Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          BlcYGam1fmz+wXesK/625D7QtxaZwd8lkLqN43SV/oI=
Subject key identifier:   F1:08:43:F2:9C:C4:27:02:BB:8B:D1:E5:73:CB:D7:E7:D7:75:0C:13
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       0196B7473E5FF523A5B04098275E4906CCE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          1440
Signing time:             Fri 09 May 2025 23:00:21 +0000
Manifest this update:     Fri 09 May 2025 23:00:21 +0000
Manifest next update:     Sat 10 May 2025 23:00:21 +0000
Files and hashes:         1: 2p_ZO09LakS0A7u5Qz0wGibD5fU.roa (hash: dieDhkHaU+F1D9ZZPlcY6giEpQMREkK77VG8/1P3jjc=)
                          2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: ECiy4CpmSHKudDs6cbyLu+2ecPCSxUV4WDsYXaMAZtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:47:3e:5f:f5:23:a5:b0:40:98:27:5e:49:06:cc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: May  9 23:00:21 2025 GMT
            Not After : May 10 23:00:21 2025 GMT
        Subject: CN=f10843f29cc42702bb8bd1e573cbd7e7d7750c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:96:31:30:a2:19:02:a7:59:0e:b0:05:a8:
                    96:04:ab:ce:a3:e8:47:7a:f1:11:c8:64:92:3e:6e:
                    9d:b3:68:ca:90:3e:9e:55:42:c0:e2:a0:62:42:83:
                    4e:52:b4:b3:fd:06:68:02:c2:55:d0:70:6f:c6:13:
                    50:57:e0:97:d2:40:cb:ab:69:6f:14:44:3f:10:8e:
                    0e:06:2e:3d:9f:11:18:d2:37:de:58:55:a0:d3:e6:
                    f0:0a:84:3e:91:31:45:35:db:0d:05:8a:8a:0c:3e:
                    46:a7:0e:ea:0b:2f:04:14:cd:25:bd:06:9a:d6:cf:
                    ca:9a:c3:ee:47:71:0a:46:f7:b4:25:f1:a8:f8:09:
                    05:8c:fb:af:50:4f:28:d7:f9:c6:7b:aa:d4:92:db:
                    03:ec:8e:42:b6:1c:47:0a:5b:dd:b8:3a:45:1b:85:
                    44:fa:e3:91:88:4f:40:aa:a7:dd:3a:cb:28:05:da:
                    bd:e3:62:3b:76:e5:4d:07:56:a3:48:bd:7a:da:07:
                    bd:3e:c1:81:03:e7:ff:10:a1:99:ec:18:1c:ac:ec:
                    2e:2d:2c:59:bf:08:7b:d6:a8:ba:77:f0:ca:b4:17:
                    9e:b1:79:37:8f:13:42:8b:bf:2a:52:3f:08:10:96:
                    04:57:67:26:b9:b0:fe:2f:9d:e6:16:6f:f5:27:23:
                    81:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:08:43:F2:9C:C4:27:02:BB:8B:D1:E5:73:CB:D7:E7:D7:75:0C:13
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:33:69:4a:26:e9:86:ae:19:63:f8:bc:73:1b:ad:6c:55:c9:
         ea:24:d3:4f:5e:63:3a:75:cc:0d:d3:ca:a3:1b:9f:0f:71:e3:
         0c:d8:be:d4:49:03:aa:49:da:e0:5a:9e:44:2b:c2:e3:4e:c1:
         e7:39:4a:50:6d:9a:cf:92:59:01:2e:da:db:9e:9e:97:2b:0f:
         66:cb:df:e5:1e:59:06:85:40:d8:c6:a2:2a:95:4d:b6:80:99:
         68:13:69:82:aa:b0:63:51:a7:bf:24:de:1e:c4:bd:e9:32:23:
         f7:70:18:36:5a:eb:e6:5f:fc:30:50:ec:58:75:d7:6d:a0:99:
         ea:26:a0:a5:b7:54:73:c9:fe:85:1a:27:18:a3:a6:c2:78:bb:
         78:d7:48:09:be:1c:46:80:63:a9:b8:4a:5e:0d:20:c1:4c:01:
         1f:97:cb:7e:cb:33:63:9c:a9:a4:99:9f:4a:e1:2e:5b:b6:4c:
         00:a6:1d:dd:8f:49:a1:b7:9b:ae:f6:e6:1a:a6:6f:a2:19:72:
         49:55:f4:9c:ad:e6:42:cd:d8:65:fc:0f:33:fe:b0:d9:4b:fc:
         9e:58:6e:10:6a:b2:c8:62:bd:6a:d4:41:a3:95:aa:29:69:bb:
         40:2a:24:b3:9b:83:53:42:8d:a3:e0:62:c1:c5:32:19:38:ef:
         85:b4:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:00:35 2025 by rpki-client