Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File:                     8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier:          uSNRFTjvRFO3eUZlqw5Od22Ln/5WCwCehNHA9H0m31A=
Subject key identifier:   B8:76:C5:02:F2:2A:B3:5E:74:9D:E4:E7:F7:EC:60:1A:1D:6B:2B:55
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer:       /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial:       01974E20B85C1B06206FC967F26BAAB41576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number:          0380
Signing time:             Sun 08 Jun 2025 06:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:56 +0000
Files and hashes:         1: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: 3wjAgqih1+ttDkMcxkquNAXmRKitw1GAy8M6HMtCOvs=)
                          2: wN3I7D42_Scvh3kTX6wbZgc3STg.roa (hash: +5WZ8eZml5reiYd5KuhYrJcZjNCC9ofGPFNFq+2Hrx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:b8:5c:1b:06:20:6f:c9:67:f2:6b:aa:b4:15:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
        Validity
            Not Before: Jun  8 06:00:56 2025 GMT
            Not After : Jun  9 06:00:56 2025 GMT
        Subject: CN=b876c502f22ab35e749de4e7f7ec601a1d6b2b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:44:cd:92:1f:58:01:b2:f1:48:7e:35:bc:
                    1f:c3:a1:59:56:fa:3e:fe:f1:76:ba:bb:1c:d0:bb:
                    f8:d4:54:66:b6:33:95:84:0c:84:f9:85:a7:e5:39:
                    50:43:3c:9e:82:0b:f5:b4:84:71:40:9c:9b:a2:2b:
                    88:cc:9a:b6:13:f4:64:87:72:ea:7a:3c:13:12:82:
                    91:02:83:c1:67:f6:84:5c:16:0e:d0:9b:fb:60:4b:
                    c0:80:52:de:74:06:6a:45:84:3c:8e:cb:9d:78:d9:
                    a6:47:17:c3:18:6b:7a:7d:f4:08:d0:bb:4b:74:c9:
                    1b:6a:2b:57:d3:d7:4b:5f:e1:1c:34:81:77:0a:ef:
                    fc:16:26:cc:53:a0:15:fe:c8:93:97:0c:90:7c:f7:
                    b7:86:ac:ef:66:cf:99:a3:23:08:3a:ae:5f:86:5f:
                    a8:7b:85:32:f7:d6:21:d5:99:84:f2:f1:68:7f:21:
                    f3:f9:a1:a7:ec:77:a9:21:1e:d7:6c:05:d9:03:db:
                    e3:43:da:eb:ba:e6:bd:fa:6b:38:c9:a8:ae:5e:94:
                    fe:b1:c8:45:4c:36:3a:ca:d1:43:17:5b:20:db:c9:
                    77:e9:34:b7:27:82:7e:81:52:9d:54:17:4c:bf:5a:
                    22:28:82:e4:c7:c0:8b:b5:68:79:bf:c5:de:c9:25:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:C5:02:F2:2A:B3:5E:74:9D:E4:E7:F7:EC:60:1A:1D:6B:2B:55
            X509v3 Authority Key Identifier:
                keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:52:b0:9a:d5:33:27:6c:36:ff:1c:b3:16:49:58:1e:b7:ca:
         3a:2b:04:46:cf:48:41:27:17:21:68:b3:e7:35:aa:5d:f7:e4:
         15:a4:96:99:dc:3e:68:01:47:92:a8:f7:e6:74:b5:fe:41:79:
         aa:03:fc:de:66:60:24:3d:70:3c:d4:8d:15:f8:71:6b:bb:d2:
         a7:66:f1:5c:4f:d5:32:f8:e5:90:bb:d5:12:3c:b9:e3:9e:12:
         b0:fc:6c:ec:55:de:3c:32:90:41:8e:8c:6a:9b:ee:08:00:e3:
         cf:a5:12:d1:65:14:84:27:ba:64:8e:a6:29:39:e8:52:8b:c6:
         47:69:6d:3b:fa:d1:b1:05:c7:bc:8d:b9:ab:54:a2:88:f4:3a:
         c5:3c:1a:6a:de:b3:6b:a8:b8:45:4b:dd:0e:3a:eb:ca:7c:a1:
         1b:3e:db:4a:35:67:88:05:b5:67:95:e9:5b:2c:05:c1:18:a6:
         c2:95:c7:8d:3f:2f:f4:39:3f:1d:ae:b1:63:85:37:5f:d3:7e:
         e4:b3:d3:b1:6a:93:3f:a1:14:0e:30:23:6b:48:52:28:e3:59:
         7a:27:bd:f0:b7:3f:ad:21:f0:6d:c1:6b:73:7d:ef:e4:02:68:
         9c:d8:9d:a4:a3:6d:ff:91:f6:cb:f2:fa:e3:af:7e:f2:a6:15:
         b0:1c:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:24:46 2025 by rpki-client