Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File:                     SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier:          xetTtxmFImK7sCXWcAJKuWvnyMCKyaPrD8v/7AXhmmM=
Subject key identifier:   BE:24:F5:B6:D4:BF:7D:CA:10:C9:1E:99:6D:AE:98:E4:BA:BA:43:EE
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer:       /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial:       0197B7EA90AD053BFD8880F40EF056674E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number:          023A
Signing time:             Sat 28 Jun 2025 19:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:32 +0000
Files and hashes:         1: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: DybdFE8c34EwSQalsqqIcK9u/iBGsm335YZYYoYDgqg=)
                          2: q6dxHjXf_smDxFRqVKpoM4ZxcK0.roa (hash: 2V/9T0djEJLIxLCP3ZW6UZqNaP1jJrToYR6Petpt72A=)
                          3: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=)
                          4: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:90:ad:05:3b:fd:88:80:f4:0e:f0:56:67:4e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
        Validity
            Not Before: Jun 28 19:01:32 2025 GMT
            Not After : Jun 29 19:01:32 2025 GMT
        Subject: CN=be24f5b6d4bf7dca10c91e996dae98e4baba43ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:18:af:f3:b9:8a:bc:7d:59:1e:65:fe:fc:
                    78:d7:57:38:ab:98:8e:57:22:be:51:94:73:34:45:
                    4f:42:b3:bc:c2:51:18:bb:a6:74:e9:c3:c4:2a:4c:
                    a9:37:5c:b6:2b:81:98:be:83:29:f7:aa:1c:23:6b:
                    d8:a9:91:b6:f2:0f:47:df:98:6b:f8:18:74:e0:5b:
                    23:d1:81:13:24:ce:a9:29:e4:0d:f6:7f:ca:00:d9:
                    ee:68:c0:b3:d5:c8:ce:73:0e:ed:95:4f:aa:13:ea:
                    78:d4:d2:cb:7f:fe:f9:ae:04:9e:56:ac:dd:f7:95:
                    89:8c:3e:f9:d2:4a:f1:e3:6d:00:f4:2f:54:4b:01:
                    c7:4f:a3:bd:31:e3:ac:30:b7:c9:1a:45:b5:5a:6c:
                    fa:c4:57:87:d3:5c:d0:4a:c3:7b:35:bc:80:6a:80:
                    09:1c:a1:f9:46:1b:9e:a5:e4:85:8d:6b:47:b0:37:
                    12:9e:66:3f:7d:05:8f:a7:ac:a3:5f:00:c7:79:71:
                    da:4e:61:57:10:ad:55:14:df:64:22:7a:82:45:46:
                    3f:20:a2:44:59:b5:c4:58:a7:7d:b5:e0:b9:f9:17:
                    f0:35:d9:fc:5b:33:a6:97:84:ef:49:15:40:84:80:
                    53:1b:48:18:7c:4e:45:a7:14:9f:c0:90:25:13:72:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:24:F5:B6:D4:BF:7D:CA:10:C9:1E:99:6D:AE:98:E4:BA:BA:43:EE
            X509v3 Authority Key Identifier:
                keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1f:2e:93:ff:16:ae:b9:9d:fc:c1:d5:14:e7:a6:89:7e:a7:
         5f:f9:db:0d:06:b7:44:36:aa:80:aa:1e:fe:8e:5d:03:0a:10:
         27:a2:29:5c:13:59:62:e4:37:e6:d9:f6:38:40:3b:e1:44:db:
         20:df:39:dd:80:b5:47:14:52:05:eb:38:b3:e5:07:05:e0:2c:
         08:1d:78:c5:1a:12:b5:33:34:b4:d0:53:4c:d5:16:0c:ee:de:
         31:0d:ed:0a:25:14:e0:eb:6e:65:39:da:2e:3a:57:df:56:8b:
         0d:48:61:e3:94:03:a7:ef:23:de:00:d9:ae:57:fb:07:9a:ef:
         c9:cf:32:03:9b:dc:65:4c:b6:5e:49:93:bb:09:91:72:63:de:
         fc:0f:c8:f7:ef:b0:51:ce:a2:4c:68:5e:d4:5e:89:ba:70:16:
         38:6c:c2:1d:91:68:7b:be:37:d5:df:3e:b9:5d:ff:78:03:7b:
         55:af:1f:73:28:da:17:65:df:f2:d2:8f:85:04:3b:11:ed:5b:
         d9:8b:9c:49:c0:96:4e:43:bc:93:ad:e0:4b:31:10:ee:dc:41:
         28:69:46:28:aa:dd:2d:d2:74:99:b6:49:89:27:fc:64:b4:7f:
         bc:5d:72:76:2a:44:43:41:8c:84:6a:7f:76:79:53:a1:b5:7f:
         d9:c9:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:32 2025 by rpki-client