Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          VQeP9TzVB+FiQQIVEp3RPcLqPQlZ7hoa09mAWv1Dhis=
Subject key identifier:   CA:CE:2D:15:E6:BC:DC:5A:C1:23:26:C7:F2:6E:03:6F:AF:54:3C:69
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       0197518F63414958665C818AA87E9953A240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          0CD0
Signing time:             Sun 08 Jun 2025 22:00:40 +0000
Manifest this update:     Sun 08 Jun 2025 22:00:40 +0000
Manifest next update:     Mon 09 Jun 2025 22:00:40 +0000
Files and hashes:         1: 1Di0Xz_MpkFSCrXwieDlABcYUOY.roa (hash: e9+8w6PzwdqZ5DMc28fcl3/6JCrUHirDY/ShA9oFLww=)
                          2: Fb4Aih2t-3x0svMSkoJF-OT975k.roa (hash: 4CpcD3G4jnvkJ9iB2UM4J3ZMTh++G55QBNDvUCamA1Y=)
                          3: NXwDVZABd3p4a0yMyLVaEUu993w.roa (hash: lhUXJxfjstspXt3/27XnZ9HzN1ZpRrwcEX2KjNAybVU=)
                          4: _zmyvqhTt2oFbDnddAPtCQEEyok.roa (hash: DAvzMAds1rhf279ET0ww79hQJtAHmid5htmCA8lZZdI=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: qk+HEiAJWOKwJ1JCFdWgJB5c5kpqrkBdkY0Z/H/ap8k=)
                          6: m4nA49Lv7EMjkCcxgMafzldImD4.roa (hash: evH9NZtYuDtPls9Lqu7Vupfo95DdUFuCaTKXVG/rgrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:8f:63:41:49:58:66:5c:81:8a:a8:7e:99:53:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Jun  8 22:00:40 2025 GMT
            Not After : Jun  9 22:00:40 2025 GMT
        Subject: CN=cace2d15e6bcdc5ac12326c7f26e036faf543c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:95:bc:e7:fb:85:cf:b4:86:8f:b1:7d:6b:
                    99:56:da:7b:2b:7e:8e:9c:46:fb:52:b6:cb:e1:54:
                    fe:2a:45:31:23:6f:4a:82:61:2e:60:d2:2d:d2:0f:
                    6d:b0:9e:e8:67:fc:f0:aa:a3:d4:45:1b:5c:5a:3f:
                    59:26:47:74:86:01:60:6c:bb:af:a8:86:6e:63:cf:
                    2e:78:0d:ce:d3:9b:2f:dc:39:80:08:94:52:15:93:
                    18:63:36:11:50:a7:0e:9a:37:61:ad:c9:46:ec:0b:
                    13:7e:89:67:54:91:0b:8a:42:ce:a3:0a:24:30:f0:
                    4f:42:3a:90:ba:3b:d6:52:90:c1:76:0f:e8:c4:33:
                    ce:32:ca:b6:c1:3e:17:25:a5:2a:56:06:e8:ca:cf:
                    47:19:b3:70:26:1f:23:c9:7e:82:a0:7e:45:6e:fd:
                    85:ef:9c:e4:1c:52:69:e4:d1:9e:31:96:e8:15:0f:
                    64:6d:62:1e:5b:5f:d0:c4:5c:a9:60:5e:d8:00:f2:
                    82:5a:7e:09:a7:b6:9a:0c:e0:df:52:7e:4e:5b:fb:
                    30:a5:60:7d:08:3d:d8:bb:fc:02:da:3c:63:e7:b1:
                    65:b6:31:68:69:72:6e:59:f6:11:12:ef:15:3e:5e:
                    2a:36:2f:32:59:57:1d:8d:0e:03:b5:af:9f:9a:2b:
                    ed:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CE:2D:15:E6:BC:DC:5A:C1:23:26:C7:F2:6E:03:6F:AF:54:3C:69
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:70:af:c4:7b:d3:6f:d8:fc:a4:c2:8b:b4:c0:f3:dc:c5:88:
         63:58:ec:a2:c9:a6:a6:66:ad:d1:62:2d:16:c9:e5:6d:9a:0f:
         6f:60:70:3d:ef:35:32:ae:a8:10:61:f5:e8:17:ae:e3:78:61:
         b0:4f:c9:68:ff:94:c2:30:5b:e9:f0:d5:7d:a3:5b:a0:8a:d5:
         16:c7:0d:a0:38:24:dd:a4:bd:5d:52:0f:b7:4b:d6:b9:4c:d2:
         6f:ee:90:8e:1f:bc:10:8f:81:29:35:ee:26:20:7e:a9:df:ea:
         ea:e1:b9:c3:fa:fb:e0:c6:dd:02:b3:d4:ab:fe:10:f3:42:38:
         d9:83:9b:a5:73:7a:2d:ab:28:91:11:df:bd:6f:83:fd:b9:76:
         f4:55:2a:58:8b:4f:9b:3c:69:48:21:d3:8c:8d:3c:81:00:9d:
         55:4b:6d:60:80:82:7f:5c:6c:bc:44:41:d4:8e:75:bd:89:a2:
         27:25:a9:14:c3:09:55:58:59:cb:d8:85:8f:03:0e:9a:34:6c:
         4d:63:2e:ff:76:cd:f2:2c:67:b1:88:16:eb:fb:90:5d:a4:87:
         52:46:3d:4d:d6:d0:25:42:dc:ea:24:4a:b2:60:9a:eb:03:cd:
         60:bf:8b:ce:9a:ee:c2:69:81:ff:9d:c0:fd:a4:50:a0:74:2f:
         37:65:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:51:27 2025 by rpki-client