Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File:                     dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier:          p86ohirNBKhOZ2IS/f575fm3Nd8WFvT64g/reUQLWNc=
Subject key identifier:   9B:8C:DA:BB:C8:85:B5:E0:E7:7F:68:AD:8B:E8:8F:06:EC:6C:84:C4
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer:       /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial:       01976EBE18DDEDF67C88D0CDF6CDD296D778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number:          08AA
Signing time:             Sat 14 Jun 2025 14:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:41 +0000
Files and hashes:         1: ZsJKFxXmo7OPgqm-sYXIzxvA6qU.roa (hash: IBfv0VOpf12GHCCld3i7ENCZlrb/HEkRLIfqN7c44Ds=)
                          2: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: JZHgGwokgeQlhG+oc5PhcGEL92H1qxJLeQ5iQYzH5dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:18:dd:ed:f6:7c:88:d0:cd:f6:cd:d2:96:d7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
        Validity
            Not Before: Jun 14 14:00:41 2025 GMT
            Not After : Jun 15 14:00:41 2025 GMT
        Subject: CN=9b8cdabbc885b5e0e77f68ad8be88f06ec6c84c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:45:a2:c4:fe:93:6f:da:bd:42:e7:f9:41:
                    26:ad:7b:8c:e4:b0:59:1a:14:63:b7:c6:29:9f:d4:
                    3d:53:17:7e:a0:3a:ef:96:72:38:37:ce:93:b4:2d:
                    79:3f:ee:4f:b3:7f:3e:8c:7f:8a:57:eb:22:61:f6:
                    45:81:6c:bf:6d:01:6b:f4:f7:c4:62:10:58:69:03:
                    0c:61:49:30:87:c1:36:e3:6b:c8:c8:d7:ed:39:df:
                    f8:ba:79:64:1c:f3:63:cf:91:fd:d3:16:5f:f8:c0:
                    d6:dc:3d:28:da:38:7f:08:41:8e:e8:05:18:02:22:
                    c8:e3:09:7e:7a:ad:a3:c1:af:52:ad:51:e7:4c:5f:
                    da:35:12:05:b5:f2:92:e4:13:36:0e:2f:2e:6a:98:
                    cd:7f:03:43:d2:69:9d:94:dd:51:59:23:01:de:70:
                    fe:d3:08:99:15:21:cd:f3:5f:a7:7e:d3:50:2e:4b:
                    80:8d:5c:e4:f7:97:ac:9e:38:c7:f7:ae:7a:46:b0:
                    83:d8:ac:e1:97:bc:a8:0b:6a:5a:85:d1:ed:22:a4:
                    76:bd:f2:90:57:7d:36:45:74:f5:8c:3e:67:14:e4:
                    38:03:c9:44:59:e8:25:07:c5:0b:2d:6f:e5:58:1c:
                    9e:df:f0:70:97:dc:c2:82:b3:07:5c:9c:55:ae:a5:
                    fe:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8C:DA:BB:C8:85:B5:E0:E7:7F:68:AD:8B:E8:8F:06:EC:6C:84:C4
            X509v3 Authority Key Identifier:
                keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:80:0a:12:0e:06:e5:dc:16:e8:bc:b9:71:5e:c2:f2:85:ab:
         ad:86:77:40:37:8c:60:dd:8b:5f:65:15:0e:65:9b:51:12:22:
         21:b8:c6:30:46:0c:d8:b2:48:03:af:cd:2f:79:12:aa:ad:8b:
         d3:1b:0f:dd:91:44:2f:94:20:b1:2c:45:c2:98:8c:bb:ea:7e:
         bb:9e:de:3d:35:40:5c:96:e6:16:51:d9:de:35:ed:b6:4e:38:
         b4:ac:5d:b9:58:8c:1a:31:16:81:7a:2e:98:08:28:e3:5d:e3:
         5e:4a:84:70:8b:bb:6b:15:e4:ef:02:84:29:3f:53:b9:85:81:
         91:ae:fb:4c:a8:b7:6c:4e:50:f2:35:14:92:d0:53:41:97:f7:
         c0:98:6f:de:1b:b9:f2:b8:5e:54:65:9d:70:f0:2c:1c:5a:e8:
         bc:d3:0f:7d:14:cc:eb:d4:0d:4a:93:2f:61:03:d4:99:2e:97:
         35:55:15:74:cf:0d:7e:da:14:6e:9d:90:f5:d1:9f:68:42:bf:
         08:54:15:fc:7e:d7:6b:e9:2c:12:60:b9:f9:7a:f9:cb:a9:a8:
         89:27:52:54:3f:5c:64:82:0f:30:f6:94:48:d6:19:f3:09:06:
         fd:58:28:92:ba:03:e7:dd:ce:b0:7d:9c:f0:cb:c4:bf:b8:17:
         ac:57:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:36:38 2025 by rpki-client