Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
File:                     p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json)
Hash identifier:          iMqO6jgATIQHl8ONDxU/Sxy7ILaDJGo9aqmWOIdYOik=
Subject key identifier:   0E:53:84:DE:F4:0A:9F:34:98:62:C7:59:BA:17:A6:0F:8F:62:3C:44
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Certificate issuer:       /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial:       0197500ED230DD7845C44061B866326E8C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
Manifest number:          1002
Signing time:             Sun 08 Jun 2025 15:00:37 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:37 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:37 +0000
Files and hashes:         1: 7mKsLxZ1YUursivxbDFLaTJwj3E.roa (hash: FPzsPJGqWdwrFvseNY78lYszDWnEn2Sc/ADORiyM6K8=)
                          2: F6GbEsOwyyG8o8bV63EAhvgPv20.roa (hash: EM9ccbF4wbMzML21gfy8G7ZsIEgbEwrm+BJcQvLh9SE=)
                          3: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: q3y/DptQdC2rElRfJMkGoNUygFspes9qvXH+BGn5/84=)
                          4: zTYC0rihbvQfm9oWRaiGAXMBQqs.roa (hash: 6o0tQLujWnAnKLQhjlOk4ynnEvtZuILHNK+l2Zgw0QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0e:d2:30:dd:78:45:c4:40:61:b8:66:32:6e:8c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
        Validity
            Not Before: Jun  8 15:00:37 2025 GMT
            Not After : Jun  9 15:00:37 2025 GMT
        Subject: CN=0e5384def40a9f349862c759ba17a60f8f623c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:a0:80:35:7a:8f:21:5d:9c:13:32:ac:4a:
                    d0:f0:71:86:3b:e4:d3:9d:0a:d9:1e:fd:1c:e8:c1:
                    c7:f6:8b:e1:58:38:cf:2b:21:18:a0:a3:54:2e:cd:
                    d0:5c:d6:c9:f1:e9:a7:42:f7:24:29:57:e8:a1:9a:
                    9a:0c:cb:f9:b4:6b:95:20:31:48:c3:47:2e:78:82:
                    cd:2b:0a:1a:0d:14:58:a5:b3:b1:62:3d:fd:1a:bf:
                    7f:14:c7:4a:12:b7:97:25:6f:90:07:55:bc:60:32:
                    9c:b0:c0:26:a4:5f:65:29:22:0c:72:6e:4a:a7:0b:
                    97:dd:7c:07:80:c8:08:8c:bc:33:7a:96:5d:79:e1:
                    db:9a:46:7f:f6:b1:05:41:fc:81:54:f0:22:ad:56:
                    58:2c:fd:18:d8:45:1f:89:d9:c7:dc:df:d1:af:f9:
                    71:88:d9:d6:cc:6a:84:b8:6b:e2:94:e0:fa:fa:44:
                    fb:00:60:91:6a:67:5e:4f:fe:78:8b:3f:ab:c0:89:
                    53:19:65:b7:ae:2b:fb:ee:d6:b2:8d:e2:dc:af:53:
                    b5:87:a8:d7:9a:fb:be:a1:eb:bb:ac:0f:dc:40:fe:
                    cc:7e:fe:44:17:21:1a:76:e5:91:51:13:ed:29:15:
                    e9:ec:52:39:51:a9:cf:0e:0b:e2:15:00:db:24:30:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:53:84:DE:F4:0A:9F:34:98:62:C7:59:BA:17:A6:0F:8F:62:3C:44
            X509v3 Authority Key Identifier:
                keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c0:12:e0:78:9d:4c:19:f8:9c:7d:3c:7c:6a:0d:ee:37:bd:
         e1:80:25:ca:a3:a2:ce:48:9e:ab:c1:20:c0:d2:07:8f:e6:2e:
         30:b5:6a:e2:4a:30:5b:c6:29:7d:7a:54:d5:b5:43:fc:b5:79:
         9f:62:d4:0b:14:ce:d4:dd:25:d4:37:52:17:db:e2:28:01:7b:
         25:06:6e:3f:7b:59:9b:f4:f4:08:a2:a9:58:f8:5f:6b:8b:84:
         e7:78:8c:8e:5c:6a:2c:52:b3:d5:7b:f4:d7:54:0c:d9:fa:bc:
         b1:d6:7f:96:10:5e:a3:df:9d:97:52:8a:f2:81:9f:98:41:59:
         7a:28:5a:9d:ac:bf:65:db:0f:d1:44:a9:0c:5b:f0:b8:ba:fb:
         62:c5:79:2d:95:44:1e:d5:81:81:54:14:96:e8:e5:d7:b5:5a:
         f1:bb:30:ca:a2:57:bb:43:ed:e6:50:66:e7:1a:e0:4d:cb:17:
         fc:62:b1:03:31:56:86:60:62:a8:cf:9f:61:24:ae:71:18:8a:
         1b:ea:2e:8b:6a:81:da:58:7e:25:04:e8:cd:4b:91:d8:e6:11:
         c8:9c:52:f1:cb:6f:74:b7:82:db:0b:99:07:ff:84:ba:64:a3:
         e9:31:ce:86:96:2c:ef:20:9c:52:ad:5c:e5:0b:fc:35:d8:1d:
         a7:83:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:05:02 2025 by rpki-client