Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          ugoeH0Zg80FWB3Swgj4tpPYx1RKEfXij87pjs+KWKeU=
Subject key identifier:   F6:B3:B1:5C:0A:4D:B4:74:BE:B5:04:C0:31:68:31:60:1B:41:9D:6C
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       0196C15D807EE4A3788A6E122D8C75C42D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          0E2F
Signing time:             Sun 11 May 2025 22:00:52 +0000
Manifest this update:     Sun 11 May 2025 22:00:52 +0000
Manifest next update:     Mon 12 May 2025 22:00:52 +0000
Files and hashes:         1: KSNAER4Mydp8HyU9sU8i1lEowuM.roa (hash: k7Cs9APUIR/QxVIdcXpLwc8DXRZq1n3B8dEj7Z0wTKs=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: jodM2mP0VUL9rMCv7GQWw4gWEw27mfzklNV46wq4daA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:80:7e:e4:a3:78:8a:6e:12:2d:8c:75:c4:2d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: May 11 22:00:52 2025 GMT
            Not After : May 12 22:00:52 2025 GMT
        Subject: CN=f6b3b15c0a4db474beb504c0316831601b419d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:84:fc:91:9e:07:d4:d3:f9:8e:aa:af:17:
                    b8:52:f6:d6:3c:9a:2e:d0:ed:87:e9:ae:c5:70:74:
                    5f:47:54:b6:c7:39:e8:55:55:1e:65:36:30:8c:98:
                    e3:46:ce:c9:0e:47:44:96:2d:06:e0:28:a9:6b:53:
                    f1:55:32:7a:63:af:ed:03:b8:2d:1d:00:f1:ff:2e:
                    8e:74:bb:cd:af:81:2b:86:2f:d0:59:97:34:9f:15:
                    1f:fa:a9:ba:78:53:f0:0b:de:9c:10:21:90:a9:b4:
                    03:76:f6:50:91:2a:66:73:2f:27:99:ac:b0:e5:5f:
                    00:e2:4d:09:60:11:99:11:9b:33:ef:c0:3b:7a:cf:
                    6f:c4:93:c2:10:cf:b6:a7:af:73:4b:a6:17:b9:6f:
                    86:87:a1:ea:06:7a:02:8f:36:4a:df:1c:d5:ee:09:
                    e8:ad:1f:96:2f:8f:18:bd:e6:63:a0:47:30:15:29:
                    fb:85:6e:ff:15:85:0f:89:dc:69:d8:ad:39:b7:3f:
                    6a:15:8d:62:83:26:b8:5c:43:72:be:07:e4:9d:df:
                    cd:42:4b:93:0c:8e:8c:3d:23:ed:a1:31:7f:fd:53:
                    d3:96:26:12:d7:9a:d3:8f:6f:7d:55:14:75:e8:9e:
                    13:f7:33:f1:36:6e:c7:3e:d6:c8:f8:5d:3c:d3:64:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B3:B1:5C:0A:4D:B4:74:BE:B5:04:C0:31:68:31:60:1B:41:9D:6C
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:26:bd:d2:4c:8b:11:da:80:2a:f2:07:bd:20:db:d7:c8:fe:
         f7:45:71:0a:b4:a3:49:cb:d8:89:ad:ad:c6:78:92:4f:27:7e:
         66:ce:f4:c6:37:c4:41:c1:ea:48:2a:9d:f3:f8:d8:91:a8:2f:
         e8:69:a9:d1:7e:a5:4f:9f:19:cf:50:ab:cf:e8:2c:15:38:41:
         8d:76:86:4b:5b:21:12:ca:b9:97:94:be:8f:71:a3:1a:19:9c:
         57:b1:87:8d:a2:a7:21:10:cf:7e:8f:5c:01:fc:a0:70:1b:8f:
         5d:5a:9e:75:44:2c:5e:2a:a6:72:4e:38:13:4e:7a:cf:cd:1c:
         c4:8f:fa:b9:8f:9d:79:37:c8:c4:0a:08:ea:fe:54:5b:60:b6:
         5e:dd:cf:6e:9d:82:70:31:5c:96:54:b9:8d:78:df:d3:c3:72:
         e7:e9:80:99:ce:1f:53:27:89:e3:fe:4c:49:c7:55:0c:63:22:
         b3:a1:3f:a6:c5:c3:15:af:5f:49:17:d6:7d:13:e9:76:26:a2:
         d4:99:bc:12:f8:8a:97:79:93:90:91:15:69:0e:0c:60:3b:24:
         c2:29:0b:db:97:20:b3:2d:fc:7e:21:11:fa:12:99:e6:0a:1b:
         4c:78:cf:44:b7:76:5e:5c:8e:9c:9c:10:3a:50:2f:6a:e7:2f:
         54:56:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:30:33 2025 by rpki-client