Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
File:                     8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json)
Hash identifier:          F2Qlu7F/p5XLtmS+YqAsSY3v+Yvtx4tX1pqelyX7Ggk=
Subject key identifier:   DC:39:D8:14:B3:12:3D:A6:A3:D0:D9:6C:61:CB:5F:70:C7:95:51:CF
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Certificate issuer:       /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial:       0197488D03BAB3723A714A828BB65A6831F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
Manifest number:          0C08
Signing time:             Sat 07 Jun 2025 04:01:30 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:30 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:30 +0000
Files and hashes:         1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: 37lMxKTdi+84C7LAh08tcCrZuiO9smEk28/m4NqLrw4=)
                          2: Nh4smUq7Nayhm_h4hcJhFSXbd98.roa (hash: 0tOyxit0JfWpS02swEQXMIpCvZrxbPbACrr2wxwWLsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:03:ba:b3:72:3a:71:4a:82:8b:b6:5a:68:31:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
        Validity
            Not Before: Jun  7 04:01:30 2025 GMT
            Not After : Jun  8 04:01:30 2025 GMT
        Subject: CN=dc39d814b3123da6a3d0d96c61cb5f70c79551cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:61:c8:9d:36:e5:fc:6e:27:1e:43:0c:bd:
                    95:ff:19:7c:c4:54:85:b0:20:64:70:e4:d9:de:d1:
                    9d:59:05:19:85:c1:0e:5f:05:e2:5d:96:82:71:e3:
                    9d:5f:39:16:35:1b:c1:6a:36:e5:50:85:40:0d:74:
                    63:f3:5e:f9:a8:93:c3:b6:1f:93:94:73:72:bc:8f:
                    98:0b:0a:1f:b3:a7:36:63:55:15:18:a9:f8:03:0e:
                    cb:d7:da:1f:07:b0:8a:d1:54:be:76:32:1f:54:89:
                    bb:cb:17:dc:23:66:43:4b:8d:07:d3:0c:53:b5:94:
                    86:ef:16:ed:9c:9f:74:ff:7d:d7:7f:91:a5:d7:63:
                    49:7d:3b:57:a8:25:7c:af:9a:ae:f6:d9:e2:9b:9c:
                    30:cf:a6:ab:03:16:15:bc:3e:6c:77:e1:f4:3a:7c:
                    72:c9:6f:91:c3:93:c3:ff:cd:9e:4f:6a:47:8a:b1:
                    c7:3a:99:4c:6c:26:1f:d0:47:e4:67:59:c8:76:01:
                    bf:5f:7a:c1:dc:92:87:ef:71:40:35:b4:85:c4:78:
                    a6:1c:25:2b:d9:8f:d4:16:44:b0:30:e2:2d:a6:53:
                    29:db:0b:a8:d5:b8:4c:2a:e7:e3:8c:d8:e7:55:de:
                    0b:27:6c:0a:d1:40:6f:83:e4:63:5e:b3:3d:a9:97:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:39:D8:14:B3:12:3D:A6:A3:D0:D9:6C:61:CB:5F:70:C7:95:51:CF
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e5:02:c8:b9:6f:8d:d1:ec:c6:e4:bb:c1:be:1c:2d:40:43:
         51:e1:a5:63:92:62:bf:6d:72:e0:64:c6:09:28:39:e2:e2:2f:
         0d:aa:3b:ef:c6:d6:f9:5d:f4:e9:3b:70:68:4d:3b:07:81:80:
         cd:52:72:14:9f:59:af:10:58:7e:b8:fb:d9:89:9f:bc:3a:2e:
         e9:4a:2d:7f:d9:b2:15:fb:bd:3f:98:e2:9c:bf:b6:dc:63:e9:
         32:0a:20:66:a4:01:e9:a0:8e:df:f5:a5:33:69:e1:7a:c7:60:
         6b:e0:21:0a:99:cd:77:c1:a4:83:79:24:aa:55:0b:a5:65:59:
         1d:75:27:3f:d2:6b:b0:55:fa:08:bc:17:16:b4:ab:71:86:76:
         63:53:bb:c1:53:9b:7f:71:e9:38:cc:f1:67:33:6a:ed:01:b7:
         23:15:27:f0:c0:0d:4e:4c:c4:42:77:f7:33:08:9a:15:2b:dd:
         7f:75:26:84:ba:66:ee:94:96:74:90:55:bd:55:f8:9b:54:3d:
         fb:38:af:47:40:32:e6:e6:ed:c4:14:26:d5:82:41:8c:9c:ba:
         30:97:11:d4:77:1a:af:c7:ee:e9:a3:9b:29:4f:30:d6:62:d4:
         ff:31:08:c2:92:3c:c0:75:ec:f1:1f:c2:ef:7c:c3:64:40:ca:
         6e:d2:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:45 2025 by rpki-client