Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File:                     8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier:          D8iVUefWv+F7qWkiZYThcDwWI11wBPpZ4mrx/yrIWGk=
Subject key identifier:   58:FD:B4:E3:8F:DF:65:3B:D4:4A:E6:B6:EA:04:42:E1:12:1C:E3:30
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer:       /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial:       019755352331182105B53B71C719ACDBBEEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number:          0FE8
Signing time:             Mon 09 Jun 2025 15:00:35 +0000
Manifest this update:     Mon 09 Jun 2025 15:00:35 +0000
Manifest next update:     Tue 10 Jun 2025 15:00:35 +0000
Files and hashes:         1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: 2Ki8KgUZvPf7KhS1FzSkXVvbOYpAxtm62gwc2lG5So8=)
                          2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
                          3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:55:35:23:31:18:21:05:b5:3b:71:c7:19:ac:db:be:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
        Validity
            Not Before: Jun  9 15:00:35 2025 GMT
            Not After : Jun 10 15:00:35 2025 GMT
        Subject: CN=58fdb4e38fdf653bd44ae6b6ea0442e1121ce330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8e:ee:0b:11:1f:97:18:af:df:40:bd:d4:c3:
                    05:5d:34:0d:94:50:b3:e5:f8:e0:69:c0:e1:93:43:
                    84:af:58:6f:b1:53:a8:20:c6:72:c6:22:89:61:3d:
                    cf:30:4f:c3:56:d0:4a:a9:32:2d:34:d9:e6:dd:84:
                    cf:04:43:24:23:4e:46:13:89:6a:e5:63:b1:00:dd:
                    91:cf:5c:89:35:cf:2f:5c:66:0b:19:9b:a7:9e:ba:
                    2c:27:76:7a:7b:2d:c1:0e:c9:3f:83:59:33:2b:3f:
                    b4:9b:3f:50:fe:ee:08:cd:cc:88:60:01:b6:a8:4e:
                    88:45:c8:3c:0a:5d:fc:da:ee:ee:a5:61:17:d5:bb:
                    5d:c6:4d:48:77:87:da:af:c5:e9:1c:5f:18:24:40:
                    86:f4:6d:68:95:a2:ad:fb:09:37:50:e9:66:68:24:
                    b3:1e:4e:e9:12:1f:6a:6d:cf:43:54:e6:24:33:a6:
                    5d:bb:37:81:a4:19:b8:1f:da:9b:71:d7:2b:82:4f:
                    27:30:8b:71:ad:53:6f:7b:31:22:f3:97:36:57:bb:
                    b6:31:1e:d9:ff:5e:b9:09:1d:d4:5c:49:50:e7:0a:
                    aa:fa:48:dc:4e:38:bf:8f:91:c1:7a:98:3c:49:8f:
                    80:10:a8:f4:5d:f1:e4:cd:d7:6a:80:94:45:2a:23:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FD:B4:E3:8F:DF:65:3B:D4:4A:E6:B6:EA:04:42:E1:12:1C:E3:30
            X509v3 Authority Key Identifier:
                keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:01:2d:a1:94:c0:51:90:99:8b:59:44:bc:fe:53:2d:9c:d5:
         2c:a8:29:97:62:aa:f1:57:9c:d0:f1:5a:9a:7d:ff:a6:e6:2c:
         38:9d:df:56:ed:80:96:da:a8:09:12:6a:8e:25:12:ee:04:e3:
         cd:a2:7a:a4:d5:74:3e:c7:88:12:9d:c3:a7:53:a1:74:f0:25:
         6b:a9:4b:66:c3:fb:08:a7:0a:6d:a6:4b:6f:ab:8a:ee:17:5d:
         ba:88:19:94:84:06:e3:a4:af:91:93:9e:b2:e1:dc:a1:d5:8a:
         40:7d:8a:d3:c0:cf:ae:f3:45:14:71:c3:85:09:57:9f:6d:e9:
         01:d9:a1:81:a8:54:e8:07:90:b3:c4:ec:c6:d9:48:e5:ef:a8:
         fb:c5:74:84:36:01:03:82:e8:61:b6:d7:ec:e6:2e:20:09:52:
         93:16:35:71:24:f6:8f:9a:bb:78:a9:6d:59:99:35:5a:2d:06:
         08:41:af:ee:10:f9:19:d9:8a:d7:db:71:fb:ba:d5:88:21:81:
         da:fb:f9:09:6f:81:82:30:e1:f8:46:04:27:8d:f5:4e:df:67:
         02:88:68:80:bf:93:f3:14:78:19:34:d7:f2:4b:91:e9:58:3f:
         68:06:39:aa:7b:65:3d:37:58:76:39:34:3b:e4:4e:51:69:12:
         bc:7b:7e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdVNSMxGCEFtTtxxxms277rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi
MjMxOTUwHhcNMjUwNjA5MTUwMDM1WhcNMjUwNjEwMTUwMDM1WjAzMTEwLwYDVQQD
Eyg1OGZkYjRlMzhmZGY2NTNiZDQ0YWU2YjZlYTA0NDJlMTEyMWNlMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8o7uCxEflxiv30C91MMFXTQNlFCz
5fjgacDhk0OEr1hvsVOoIMZyxiKJYT3PME/DVtBKqTItNNnm3YTPBEMkI05GE4lq
5WOxAN2Rz1yJNc8vXGYLGZunnrosJ3Z6ey3BDsk/g1kzKz+0mz9Q/u4IzcyIYAG2
qE6IRcg8Cl382u7upWEX1btdxk1Id4far8XpHF8YJECG9G1olaKt+wk3UOlmaCSz
Hk7pEh9qbc9DVOYkM6ZduzeBpBm4H9qbcdcrgk8nMItxrVNvezEi85c2V7u2MR7Z
/165CR3UXElQ5wqq+kjcTji/j5HBepg8SY+AEKj0XfHkzddqgJRFKiN/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFj9tOOP32U71ErmtuoEQuESHOMwMB8GA1UdIwQY
MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt
NTc1ODYxNTYzNTRlLzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl
LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAEtoZTA
UZCZi1lEvP5TLZzVLKgpl2Kq8Vec0PFamn3/puYsOJ3fVu2AltqoCRJqjiUS7gTj
zaJ6pNV0PseIEp3Dp1OhdPAla6lLZsP7CKcKbaZLb6uK7hdduogZlIQG46SvkZOe
suHcodWKQH2K08DPrvNFFHHDhQlXn23pAdmhgahU6AeQs8TsxtlI5e+o+8V0hDYB
A4LoYbbX7OYuIAlSkxY1cST2j5q7eKltWZk1Wi0GCEGv7hD5GdmK19tx+7rViCGB
2vv5CW+BgjDh+EYEJ431Tt9nAohogL+T8xR4GTTX8kuR6Vg/aAY5qntlPTdYdjk0
O+ROUWkSvHt+pQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 20:45:49 2025 by rpki-client