9:e9:63:27:ce:39:17:80:09:6f:
                    1c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AF:3C:24:EE:E8:DC:CE:C9:A4:2E:3D:00:91:A1:AF:40:16:3A:22
            X509v3 Authority Key Identifier:
                keyid:4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:46:6e:ed:69:cb:42:6c:6b:6c:1a:8a:33:a8:61:d0:33:5a:
         bd:61:82:de:9d:f7:25:ef:50:b2:83:7d:3c:46:9b:fb:bd:f6:
         76:31:82:5d:01:33:54:8c:61:f4:a2:d3:11:24:b3:ca:ba:b9:
         9e:ac:48:9c:f5:78:f2:4c:d3:37:06:70:05:87:f1:34:b6:17:
         5d:3e:2c:7c:81:ba:37:54:f1:c7:2d:0c:6f:b4:86:9b:c0:bb:
         5f:9c:09:e9:86:59:06:5f:fd:ef:3e:31:7d:35:01:52:60:c5:
         1b:ea:e3:5a:05:54:fa:ed:20:a0:02:05:ad:0c:96:69:33:c1:
         60:89:62:9f:9d:e8:6c:1d:6d:5a:71:88:20:3a:c8:12:d1:19:
         7d:cd:68:5b:34:42:ae:4d:7b:b8:9f:b2:70:2c:bf:61:a4:5d:
         46:83:78:3d:57:e3:fe:04:c4:b0:50:8b:e4:6d:33:80:df:a2:
         9d:fa:f7:ab:c7:8f:b2:5e:2c:49:c2:0b:26:ba:9e:f9:9c:b3:
         6b:70:d7:db:cf:dc:88:99:aa:1a:90:e7:35:dd:81:78:fe:4b:
         f7:60:97:2a:90:e1:fe:fc:f0:12:43:1b:16:77:21:57:4f:5b:
         88:71:90:fd:29:5d:30:b1:80:8c:20:ba:64:ac:ef:1a:1f:f9:
         88:30:1f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:36:32 2025 by rpki-client