Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File:                     8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier:          Gsu1qBas8YBZCwYYazrrZ6/nJBYTYGnKXAZjz6YWuAU=
Subject key identifier:   58:5C:C9:DA:5A:BC:73:C2:7A:69:2E:3C:3B:5B:BD:2F:F1:54:5B:6F
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer:       /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial:       01975912704CE7B1B906B06561D13EE69B03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number:          0BE0
Signing time:             Tue 10 Jun 2025 09:01:09 +0000
Manifest this update:     Tue 10 Jun 2025 09:01:09 +0000
Manifest next update:     Wed 11 Jun 2025 09:01:09 +0000
Files and hashes:         1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=)
                          2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: dJNK0tBDDTYYLrjz6hjkFSEKj0zPFbe19/AaCeRlEgE=)
                          3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:12:70:4c:e7:b1:b9:06:b0:65:61:d1:3e:e6:9b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
        Validity
            Not Before: Jun 10 09:01:09 2025 GMT
            Not After : Jun 11 09:01:09 2025 GMT
        Subject: CN=585cc9da5abc73c27a692e3c3b5bbd2ff1545b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:e4:17:4e:81:c1:76:be:73:c1:a4:11:fe:
                    8f:1d:89:c1:9c:01:d7:0a:48:a7:b6:b7:b7:a1:e7:
                    5b:4a:26:82:41:b7:ea:74:68:19:90:7b:af:bf:a7:
                    45:3f:3d:f0:82:a2:9a:28:c3:2c:05:cf:ba:ef:f2:
                    3a:e4:47:55:3a:78:ee:11:a1:b1:f7:36:0d:44:4f:
                    f4:46:b1:1b:f2:32:cf:b7:01:5f:f3:b5:7f:0f:eb:
                    51:5d:54:8a:25:ba:1d:63:30:3c:06:b4:cf:a9:af:
                    00:b6:ec:fa:05:6e:fe:23:85:89:5d:40:95:dc:f3:
                    1c:9d:4a:49:d9:f6:ce:5a:29:73:37:9d:63:17:0e:
                    92:6b:2e:16:a0:4f:24:5b:92:22:e4:14:7d:dc:43:
                    6f:e2:dd:e8:f9:ab:71:fa:a9:77:4d:74:76:b1:e6:
                    e5:3c:d5:21:9e:c8:37:dc:6d:f4:89:08:61:4d:94:
                    9a:bd:fe:1c:7c:6c:3d:81:2e:44:93:1c:ec:e0:91:
                    e8:49:09:84:98:b7:2b:12:13:af:8a:85:44:26:d6:
                    60:83:d7:5e:56:62:8b:fa:93:a9:b1:4e:34:21:bc:
                    6d:23:3c:fc:b3:0b:f4:01:2d:f3:84:5f:83:97:94:
                    aa:46:77:94:91:7b:f1:c3:69:5e:bd:6b:56:a3:56:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5C:C9:DA:5A:BC:73:C2:7A:69:2E:3C:3B:5B:BD:2F:F1:54:5B:6F
            X509v3 Authority Key Identifier:
                keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:ab:e9:46:ef:07:71:da:6d:86:98:14:6e:0d:5b:ff:00:
         0c:45:6f:9c:95:15:df:60:3c:eb:6c:42:28:0d:17:18:88:fc:
         8d:70:cb:13:b9:9f:c5:03:4e:66:e7:e9:19:6d:d1:70:ba:6c:
         ed:b4:8f:76:26:b4:e3:5c:49:ec:ae:37:49:83:c7:c7:06:fb:
         5f:e2:94:bf:40:78:36:85:2c:ee:f4:5a:3d:80:8c:85:67:58:
         6a:b6:44:de:bb:a7:27:9b:9d:04:be:d5:1d:78:76:d2:72:05:
         65:29:67:7b:33:f9:c6:2a:74:93:dd:65:2f:77:12:f2:93:4d:
         48:cc:42:0e:32:69:92:a5:ea:d0:f7:f6:9b:ec:6e:4e:5c:86:
         6e:18:bb:57:eb:49:77:aa:5a:fb:d8:31:57:65:70:a7:a1:e0:
         4f:b7:e7:80:a5:bb:9c:30:52:45:17:27:68:f0:a2:f9:7c:75:
         d1:52:df:4e:85:c4:c1:63:9b:67:a6:b1:67:06:1f:94:6f:f8:
         72:be:5f:d8:4d:8f:ea:54:05:e8:0f:5a:fd:f0:1a:29:13:38:
         db:9d:26:e2:3e:c7:b9:78:38:7a:1a:33:12:b9:91:ea:94:1f:
         d4:ac:2f:a0:0b:81:45:af:ca:f3:57:47:c8:57:23:11:2e:1d:
         73:75:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:49:37 2025 by rpki-client