Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File:                     d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier:          FcJC66uSe5ypL6QVOcMdzQmVNeacHruP57Cwi79FQlU=
Subject key identifier:   E8:D4:8E:D7:B8:ED:7E:A3:04:6A:EA:0A:48:F9:62:ED:AA:77:20:A7
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer:       /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial:       01973918D9327B1419CB7AE2526742A94A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number:          10A2
Signing time:             Wed 04 Jun 2025 04:00:19 +0000
Manifest this update:     Wed 04 Jun 2025 04:00:19 +0000
Manifest next update:     Thu 05 Jun 2025 04:00:19 +0000
Files and hashes:         1: FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa (hash: 19Vo/+e85FEDOozBk9ulyjhvlWCZUEMrSObfkurwei4=)
                          2: bGBL61Pb5C5jQn9lTt04zeAidWQ.roa (hash: tcI+1ZDPgb0dQJ/mWEWyrYgZXPfZZ/VnqvsqqlmCxEY=)
                          3: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: BuZStsdc0+JY4Kbx07Z9QUKH+rzasA8pSU1PmdLI8vs=)
                          4: kfH4Hfcw2DAA4uCH3S-0NOLLLIE.roa (hash: +ssFltk6eznRSfe1ZkEA/pnveLfuNyk/DPp5U5STMlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:18:d9:32:7b:14:19:cb:7a:e2:52:67:42:a9:4a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
        Validity
            Not Before: Jun  4 04:00:19 2025 GMT
            Not After : Jun  5 04:00:19 2025 GMT
        Subject: CN=e8d48ed7b8ed7ea3046aea0a48f962edaa7720a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c5:a7:01:4d:af:78:fe:5e:6c:a1:60:1c:91:
                    c9:b4:2d:5d:e1:8d:c1:b5:c7:18:4a:6e:d9:30:f8:
                    32:83:23:49:a0:c0:bd:a5:48:fc:1b:00:b2:13:54:
                    76:68:87:a4:d2:54:a1:f5:05:30:39:f1:6d:b8:3c:
                    48:a6:f4:21:8e:6c:86:5e:36:ac:a4:87:60:81:2a:
                    ee:3d:ed:18:b4:18:17:92:e2:1a:2e:23:67:bf:5e:
                    50:0b:52:e2:c3:cb:4f:9e:95:4a:56:ee:2c:67:0f:
                    42:51:18:f2:72:d3:e1:bc:86:f9:b3:37:df:2b:b1:
                    a4:38:01:3c:bb:4e:44:59:e0:bd:50:e5:e6:02:27:
                    95:b0:10:ac:1b:89:d8:cd:1f:5e:21:93:1d:8b:1f:
                    0e:0a:9b:58:63:8e:cd:75:54:47:d9:e5:aa:b3:fc:
                    c4:b8:e1:2f:01:8d:b1:bf:a2:e5:84:5f:25:95:51:
                    08:a0:21:c5:56:5c:76:ea:0e:35:ef:8d:d0:72:39:
                    4a:e3:36:da:a0:63:e6:59:d1:fc:84:ae:66:25:75:
                    fe:d9:fe:8c:04:b0:e3:f1:c3:f6:82:b1:0c:75:e4:
                    19:22:7c:4e:9e:39:18:e9:29:49:de:d2:f9:81:96:
                    61:64:04:6e:b5:87:27:93:54:ca:ab:df:f0:d1:fc:
                    57:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D4:8E:D7:B8:ED:7E:A3:04:6A:EA:0A:48:F9:62:ED:AA:77:20:A7
            X509v3 Authority Key Identifier:
                keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:af:86:a2:1b:76:df:36:19:e9:94:55:b1:5e:73:0e:de:51:
         ac:b0:f2:71:71:28:91:9e:2f:69:6a:ef:4b:7d:49:98:b4:cf:
         c0:4c:db:2c:52:3c:3a:d0:6b:c1:f5:0b:dc:75:f8:16:4d:27:
         c4:91:a9:e8:f8:ec:d6:b2:05:4b:1c:37:71:a2:58:55:74:cd:
         4e:52:ba:ef:59:a3:a9:53:4e:b5:84:b4:8a:9c:f0:2b:8f:e3:
         88:4e:97:98:6d:83:7a:ed:a2:61:72:12:3c:80:e4:81:20:09:
         69:4f:33:42:0e:fc:90:5d:a6:e1:32:f3:20:63:d5:3d:b1:57:
         88:22:b8:a2:ea:e3:f0:bf:71:4f:0b:25:53:75:cd:39:2f:1c:
         2d:c0:8b:cd:a2:0a:e6:c4:7d:c7:13:22:4f:28:74:8e:39:eb:
         11:54:7f:54:58:b8:57:8f:0c:77:b3:0a:33:ad:72:6b:aa:54:
         a5:27:49:6f:d2:38:61:ab:da:ab:29:48:c4:33:32:9f:aa:df:
         1a:44:71:11:25:c0:7a:70:88:81:c7:ed:d8:c5:c1:2f:0a:d0:
         38:42:16:60:16:d3:c6:1d:0f:21:bc:ff:44:14:c3:96:d7:1b:
         23:7f:31:1a:9c:a4:69:fd:7e:4b:bf:94:bf:74:04:d7:86:dd:
         3b:0a:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:38:01 2025 by rpki-client