Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File:                     8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier:          YTor6el4ja2h4mp5t5UFG8Yqgv7kkUPJlf7puddawbU=
Subject key identifier:   16:03:64:20:99:8B:96:98:B9:DB:6C:8E:E7:75:62:FB:46:D5:CF:0A
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer:       /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial:       0197499F29487D183087871F91C77192AD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number:          1330
Signing time:             Sat 07 Jun 2025 09:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:56 +0000
Files and hashes:         1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: 2SBINOVrs0+0F4cI25PNun3TE0Qip+XBL35dfAm58Rc=)
                          2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:29:48:7d:18:30:87:87:1f:91:c7:71:92:ad:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
        Validity
            Not Before: Jun  7 09:00:56 2025 GMT
            Not After : Jun  8 09:00:56 2025 GMT
        Subject: CN=16036420998b9698b9db6c8ee77562fb46d5cf0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:b5:9c:e3:4b:1a:05:03:f2:f6:8c:24:78:
                    e6:a2:d3:b8:b0:d4:7f:5d:9a:df:f4:eb:6e:8d:4d:
                    ec:c1:b8:ae:e8:18:42:22:fa:8e:44:dd:2a:a6:dc:
                    cb:1f:38:5c:7d:99:d9:04:01:1d:79:cd:98:2d:e9:
                    3a:7e:f0:f6:dd:c5:ea:e5:f6:b6:a6:11:4b:16:28:
                    5d:90:d9:7f:de:13:a7:b6:34:8c:32:e9:a0:22:9c:
                    1f:c3:cb:e6:d5:ed:d1:65:0b:8a:e7:ac:be:cd:db:
                    a6:e4:31:0a:61:dc:3c:5a:eb:40:70:0f:6f:2f:d7:
                    20:ff:35:d9:83:6f:ee:01:70:a4:36:eb:74:72:5e:
                    40:f5:55:60:1f:3d:98:05:32:7f:ff:19:36:a3:23:
                    4b:64:d8:ec:59:4d:4c:75:a3:e8:12:1d:d2:85:f3:
                    15:68:de:30:51:e4:f3:23:27:1e:97:94:92:7b:87:
                    25:5e:91:8e:ee:c1:cf:3e:bc:b8:87:fd:4e:ce:b7:
                    da:1d:1b:c6:29:e9:aa:76:e3:81:1b:49:c2:eb:7b:
                    c5:44:5f:7f:2a:53:b7:03:c3:c4:f5:21:d8:a4:f7:
                    65:eb:ea:09:3c:39:8c:36:35:0d:e8:52:09:fe:69:
                    5e:7b:1e:a8:eb:7e:0f:0c:58:e5:fd:ea:9f:4a:50:
                    53:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:03:64:20:99:8B:96:98:B9:DB:6C:8E:E7:75:62:FB:46:D5:CF:0A
            X509v3 Authority Key Identifier:
                keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:38:25:9b:91:e0:75:4e:b3:fb:15:79:50:c0:7e:5c:46:8b:
         21:c5:65:7e:30:d9:97:1c:c3:c0:79:70:a1:3e:fd:f7:47:f0:
         b5:ed:e7:fc:25:ca:49:47:e9:0b:d5:06:3b:ec:c9:85:52:a7:
         cc:1b:15:1f:e7:9e:95:2f:10:a8:13:f9:58:a6:26:15:94:1b:
         7f:b6:28:2f:97:36:68:e8:70:86:42:38:ba:9a:6e:92:e6:b1:
         b5:8d:76:f0:2a:af:8d:20:a1:06:f8:28:ea:fa:1d:c8:02:2c:
         10:65:25:ab:5f:dc:5e:7a:47:b5:34:5b:a2:ee:5f:b5:5c:38:
         a0:2f:b5:e4:80:6f:0f:98:c3:1f:18:68:eb:09:f7:29:da:d1:
         a0:16:c3:7e:bc:29:f2:28:c3:51:ce:1f:dd:b3:2a:2a:db:6c:
         ca:1d:c3:14:4f:14:94:3b:a8:b5:20:e8:46:bd:8e:f4:1b:d1:
         af:c9:e3:88:ed:d2:d8:fa:51:1e:7d:fd:80:d8:de:31:3f:84:
         14:91:4c:3a:81:c5:37:55:92:18:49:7f:b4:3b:06:86:b5:5e:
         6d:5d:28:b9:c7:85:65:75:d8:3e:69:50:d2:d3:19:4b:f0:75:
         56:8a:06:aa:a0:57:80:81:ae:4d:90:6d:88:de:44:99:93:fe:
         73:2a:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:07:06 2025 by rpki-client