Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File:                     8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier:          CpMLAhniZbGfVRZ/KO8Y4CSO8ia0PApEn8YqYsq1JeA=
Subject key identifier:   DC:BD:A5:F1:62:F9:B4:A0:71:3C:22:1F:B4:B1:AC:13:76:39:05:64
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer:       /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial:       01974A0CE3AE55976D7FF49AD28B76357C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number:          04FD
Signing time:             Sat 07 Jun 2025 11:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:48 +0000
Files and hashes:         1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
                          2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: l3vnac/cqksWoQTZVtwH7Fb4ZLKwBYIzYtlesmUqwlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:e3:ae:55:97:6d:7f:f4:9a:d2:8b:76:35:7c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
        Validity
            Not Before: Jun  7 11:00:48 2025 GMT
            Not After : Jun  8 11:00:48 2025 GMT
        Subject: CN=dcbda5f162f9b4a0713c221fb4b1ac1376390564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:43:44:91:54:af:88:10:f7:07:cc:b3:ac:
                    3c:23:15:3d:fa:58:ef:8d:53:80:e6:48:d5:ec:53:
                    36:50:00:fa:a2:28:db:39:11:3b:39:f2:19:b4:9f:
                    bc:45:5b:e3:a4:a5:7e:07:b9:ff:bc:22:67:23:a5:
                    98:f1:86:39:4b:cb:c2:87:df:8b:ac:c5:30:56:7e:
                    05:6e:79:66:a2:d7:9d:92:a0:00:5e:59:e3:6d:9b:
                    cb:4d:7e:51:49:83:c0:12:50:9b:4f:41:4b:bc:a5:
                    da:34:3f:4f:ea:fd:ca:55:64:af:35:39:de:d8:84:
                    c2:ab:69:70:f0:40:bd:15:18:9b:1d:c5:3d:28:a0:
                    ad:de:ff:a3:5f:6f:17:7c:d0:5e:98:dc:d5:1f:c6:
                    9f:e3:f6:9a:25:3f:35:d1:f2:e2:20:7f:59:49:dd:
                    a1:96:d6:c5:dc:91:af:30:89:e7:ba:0a:c3:0f:2a:
                    16:1b:6e:c6:75:7d:34:5e:ba:a1:f9:3d:a6:2e:5a:
                    ed:1b:b8:3a:4d:b3:ea:ff:c3:77:00:d6:b3:02:51:
                    36:1c:ce:7c:f6:af:fd:f2:fd:46:48:b5:b3:50:2c:
                    65:d6:09:39:82:99:20:f5:56:35:e2:64:03:13:69:
                    20:7b:b5:e2:de:dc:cc:5d:f9:48:4e:25:42:de:c7:
                    61:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BD:A5:F1:62:F9:B4:A0:71:3C:22:1F:B4:B1:AC:13:76:39:05:64
            X509v3 Authority Key Identifier:
                keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:94:67:6f:62:02:b4:75:1b:2d:8e:c3:43:97:dc:90:09:63:
         39:7c:33:f2:7e:fe:9a:bf:3d:0f:2c:1d:d6:25:2a:2f:62:2a:
         4f:ac:46:70:12:ba:4d:c2:7e:f6:6c:57:71:9b:f9:31:80:9b:
         35:d6:ec:fe:51:b8:c5:96:0a:3a:35:8c:ba:a6:b2:65:47:87:
         5d:d2:3e:e6:06:16:7f:83:2c:79:5e:e3:5d:ac:f9:da:b4:0a:
         63:24:59:2a:a6:43:46:25:6b:6d:dd:96:02:1f:23:f8:e1:43:
         b4:98:5d:25:99:4a:d1:f1:9b:eb:0b:75:d7:24:3b:18:a0:23:
         cd:8b:bc:4c:23:5e:f7:6f:a8:70:1a:4a:e9:f9:c0:0e:f7:31:
         15:d5:ef:4d:f0:e1:b6:82:74:2c:54:c0:d8:c0:c9:23:95:ea:
         cd:39:65:4e:47:f4:e9:54:6e:43:99:c0:27:43:8a:67:9b:af:
         f0:22:3a:00:af:a3:44:db:b9:74:b7:79:ee:2f:aa:19:ee:fe:
         d8:50:d5:c8:f0:a3:cb:00:00:35:5f:4e:4c:93:c9:9c:fc:de:
         da:1e:29:9b:c4:ea:76:68:17:68:a1:1d:4b:e6:73:89:e4:95:
         82:bf:a8:12:65:29:6b:e0:75:e5:fd:b3:27:f3:92:ec:26:c6:
         62:15:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:04:42 2025 by rpki-client