Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File:                     SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier:          +1lWVXQQRRKDpH8iWFW70roQmaXk30Ky7oTubV9Z7cc=
Subject key identifier:   D6:83:15:9F:1F:83:89:73:EA:3D:BE:4D:CF:F2:83:1F:8B:F4:E4:40
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer:       /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial:       0196BECA25A60F8D36FEA295F260BC5B6DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number:          01B9
Signing time:             Sun 11 May 2025 10:00:41 +0000
Manifest this update:     Sun 11 May 2025 10:00:41 +0000
Manifest next update:     Mon 12 May 2025 10:00:41 +0000
Files and hashes:         1: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: LTk4IhbOcrNkST+hiHevh4Xw4CIiCPzBGuS8yIG0xEc=)
                          2: q6dxHjXf_smDxFRqVKpoM4ZxcK0.roa (hash: 2V/9T0djEJLIxLCP3ZW6UZqNaP1jJrToYR6Petpt72A=)
                          3: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=)
                          4: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:ca:25:a6:0f:8d:36:fe:a2:95:f2:60:bc:5b:6d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
        Validity
            Not Before: May 11 10:00:41 2025 GMT
            Not After : May 12 10:00:41 2025 GMT
        Subject: CN=d683159f1f838973ea3dbe4dcff2831f8bf4e440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:e0:55:84:cc:3a:74:8e:1f:60:c4:0e:c7:
                    51:19:3f:07:54:35:f5:6f:cb:63:f7:38:0a:c5:da:
                    9e:8b:ab:b2:6e:f4:0e:e9:4b:1f:bd:d6:d1:51:45:
                    84:a2:64:b2:d4:26:e4:9f:28:a2:12:d5:97:6c:8e:
                    cd:2e:aa:76:b3:fe:bb:d8:1e:0f:2a:57:02:be:62:
                    b6:8f:e5:f8:01:d2:f3:01:2b:25:ce:4c:57:58:78:
                    b5:a3:43:9f:b7:4a:a2:ba:49:10:1b:c3:b2:72:7b:
                    c6:a7:a7:b2:3c:a3:30:2a:14:4d:50:25:20:de:8a:
                    93:a9:12:ee:4b:14:ce:07:27:52:62:db:bb:00:0e:
                    3f:e6:93:fc:79:9c:d0:b0:ba:7b:71:b7:36:0c:1e:
                    99:c3:22:de:b7:b7:10:1f:ed:8d:65:6e:53:3e:77:
                    7c:e7:51:b2:20:b5:04:13:8c:8c:07:f0:ce:ff:0e:
                    b8:eb:15:9b:66:9b:c1:83:95:64:af:19:f8:a0:40:
                    47:85:ff:2b:78:c3:cf:e0:55:e9:e5:40:ab:23:72:
                    39:54:2a:fe:81:86:5c:1f:b8:67:63:ee:b9:29:f1:
                    6d:f7:59:2f:2b:d3:91:64:74:be:a5:ff:66:ed:2f:
                    91:be:7e:77:da:cc:a1:8f:2c:4d:74:3f:ae:e5:ed:
                    9f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:83:15:9F:1F:83:89:73:EA:3D:BE:4D:CF:F2:83:1F:8B:F4:E4:40
            X509v3 Authority Key Identifier:
                keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2e:4e:a1:3c:d7:04:41:d7:b6:ef:eb:dc:ea:79:21:cf:f7:
         b6:b5:b7:a8:0f:2d:5b:e0:8d:e3:36:c1:47:c1:93:52:b1:48:
         30:8b:2a:21:5d:91:21:88:69:a8:57:13:d3:0d:37:db:dc:26:
         92:5a:3d:56:90:dc:64:c8:97:47:5a:54:a0:bf:52:3f:db:fa:
         99:ca:2d:c5:01:de:c9:4a:27:c2:b8:67:56:92:46:75:19:d1:
         c1:4b:fe:c4:ac:90:bb:e8:e1:22:57:3a:33:2b:a1:a8:d9:3d:
         ef:ea:fd:85:c8:f9:c4:e4:a1:76:a9:7e:16:9d:03:ff:50:9a:
         9b:68:16:5a:8a:06:f0:66:b8:32:62:12:c1:e8:1b:7e:50:82:
         ce:63:49:77:bd:55:f8:b0:fb:b4:81:f7:83:f2:d8:ab:44:74:
         aa:40:58:ce:21:7f:90:e0:c5:d8:ba:0c:cf:cb:39:99:d6:e2:
         53:f6:d8:f3:12:38:06:03:fb:66:09:7c:2f:9c:f1:c9:51:a0:
         ad:80:82:5b:5f:25:2f:06:71:c7:40:ac:89:dd:b0:ae:98:83:
         ee:85:c4:35:03:77:af:41:72:01:ef:37:13:b9:c4:5a:34:b5:
         d0:ef:d9:eb:4b:d7:f1:cd:35:20:05:53:9b:c4:2d:09:a7:e3:
         e2:78:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:08:53 2025 by rpki-client