Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File:                     V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier:          WkMzcJY9eYooUxq4F9AWoJnWrOFP2qm6+3mS5W88ywk=
Subject key identifier:   F3:DE:2F:1A:9E:BE:21:DD:4F:D8:BE:CE:F3:5D:AC:5E:2F:B2:87:B8
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer:       /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial:       01975D25A8A94A812A555EAEE7F77F75594C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number:          14B8
Signing time:             Wed 11 Jun 2025 04:00:38 +0000
Manifest this update:     Wed 11 Jun 2025 04:00:38 +0000
Manifest next update:     Thu 12 Jun 2025 04:00:38 +0000
Files and hashes:         1: 3AgNndxC3sa0yZvKsMQhIngarPI.roa (hash: ZMLpockLoP2nXNAFFK4mODjHzPZHkVrx4CiFq319wa8=)
                          2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: JDm6fbHXPXFI9ey+OAD+UFEPNfMzbnuN7bqMhf0mxpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:25:a8:a9:4a:81:2a:55:5e:ae:e7:f7:7f:75:59:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
        Validity
            Not Before: Jun 11 04:00:38 2025 GMT
            Not After : Jun 12 04:00:38 2025 GMT
        Subject: CN=f3de2f1a9ebe21dd4fd8becef35dac5e2fb287b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:cd:20:42:fc:18:0d:fe:c7:ce:0d:ca:42:
                    92:26:57:fa:19:3e:5d:7e:ac:24:0c:d6:f0:c8:3d:
                    5f:c1:ba:4e:f0:3f:03:3f:74:01:cf:9c:80:3d:2f:
                    83:03:6a:1f:54:c1:96:ed:30:90:ed:51:22:fd:53:
                    84:b6:ba:4e:bb:bf:ad:00:bf:01:9c:56:8e:9d:b9:
                    2b:3c:21:76:23:5d:e4:72:d7:4a:39:a9:cb:3c:6d:
                    7a:ea:07:e6:df:9e:5b:89:21:e3:59:44:59:ba:dd:
                    f9:fb:58:bc:90:75:d3:01:1a:76:a4:7e:ed:43:92:
                    f7:9e:f5:73:14:55:58:d6:44:c7:27:2e:0c:c0:28:
                    13:38:a2:48:8f:b1:62:3c:95:16:77:2f:f9:10:08:
                    ca:c5:64:aa:33:c3:eb:20:7a:d6:89:6b:f7:aa:01:
                    8d:00:6c:75:32:63:e6:7f:0f:e1:7d:f3:ab:4b:7c:
                    ff:58:10:8b:ca:e1:7f:af:a1:b3:38:64:59:ce:57:
                    96:0a:a0:47:cd:de:33:1c:38:79:bd:b9:58:2a:f2:
                    a3:7c:48:3e:3a:79:d1:22:eb:b1:e3:e7:80:d9:f8:
                    99:40:a5:3a:a7:8e:14:04:7e:35:4e:94:d5:6c:1f:
                    a2:9e:c0:5c:7f:de:d4:b2:0c:37:26:73:8a:ce:e3:
                    84:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DE:2F:1A:9E:BE:21:DD:4F:D8:BE:CE:F3:5D:AC:5E:2F:B2:87:B8
            X509v3 Authority Key Identifier:
                keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:1b:59:a5:3d:81:4b:ac:41:68:34:b3:d0:6e:c4:31:61:
         24:11:62:15:e4:9c:d6:5f:81:5f:ed:04:c6:b9:a8:88:2a:cd:
         b2:7e:68:c3:67:c7:1b:b3:21:b3:0a:c7:72:04:3d:66:76:f2:
         fa:d6:7a:11:b4:de:74:b6:4b:2e:35:15:cf:b4:b5:26:bf:5f:
         77:97:02:98:10:ef:51:5a:43:4f:46:49:7d:55:df:02:d9:9f:
         d4:05:f6:41:94:94:6c:20:79:98:01:a3:d8:e8:85:94:73:fe:
         11:8d:fe:f9:e1:95:32:31:c7:78:bc:28:ee:80:d9:2b:06:92:
         ea:7a:15:9a:ad:a8:3e:a4:b9:80:19:dd:f8:6f:20:b4:c1:0e:
         c3:71:70:5a:76:b1:35:44:48:0a:ad:70:7f:04:19:de:fb:74:
         78:da:63:2d:2c:fe:40:92:60:17:08:ed:0b:bc:1b:b7:3e:ad:
         19:30:7e:22:d0:98:9a:41:9b:f0:02:75:32:a4:b2:02:f5:1f:
         39:9c:f7:7a:69:dc:66:b7:57:97:52:06:eb:4b:2f:94:f0:bd:
         56:5c:5c:bb:de:2e:21:cc:ca:bb:8b:01:b2:18:cc:fc:f4:bc:
         42:70:93:ac:81:31:1d:9b:39:a9:6c:19:70:c7:d5:7b:02:4c:
         eb:dd:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:44:06 2025 by rpki-client