Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          2NCrSdfBF6TPO6y9pZFGrXKaAxqfMzS9BDw2+Osx/TQ=
Subject key identifier:   80:9D:18:AF:51:6A:44:0D:27:96:5E:77:22:AA:7B:AD:EE:85:35:D3
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       01974E583E3E68864132B05BA29FD3D8CC5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1612
Signing time:             Sun 08 Jun 2025 07:01:35 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:35 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:35 +0000
Files and hashes:         1: 3u5ZahOyBhUNG6vDZ4hRGCrx5AE.roa (hash: HJZxVsPJLjA3XvzP/RTBRhqyf06FeLW1mBD5DxrU/Io=)
                          2: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: 8c9cTg8uvNOQBlaZNQ/sCIsV1AUhV39snQaQApcbbUk=)
                          3: ne7s-CF39-yH_YMUESJYAAKIGtM.roa (hash: YnLwaSbKeaoBqN8IeLEVdks4Cq1mIxD7TcNp72lDYnQ=)
                          4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=)
                          5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:58:3e:3e:68:86:41:32:b0:5b:a2:9f:d3:d8:cc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Jun  8 07:01:35 2025 GMT
            Not After : Jun  9 07:01:35 2025 GMT
        Subject: CN=809d18af516a440d27965e7722aa7badee8535d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:ec:1f:7b:d5:1e:46:88:c4:54:62:9a:43:
                    7b:b1:a1:cd:d0:fd:79:eb:83:33:80:d0:d0:8b:14:
                    47:ca:3b:92:1c:0a:21:99:d2:04:36:9a:5f:e7:93:
                    ad:87:39:da:80:11:83:63:a2:2a:60:ae:fb:a4:62:
                    be:d6:0a:f0:5b:ce:6d:f2:c4:2c:cb:87:e6:64:6f:
                    94:c4:bf:7b:86:4f:68:79:b2:95:ee:e9:a3:3f:21:
                    2b:dc:a5:e6:14:2a:ff:aa:43:37:c5:93:34:09:00:
                    b5:42:20:60:6e:c3:f6:68:c9:49:f3:0d:1a:81:8d:
                    f5:c7:b9:67:77:84:ff:fe:76:ff:e7:d0:ae:1e:73:
                    f8:2f:60:24:28:4a:11:ca:2a:4f:f8:6c:b9:45:f4:
                    92:09:ac:70:69:ee:fb:9a:a6:19:cf:7e:ee:89:60:
                    76:59:fc:b5:60:e0:35:4c:23:bb:d9:14:8e:58:1e:
                    42:54:4b:b5:f8:4b:54:05:02:57:60:ad:40:80:5f:
                    ba:61:87:44:c4:fa:55:ad:f7:08:51:7c:24:2d:8a:
                    f1:e6:85:0a:c6:ec:63:4b:21:18:f1:fa:0c:e9:c6:
                    c6:33:15:30:74:1b:be:c5:fa:b5:5c:29:1f:93:b4:
                    43:f2:a7:57:77:1b:53:34:c2:72:b9:64:27:25:de:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9D:18:AF:51:6A:44:0D:27:96:5E:77:22:AA:7B:AD:EE:85:35:D3
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2a:78:e1:a3:d4:c9:2f:2d:4b:33:ac:b7:17:5d:a3:39:4c:
         1b:8e:63:08:64:6e:ed:1e:05:4f:19:c3:3d:78:6e:64:f0:5b:
         61:10:b9:e9:90:07:79:c7:0a:28:1e:fa:93:02:69:a6:55:50:
         26:ff:cb:6a:5f:4b:60:7f:2f:b8:ff:d7:9c:a2:f3:9c:16:d3:
         c3:0a:0b:ec:b4:dc:32:61:f1:24:34:d1:b3:f1:81:5b:a0:fa:
         fd:ac:88:67:70:eb:a8:69:46:57:46:70:bd:30:d2:ca:95:03:
         ff:32:92:e0:4a:a9:67:0d:e0:de:2f:f9:44:76:16:82:94:60:
         46:78:5d:33:73:a4:fc:71:0a:fd:58:95:d3:5a:3b:bb:5a:b9:
         5f:eb:ea:3c:b5:0e:df:2e:2c:e8:38:2d:ba:24:70:1f:49:91:
         04:84:24:02:2c:22:14:2a:73:78:0c:82:8f:9a:f1:9f:61:89:
         39:ce:93:db:68:15:dc:63:5a:59:ae:8f:72:21:6a:ef:15:a2:
         18:9b:7d:92:93:eb:1b:95:32:34:e4:ca:5a:2a:e8:2e:2d:76:
         55:63:a7:aa:d0:d6:46:ba:aa:be:ff:b7:a4:b2:f2:43:2a:f8:
         67:f2:39:fe:d1:77:08:de:eb:8d:ba:ff:92:e1:f0:ad:f5:a7:
         0c:e5:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:27:10 2025 by rpki-client