Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File:                     SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier:          b8pi5VKC2izX71KAZ4Sqrxf5T0agyH2RenB8+2VDpdo=
Subject key identifier:   3E:75:78:C4:07:D1:45:0D:0A:0F:D7:5B:F1:D4:F5:F3:42:F5:A9:2A
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer:       /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial:       0196B935EECF1CD1F5ED7526083CA844D910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number:          038D
Signing time:             Sat 10 May 2025 08:00:41 +0000
Manifest this update:     Sat 10 May 2025 08:00:41 +0000
Manifest next update:     Sun 11 May 2025 08:00:41 +0000
Files and hashes:         1: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: ka/ONk8Y8gYgUtqoxUMV4v2pZn+umi3hWaiqUK4Rxrc=)
                          2: swB_r0IFBPm9Iemed8mXUpcDjzs.roa (hash: 4f+/BeqDILlbNbuoHwEa+IBP8dJNYECac82k/mVW3hE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:35:ee:cf:1c:d1:f5:ed:75:26:08:3c:a8:44:d9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
        Validity
            Not Before: May 10 08:00:41 2025 GMT
            Not After : May 11 08:00:41 2025 GMT
        Subject: CN=3e7578c407d1450d0a0fd75bf1d4f5f342f5a92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:07:34:8c:99:23:37:b1:f6:df:8b:70:6a:
                    a3:4d:52:8a:e4:79:6c:82:4f:07:6d:08:c9:37:5a:
                    46:a6:fb:a0:78:ca:8f:06:27:4b:f5:d9:6e:53:6e:
                    13:f8:70:f8:e0:05:df:a1:fb:0b:f5:50:81:f2:54:
                    db:27:55:20:a0:ff:4e:bf:d1:67:dd:35:4c:09:2c:
                    50:24:0a:06:c4:14:bd:fa:33:1f:d7:42:bd:20:f3:
                    c1:98:26:67:2b:49:b2:69:26:7c:d3:04:13:30:70:
                    18:03:77:b5:94:3c:f9:38:11:aa:bc:1b:4f:a0:19:
                    ce:56:3e:98:50:35:89:03:5c:60:1a:79:26:f0:43:
                    2c:66:39:84:4d:22:31:04:6b:02:50:bb:f9:5f:0c:
                    7f:15:26:35:96:f1:16:57:48:f4:bd:09:06:39:dd:
                    86:5b:54:ae:ea:e2:ff:c6:3c:2a:d5:a7:15:9f:b1:
                    f0:b6:ed:c2:7c:9c:cc:63:89:d1:98:d8:90:ed:de:
                    6f:78:f2:b6:40:80:4c:d0:b3:92:ab:fb:4f:15:08:
                    a3:af:c2:21:ea:8f:66:4c:0d:10:bd:0b:f8:09:c4:
                    fe:b9:2d:e0:2d:1f:e4:f0:4b:3b:eb:60:f6:9c:86:
                    05:6e:62:97:a9:b7:99:a4:64:f5:61:d8:64:9c:e0:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:78:C4:07:D1:45:0D:0A:0F:D7:5B:F1:D4:F5:F3:42:F5:A9:2A
            X509v3 Authority Key Identifier:
                keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:da:6c:df:b7:99:8b:8a:dc:d0:bf:39:dd:21:37:cd:00:b2:
         14:2c:40:6e:fd:9d:6e:73:5f:35:b0:6c:df:60:64:0f:56:bc:
         02:b5:ae:c6:22:fa:7c:03:dd:f3:df:e5:b8:4d:88:3e:fd:c1:
         6b:4c:ab:d5:ea:33:21:46:e7:45:f2:ca:3d:fb:9c:95:fb:e5:
         d7:05:e5:05:23:69:5f:20:69:58:72:52:b3:3a:26:7f:f9:29:
         53:e0:00:f2:7f:23:62:9b:ca:ca:14:c9:ae:b9:ff:c4:cb:d0:
         ce:94:3b:a6:5f:d1:53:08:86:eb:46:f4:65:b5:8f:6f:eb:72:
         b6:7f:ac:26:bd:f5:e1:44:66:ba:b9:d5:50:c2:4a:1f:4e:6b:
         12:69:dd:69:26:44:ae:85:b3:08:5e:0f:1b:8b:d1:8b:3a:3b:
         d1:e1:49:cf:72:3d:fa:bb:ef:fc:d3:f1:7e:fc:b2:10:79:c0:
         07:33:52:5d:4a:2c:f2:49:75:06:90:fe:95:68:28:d9:fe:21:
         81:9e:c7:dd:24:07:53:11:22:7b:42:9d:47:e6:7a:30:44:ca:
         46:33:6c:d4:11:6b:9f:b6:c8:c2:b9:60:97:26:11:8a:b9:79:
         68:6e:11:72:ca:6e:bf:af:21:a4:b9:07:6c:03:cd:95:20:ca:
         ad:2e:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:45:34 2025 by rpki-client