Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File:                     Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier:          K7/eITvZxbBB0onjz6Bs0bG0Jk9n2Vz+uiEUH4XEuFY=
Subject key identifier:   A4:83:C8:1F:F8:BE:0A:8B:58:89:CA:66:99:FB:5C:83:9B:4F:04:62
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer:       /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial:       0197B5FBC829F71E24B01CC6FC37C0478E09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number:          119A
Signing time:             Sat 28 Jun 2025 10:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:06 +0000
Files and hashes:         1: NSiBzROOhgmJ9ypJm8Za0IGQ3F0.roa (hash: o2v8vxJ4hYMUAZbmBnTv+Psah74MuG6cFMK+pUBuCMg=)
                          2: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: /L3hCgEUFpFSxE3g9xperdsgfDulDw7zxF4Uba+GYJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:c8:29:f7:1e:24:b0:1c:c6:fc:37:c0:47:8e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
        Validity
            Not Before: Jun 28 10:01:06 2025 GMT
            Not After : Jun 29 10:01:06 2025 GMT
        Subject: CN=a483c81ff8be0a8b5889ca6699fb5c839b4f0462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:ca:25:4c:76:df:e5:67:6e:55:0c:dc:12:
                    d0:e0:4c:ab:76:1a:4d:9c:79:dd:22:fd:fe:cb:b2:
                    6c:4a:8f:23:cb:6e:2d:69:56:c7:99:1d:2f:fa:b1:
                    37:81:af:40:57:99:45:41:52:b0:4d:d1:af:df:e8:
                    53:63:fd:2e:9f:9a:ff:15:9f:1f:e8:74:58:64:9c:
                    7a:90:5d:de:db:74:4b:da:08:ae:3e:0e:02:8b:33:
                    09:47:49:54:8b:a5:07:28:1a:54:dc:0e:c4:4a:ca:
                    57:7a:0f:01:f9:9b:6e:77:a3:26:de:96:4a:a5:58:
                    4f:58:60:33:8d:4d:ba:97:57:e5:fe:9d:71:66:b8:
                    83:c4:15:5e:37:e0:0b:bb:da:a5:77:83:76:45:f0:
                    78:fb:fe:49:9b:2c:6d:1c:81:21:1e:a5:55:3e:6c:
                    dd:bd:55:fa:ae:ce:e7:2f:af:e7:6b:16:23:f1:12:
                    a4:04:a6:dd:ef:af:f4:30:ec:e0:ee:5b:27:07:15:
                    f5:00:bf:16:f5:29:c4:71:1a:63:29:ce:04:91:e7:
                    54:ad:0d:6b:0f:54:fd:b9:75:8c:9c:dc:48:31:c5:
                    6c:1f:9e:48:43:4a:d5:3e:48:f0:31:2c:b3:2c:7c:
                    03:25:5a:a7:6e:37:dd:84:e7:0f:50:7d:3e:b3:15:
                    ec:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:83:C8:1F:F8:BE:0A:8B:58:89:CA:66:99:FB:5C:83:9B:4F:04:62
            X509v3 Authority Key Identifier:
                keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:96:c0:10:28:de:b4:69:fc:70:51:3d:d4:2a:d8:1c:c4:
         5a:03:50:4a:24:98:1f:9e:aa:a9:fa:30:49:65:1f:10:58:60:
         4d:bc:2a:e5:7f:a2:d3:84:3e:c2:f7:37:5b:35:3f:89:28:57:
         1e:0e:cb:30:05:f9:be:0c:7a:6b:b3:fe:a1:e0:2d:13:03:89:
         2a:37:66:c6:fb:dd:e7:87:1c:3e:38:7c:6c:18:9f:59:dc:fb:
         d3:82:4b:2c:6c:40:21:e7:c1:00:17:06:e0:ff:ee:a2:fc:67:
         0a:ba:83:e7:b5:44:9b:dc:14:a4:00:ec:e8:9b:c0:b1:f3:20:
         5a:bb:87:33:03:ec:85:94:4c:78:d6:ef:c8:e0:80:81:c5:d0:
         37:bd:44:5a:d7:7d:28:73:8b:54:12:4f:0a:d4:bb:cc:02:53:
         65:ce:b6:f3:77:4b:2d:fa:28:16:77:88:9d:6f:34:25:fa:1b:
         01:f6:95:67:ae:25:35:42:8f:54:71:fa:71:b5:22:03:a7:9c:
         16:7e:87:59:23:71:f6:36:01:c6:d3:41:4e:9c:2c:f9:32:21:
         c0:f4:de:f5:0c:06:38:90:84:cb:77:fc:1b:c2:35:0f:00:ad:
         d8:c5:1a:d1:4b:52:d5:e6:1a:08:3e:a8:99:73:7b:91:c0:48:
         f2:15:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:45 2025 by rpki-client