Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File:                     sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier:          BYmV5RFqglihTsNGZ43XxdxTxilp0QlsUP8jjA3ZReI=
Subject key identifier:   72:C9:6A:91:FF:26:02:89:E9:D7:E8:00:72:24:50:C9:C6:32:31:BA
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer:       /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial:       0197BF35E462A25920112ABC50D464B90628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number:          154C
Signing time:             Mon 30 Jun 2025 05:01:09 +0000
Manifest this update:     Mon 30 Jun 2025 05:01:09 +0000
Manifest next update:     Tue 01 Jul 2025 05:01:09 +0000
Files and hashes:         1: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: AVYyOLK3t07kngCkPapKnHhUyBvDQVSw5FkCrR7SAf4=)
                          2: y5aXUBKmtNndMqsBfDwB9q7N1JM.roa (hash: ZtFZGojw6I1xjiF5OKZdPGSKt7iqS59zSaAIueVvxRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bf:35:e4:62:a2:59:20:11:2a:bc:50:d4:64:b9:06:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
        Validity
            Not Before: Jun 30 05:01:09 2025 GMT
            Not After : Jul  1 05:01:09 2025 GMT
        Subject: CN=72c96a91ff260289e9d7e800722450c9c63231ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:e6:46:cb:10:bb:95:11:dd:f3:cd:a2:c1:
                    5d:2c:41:19:d1:6a:5d:cb:44:3a:66:2b:52:6e:e1:
                    f4:11:47:bb:69:eb:85:b9:07:3b:94:d9:16:45:7f:
                    37:68:b2:1f:51:02:34:ab:90:b0:bf:42:cb:75:f3:
                    74:82:91:26:1d:6b:aa:e8:27:09:88:b5:fb:0e:91:
                    a8:08:cc:b4:71:93:85:bf:e7:a1:52:ba:11:4e:e6:
                    09:b9:81:ca:7b:36:70:5a:df:09:cc:d9:ea:3e:48:
                    d2:26:da:d3:e6:07:55:27:71:a0:28:23:f4:fc:74:
                    3e:a9:14:e3:10:39:79:f3:2a:78:7e:04:b3:33:4e:
                    bb:fd:c2:16:07:36:c3:03:e8:09:66:1d:46:47:c6:
                    ce:44:3e:c2:4c:38:b4:07:aa:8a:fe:43:29:3f:ba:
                    09:a5:99:fc:8a:4e:73:15:cc:9c:df:ed:11:df:e1:
                    82:3d:11:a3:4e:45:24:9f:e3:e2:8b:36:45:34:32:
                    27:b2:fb:a4:a8:a7:55:d9:1f:1b:a7:68:f9:62:10:
                    59:3c:45:8b:85:43:b5:20:7e:b4:8a:3d:a2:0c:86:
                    56:5d:a7:c0:7d:7c:03:4a:89:80:a7:c5:eb:53:4f:
                    96:22:e9:50:68:5b:d2:fa:62:7c:b8:b6:f3:63:13:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C9:6A:91:FF:26:02:89:E9:D7:E8:00:72:24:50:C9:C6:32:31:BA
            X509v3 Authority Key Identifier:
                keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:55:c3:81:c2:b3:1d:26:d6:3c:78:01:dc:9b:c4:54:01:b6:
         c2:22:fa:ba:6a:89:09:7b:bc:80:ce:79:c8:ed:ef:0d:00:b3:
         04:21:a9:b0:31:ab:67:02:95:fc:e4:6f:9d:35:15:a1:4a:dc:
         41:e3:00:8d:dd:a0:5a:5d:d3:11:5d:7d:8c:68:e4:66:35:d2:
         73:98:8c:9e:ed:c5:8c:cb:35:b1:67:34:7d:11:8e:aa:1a:de:
         a8:a8:4c:09:28:89:c2:b5:18:0e:fb:43:84:37:91:bd:3b:3d:
         a8:52:b5:53:a6:03:58:bd:fc:0b:6d:36:c1:1a:62:eb:a6:2e:
         9a:65:44:dc:f6:84:e9:2d:be:de:ff:e2:d2:bc:00:9a:56:ba:
         76:c6:5d:17:7e:f7:76:03:36:66:fe:7a:24:c9:c2:de:b4:35:
         e7:11:72:1b:27:c2:f4:03:bb:86:1b:9f:5c:fe:0c:53:02:98:
         c5:bf:5c:aa:b4:ae:6d:d0:d7:61:3f:51:b1:10:24:1f:a5:81:
         95:c9:d3:89:f5:7c:f8:2e:12:76:2b:fd:15:40:eb:86:ad:cb:
         91:93:50:44:a7:1b:e5:2b:47:bc:19:94:55:99:4d:58:2a:5b:
         2c:c5:f5:ba:3f:09:30:9d:52:04:22:90:68:2c:02:49:ad:47:
         eb:9c:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:48:50 2025 by rpki-client