Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File:                     SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier:          Pjy/cYP86vBPc60nS5xXeNQSCgatHMtdMBT8fC+nBoA=
Subject key identifier:   BE:51:7A:A4:5A:2B:6B:BA:F6:4F:DC:32:3F:32:CF:64:C5:E9:68:C8
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer:       /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial:       0197B5C4CEA15182F9F38EB31284F0B57E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number:          0B0F
Signing time:             Sat 28 Jun 2025 09:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:03 +0000
Files and hashes:         1: FZ5EZpDq-K0XA4SjrzGHyd153to.roa (hash: b4KiX1j/3r//4ngjLPvb5RfQAtdM3BaY0Jf4yPv0wJk=)
                          2: NVd8LXx_N2OnP7Dz0qYfp0BrwyE.roa (hash: KXS5t23U3JN9IkH4G9USA7r6qnruCVWmREWySxRe2Ns=)
                          3: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: 4TErMQ6WkRkXlVpT7QKGAnYVefh7RVjpp4oE4uBA+xA=)
                          4: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=)
                          5: u7FYseYTvFuik1kkZdQXan5NUT4.roa (hash: OILWNi9mv9AwF8S+yDdOr81iUCDmwjfaxbEGwvX0caY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:ce:a1:51:82:f9:f3:8e:b3:12:84:f0:b5:7e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
        Validity
            Not Before: Jun 28 09:01:03 2025 GMT
            Not After : Jun 29 09:01:03 2025 GMT
        Subject: CN=be517aa45a2b6bbaf64fdc323f32cf64c5e968c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:81:d4:23:41:a8:6c:e0:e2:a3:91:11:4d:8f:
                    e5:03:c5:73:e3:51:2c:7f:28:14:23:da:9d:e6:4c:
                    a2:6b:70:f2:b5:fd:5c:de:41:86:08:d7:08:de:5e:
                    07:d8:89:74:a5:3a:7d:a3:66:ff:c5:7e:43:40:5c:
                    4f:dc:08:fc:4c:b4:ef:03:48:2c:93:7c:68:d0:d2:
                    b6:da:e4:98:67:f7:ef:e5:02:44:b8:84:01:f5:40:
                    93:a4:07:e7:22:c3:0f:88:81:99:c7:07:1b:af:81:
                    93:7f:41:92:8a:1f:2f:f5:4f:96:95:47:24:7c:91:
                    da:2d:ca:d6:1d:7c:37:b6:19:60:73:97:58:ee:e7:
                    db:69:1e:fc:bf:cd:fb:29:21:c7:0b:6f:4e:45:a8:
                    ae:cb:b8:69:54:77:b0:73:70:a7:4c:95:35:43:a4:
                    60:3b:46:c7:c2:01:e2:6d:53:8f:94:b0:5c:77:0d:
                    9c:66:7a:64:c1:1c:7f:ef:97:54:71:8a:40:4b:6a:
                    e9:3f:b0:62:f9:32:8a:02:fa:94:b4:7b:d5:17:9e:
                    dd:30:3c:ed:9c:26:a7:b0:71:2b:46:ac:db:b4:7e:
                    69:91:4c:64:e0:e7:d2:81:f9:fb:c3:99:32:38:5e:
                    67:7c:13:12:d4:7b:8b:ea:3a:59:e6:b5:e4:0f:6f:
                    90:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:51:7A:A4:5A:2B:6B:BA:F6:4F:DC:32:3F:32:CF:64:C5:E9:68:C8
            X509v3 Authority Key Identifier:
                keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:42:47:9f:39:f1:25:95:17:65:6b:cc:ee:2f:0b:a9:75:e4:
         40:44:82:e6:f0:d4:31:8c:0c:53:a4:ec:dd:22:22:31:b2:1e:
         64:8c:26:34:35:03:1e:13:ab:b3:09:15:8d:20:8e:81:2d:1e:
         37:64:52:ba:ac:5b:21:6d:60:85:4a:ac:38:06:a6:ac:a2:62:
         30:7d:82:cc:53:83:5e:c2:7b:34:42:58:39:82:a4:18:55:40:
         17:5b:3b:8b:59:47:8d:00:83:53:8e:8a:76:a1:cc:aa:6a:32:
         f5:4b:7a:53:04:1a:3f:22:f7:5f:75:50:e6:b8:fd:7a:08:32:
         d4:b2:a4:d3:42:5a:e7:f8:b4:11:b9:96:e9:20:12:ce:f5:e8:
         27:d2:57:d0:7e:a4:c1:3d:ef:34:90:a1:c4:35:e7:62:e3:3e:
         4b:0a:2e:96:14:25:74:84:3c:ab:a5:f6:f5:7a:85:35:4a:52:
         c8:fa:78:08:af:d3:eb:04:15:f8:13:54:d2:c1:55:9b:a3:7a:
         91:a0:71:b9:77:de:58:e7:1e:52:b4:84:f1:ad:e9:e3:66:b5:
         ef:d0:36:d2:da:98:e3:eb:bc:b7:ea:37:27:9d:98:e3:b1:7f:
         d4:05:35:76:e4:06:97:2d:19:a4:e0:3d:a9:98:b3:02:6f:e9:
         13:30:b0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:03 2025 by rpki-client