Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          iaC7I8BpW4fWSuch5CkSEshr28kwb88QkQkZPwlKV8I=
Subject key identifier:   D0:13:9D:52:30:D2:CB:77:58:D9:F0:4D:B4:08:85:56:F8:48:30:32
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       01975FB9A4B8F511A74DF7C53C9628E55D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          1563
Signing time:             Wed 11 Jun 2025 16:01:31 +0000
Manifest this update:     Wed 11 Jun 2025 16:01:31 +0000
Manifest next update:     Thu 12 Jun 2025 16:01:31 +0000
Files and hashes:         1: 08MOvb96w4xsKgP9JS0zoI8sRTk.roa (hash: 8gdw/ohva2RMhv163mHOocjNP3BJgaz4YyRqUuNJ7fc=)
                          2: EcfJ1jayPFQ3t0p16goPKaqtjcU.roa (hash: a5FoEd1+215WBmQs6vvzPYdx4+KFtw5yrsSUYmblCm4=)
                          3: Feoglcvw_6-C4xgxUoU6eiA0vbo.roa (hash: i5QN1v0aIKZsC1I8BX0SBzxPphQ7cFRhZicwbqLkWoI=)
                          4: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: FKIbpTtkgZ0vHdDQ2QqxxPUq0hVwXvx8oKkqBORXNpE=)
                          5: scHcnv6TrwaRFnxyoieAy0wdLy0.roa (hash: KW0/f/Bc0ZybPczgbDkkTfSw75mnRXJrQAuIsFRlAcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:b9:a4:b8:f5:11:a7:4d:f7:c5:3c:96:28:e5:5d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Jun 11 16:01:31 2025 GMT
            Not After : Jun 12 16:01:31 2025 GMT
        Subject: CN=d0139d5230d2cb7758d9f04db4088556f8483032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:0a:23:50:ba:f0:46:d4:e7:86:41:12:9e:
                    1c:ce:7d:a8:28:c8:b5:5a:43:22:6c:a9:e7:62:be:
                    ab:af:30:a6:dd:c0:52:79:f3:44:57:f4:cf:a0:13:
                    ba:48:e6:31:d0:00:75:05:50:cb:0e:62:af:e1:4f:
                    35:4b:c9:55:18:4b:4e:35:5b:6e:55:b2:6c:0e:15:
                    16:08:6b:01:6e:be:ad:9b:47:e8:73:9e:e8:f1:a0:
                    03:1e:b6:16:53:d2:1b:c9:45:ce:04:36:57:62:ef:
                    79:64:dc:fc:5e:ab:a8:c8:dd:40:b3:05:c0:33:d8:
                    8f:50:11:b2:15:8e:c3:ae:14:3d:d9:91:a6:31:fe:
                    73:65:d8:d0:e8:ed:82:93:b5:41:ce:a1:e8:64:ed:
                    cd:7f:fb:8c:05:60:cf:58:53:3c:4a:62:73:df:66:
                    af:fb:b0:dc:1d:0f:e0:41:c8:41:de:24:25:61:76:
                    3c:88:41:cb:08:d6:15:91:f5:8e:3a:53:ab:cd:17:
                    0f:a2:1d:4c:52:8d:2c:87:b7:1d:a6:70:a6:f2:b2:
                    b5:56:ed:94:8e:f3:9a:92:a5:77:cd:65:16:25:ae:
                    6e:24:6f:48:63:a6:c4:4c:53:b3:ec:8a:af:fb:9e:
                    1c:8f:1c:fd:f7:a3:86:59:fa:86:ed:73:08:8f:25:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:13:9D:52:30:D2:CB:77:58:D9:F0:4D:B4:08:85:56:F8:48:30:32
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e1:09:94:81:32:06:15:45:5a:6e:7c:da:f2:86:29:62:c8:
         2a:06:78:3b:e8:2a:a9:16:35:cd:b0:4e:6a:11:65:0a:11:4d:
         2f:e2:60:6e:bc:3f:fe:7e:01:36:6b:27:4f:be:80:0c:5b:ea:
         92:9d:08:68:a5:2d:ae:f2:79:67:c8:08:db:c4:c0:b1:82:cb:
         7e:1e:15:a2:58:ab:8d:90:09:0b:3f:80:2d:b1:4a:3a:fb:a3:
         1b:8f:13:0d:4e:e7:dd:5b:ac:65:0a:0f:48:a1:e0:c3:5a:0a:
         01:d0:db:46:6e:79:bb:b6:bd:4d:11:a6:ec:45:6e:56:0e:af:
         38:7f:6a:59:06:40:74:10:a5:93:8f:26:aa:d2:a5:6b:a2:2f:
         5b:31:9a:cc:c9:58:9e:4e:42:de:00:36:13:85:8e:7d:5f:60:
         59:40:0f:17:1b:09:05:f7:52:93:8a:e2:11:0f:16:6d:f7:a9:
         20:67:ed:cc:ac:58:5f:db:52:7b:75:27:9a:40:69:57:88:08:
         a7:12:d3:3e:f7:5e:cd:b4:9f:b2:63:8c:94:12:27:57:5e:51:
         66:b7:39:c2:c2:34:6c:db:07:9e:8f:e1:5f:f3:87:79:f9:66:
         cc:5b:9f:22:a4:08:37:1b:e6:65:72:1f:e9:5d:98:c2:10:85:
         9b:4f:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:47:13 2025 by rpki-client