Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
File:                     jT81agLZZ5zokLXVHg3sLz82M2E.mft (raw, json)
Hash identifier:          LTSS9NGs9YCaOZx1OnkrhagIj5JE3GxZ6xonX8ys2PE=
Subject key identifier:   05:E1:8C:38:F3:1C:12:B6:5A:ED:69:FD:74:BA:3A:A0:C9:46:AD:12
Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
Certificate issuer:       /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Certificate serial:       019757C850A9212FF42017412F732D6A3188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
Manifest number:          0FAC
Signing time:             Tue 10 Jun 2025 03:00:34 +0000
Manifest this update:     Tue 10 Jun 2025 03:00:34 +0000
Manifest next update:     Wed 11 Jun 2025 03:00:34 +0000
Files and hashes:         1: EWrLpH4Sf73kpylzjyIWqmsW4Ak.roa (hash: WAVleiEyABWuPtt06sTvvo12euN11LhTBCh1lmQSM18=)
                          2: TbDm0VV2IIni5MfaMJDxPEqxHQQ.roa (hash: 7X6b+hTk4kXwHQiBVUnERgcn3N8YcwYoax1mTJYhV7U=)
                          3: YXd5kwg4HgCLWghJcX8C036D1Wo.roa (hash: 4mxl4tWWj/m9oN5bIXyonk91G4n197ABWNjjuhmRTbU=)
                          4: jT81agLZZ5zokLXVHg3sLz82M2E.crl (hash: IrXOYo8bm3ykVlu1Y+QM63YojBcJjsNcZQPV41cr0kU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:c8:50:a9:21:2f:f4:20:17:41:2f:73:2d:6a:31:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
        Validity
            Not Before: Jun 10 03:00:34 2025 GMT
            Not After : Jun 11 03:00:34 2025 GMT
        Subject: CN=05e18c38f31c12b65aed69fd74ba3aa0c946ad12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:b7:56:45:72:8c:85:f4:80:52:ea:c4:72:
                    aa:45:9c:95:83:2b:17:74:8a:7e:b4:9a:b8:1a:68:
                    60:a8:26:d4:47:21:f1:6a:55:9f:4a:e9:06:a6:f9:
                    d7:06:1a:97:84:03:6f:30:6a:e6:57:af:32:04:42:
                    6c:e6:f2:b1:97:e5:88:4d:fa:d8:f7:2d:74:bc:4e:
                    bf:7e:14:3a:07:67:8f:22:94:77:64:04:56:23:f9:
                    1e:af:35:23:31:9a:ca:9e:22:63:8e:74:86:aa:37:
                    ad:aa:53:e0:82:67:ad:3a:3b:6c:c9:cf:74:dc:18:
                    98:7b:59:5c:a2:80:4d:9f:d9:09:94:cd:80:5a:2d:
                    26:48:45:c0:c8:1f:ba:71:a2:e3:4e:8a:33:6e:46:
                    5d:bc:7b:ac:d8:31:a9:b3:6c:74:56:af:a7:69:a0:
                    1b:b5:c8:64:6f:a9:3b:b1:b0:bb:7d:74:25:d1:ee:
                    4a:d7:6e:b1:79:41:38:c0:08:b6:69:93:e4:17:72:
                    2b:16:5d:78:30:8e:39:76:8b:6c:79:43:4a:c2:63:
                    86:6a:4e:39:8f:3c:01:78:81:d7:2b:2d:bf:3c:50:
                    0d:36:7b:e0:0d:6c:47:25:6a:04:bd:d5:e4:46:00:
                    ef:bd:12:be:ea:7e:96:5f:a6:0c:7b:e0:04:27:a2:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E1:8C:38:F3:1C:12:B6:5A:ED:69:FD:74:BA:3A:A0:C9:46:AD:12
            X509v3 Authority Key Identifier:
                keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:db:b1:57:8a:79:f9:a5:60:ba:d5:88:b3:f5:4a:45:53:66:
         04:a0:11:b2:43:10:22:d3:68:06:38:28:cf:10:91:f3:3f:35:
         c7:f4:40:80:d0:19:91:d3:4e:05:92:19:0c:07:7f:c1:ba:2b:
         f5:62:b5:95:20:26:8a:95:c7:91:0c:b9:83:55:6d:9a:e0:6e:
         d6:ca:21:30:b9:84:c9:df:b2:19:b7:ee:b6:df:12:c4:fb:39:
         3e:b5:25:b8:a9:47:4b:fe:8d:e9:5d:0c:1b:e8:1e:75:e0:66:
         26:54:f1:da:00:b9:d9:08:f3:52:b7:0d:e8:8c:01:c0:fe:a8:
         93:3b:40:aa:c3:28:85:4e:a1:0b:74:0c:12:e3:3a:6f:65:61:
         6a:98:d8:e5:c0:26:c8:52:6c:45:32:67:27:f5:bc:46:c6:08:
         63:a6:45:48:be:01:62:31:48:e9:b1:2f:0b:8d:98:ba:53:cd:
         c0:62:3d:0e:a9:45:a0:c1:86:b4:22:69:2b:b5:6a:c2:f8:de:
         ea:91:6a:43:10:5b:70:bc:ad:0b:7b:6d:87:0a:cf:81:68:50:
         d7:ab:e5:7b:ca:02:dd:e6:b3:01:bb:40:4b:69:58:ee:d6:83:
         9e:2b:bb:34:98:b8:b2:6d:70:47:77:6e:97:80:fd:da:a2:68:
         09:7e:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:24:36 2025 by rpki-client