Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File:                     8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier:          UQ6Bn0wSRoY7fOtOU+uqfjC5hPi946D0SknGjVVhNO8=
Subject key identifier:   E1:77:31:34:21:E0:95:5A:2E:3C:0B:22:05:01:D5:5B:C3:0B:2D:AC
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer:       /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial:       01975D5CEC07202BD99AB603F482AE75AEFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number:          0F97
Signing time:             Wed 11 Jun 2025 05:01:00 +0000
Manifest this update:     Wed 11 Jun 2025 05:01:00 +0000
Manifest next update:     Thu 12 Jun 2025 05:01:00 +0000
Files and hashes:         1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: aZZdnhFY8r/byRZRRYkRFEfx0Amol/DNXeXsvakW5d8=)
                          2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:5c:ec:07:20:2b:d9:9a:b6:03:f4:82:ae:75:ae:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
        Validity
            Not Before: Jun 11 05:01:00 2025 GMT
            Not After : Jun 12 05:01:00 2025 GMT
        Subject: CN=e177313421e0955a2e3c0b220501d55bc30b2dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5f:4c:e4:98:d5:07:ee:fb:0b:fc:cc:e3:fe:
                    bb:08:8a:1b:4c:12:20:7e:e9:a5:1c:8a:e8:1a:70:
                    23:68:6c:20:03:b0:fe:17:b1:01:2f:c6:70:e8:c6:
                    a6:8c:29:de:1e:ef:be:f6:13:32:a3:70:44:3a:22:
                    21:37:a6:96:71:5f:f6:66:d6:83:c5:a0:0c:18:ad:
                    82:c0:19:41:46:a4:05:98:39:62:ce:47:ed:16:79:
                    77:50:96:72:3a:da:9e:83:a6:3c:75:fd:db:9e:3f:
                    8e:5b:a6:91:1d:89:40:fa:8b:d8:9e:a7:3d:9d:a6:
                    5d:51:52:d8:c6:3d:c4:36:d9:81:93:59:46:16:e5:
                    ee:62:fb:af:3a:2b:09:ed:c4:83:62:1f:a8:29:b7:
                    c1:1b:4e:1e:ef:29:97:ef:3e:20:2f:c2:c4:32:e8:
                    2a:96:fb:27:19:72:bb:78:44:53:27:57:ac:a6:a0:
                    06:78:80:48:de:b4:3b:3b:31:7e:ed:4f:0e:3c:38:
                    33:5d:20:c8:f4:6e:a0:62:16:af:52:ea:34:6f:48:
                    b5:a6:0a:ff:b4:50:95:67:2a:e2:0a:a3:07:53:93:
                    d1:7d:e4:ad:1a:1a:ce:65:bd:c3:9a:2f:c6:e8:e6:
                    34:13:55:0a:a1:39:a8:06:b9:3b:f2:c5:28:6e:18:
                    2c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:77:31:34:21:E0:95:5A:2E:3C:0B:22:05:01:D5:5B:C3:0B:2D:AC
            X509v3 Authority Key Identifier:
                keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:86:b9:7a:bf:21:e8:5e:29:20:22:8c:89:70:e5:f0:a3:f0:
         f8:ef:49:34:5a:01:45:dd:34:90:3c:7b:6e:36:cf:2e:f7:d6:
         cb:27:96:d9:af:58:95:77:dd:d9:6e:35:fb:6c:d6:03:e5:5f:
         0b:90:2a:7c:b2:ae:da:8e:86:1b:73:1d:66:56:0a:20:22:98:
         a4:2b:de:ab:aa:02:11:b3:bb:a8:b8:fc:ae:81:b1:eb:cb:f5:
         67:03:53:42:13:1c:c7:87:aa:b0:64:4e:7a:54:b0:7c:e4:d0:
         7a:b5:cf:38:3c:9f:c6:ce:08:e4:13:ae:1b:e2:27:10:ae:a3:
         ad:f4:45:7f:3a:71:58:b9:dc:71:11:63:08:d0:22:06:bd:98:
         8b:e9:e8:b7:76:8f:75:6b:d4:a0:7f:86:94:40:e6:59:7e:0e:
         0a:c3:e5:cd:bd:91:13:d4:56:bc:47:d4:e6:f3:1c:56:17:9e:
         43:14:e9:c7:11:76:23:fc:2b:a4:7f:55:9d:81:2f:6a:b0:a6:
         21:fd:07:31:74:fa:38:f9:fb:41:65:07:53:85:6b:37:52:bb:
         64:31:a0:95:ba:6f:fe:cd:a5:62:9a:5b:8f:d3:7e:82:34:cf:
         3a:35:a8:2f:7d:37:58:94:c9:98:d3:a4:7b:15:6c:5d:3c:49:
         ef:10:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:40:12 2025 by rpki-client