Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File:                     8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier:          P26sb8iPJIg90TyDo2wIXzHUBo4RwJnSHEspQ91uRa4=
Subject key identifier:   46:5E:93:9E:A3:30:DE:06:9C:A9:6B:27:4B:59:8B:08:B6:50:F7:28
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer:       /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial:       01974D0D8ABE21ACEB4CABF33AD816208429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number:          0561
Signing time:             Sun 08 Jun 2025 01:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:22 +0000
Files and hashes:         1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: L7KG43Dqt9QRTaAF72oJqe+dQN36xvHBK8t5tXRxLXo=)
                          2: zTop8kv04M-CPRutWJMmw5M7s5M.roa (hash: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:8a:be:21:ac:eb:4c:ab:f3:3a:d8:16:20:84:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
        Validity
            Not Before: Jun  8 01:00:22 2025 GMT
            Not After : Jun  9 01:00:22 2025 GMT
        Subject: CN=465e939ea330de069ca96b274b598b08b650f728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:8f:e6:8d:e0:42:34:e5:ec:b4:1d:de:66:
                    98:2b:91:43:93:37:61:a8:fc:7b:b0:1c:0b:19:c5:
                    a1:c5:8a:b4:90:ac:56:aa:f5:9f:c6:b9:09:ec:cd:
                    7e:6d:01:86:9a:9b:b1:ac:c8:4f:17:8e:7a:fc:15:
                    24:08:7b:af:86:d3:ba:e2:8f:b3:95:17:e4:e7:7a:
                    29:c4:c6:2a:1a:0a:7d:72:be:aa:c6:c4:64:87:d3:
                    d7:bd:eb:90:55:50:7b:0e:6c:3d:a4:90:5d:e4:89:
                    b0:d0:00:6c:5e:b2:de:88:fd:92:23:23:94:d0:48:
                    b6:ac:1c:a7:d5:81:1a:a1:40:eb:72:03:90:ee:52:
                    d2:f1:4b:79:33:48:8e:36:fc:9d:19:12:71:b9:35:
                    e3:33:68:b7:23:3b:27:53:85:d5:54:02:06:56:c6:
                    f8:ef:96:2c:e7:bd:5f:30:11:d8:9c:68:0c:78:be:
                    8b:dd:32:62:c7:2f:93:70:89:49:da:f8:42:d3:9a:
                    51:71:cb:c0:36:88:c6:eb:c0:55:d8:a9:f5:f0:71:
                    d9:48:1a:fa:68:4d:77:06:78:75:0c:a9:ba:17:bb:
                    b8:68:a5:03:fa:ca:c5:23:6f:8a:49:fa:ca:87:04:
                    4a:16:26:5f:d4:f8:de:87:39:8c:43:92:3d:1f:6e:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5E:93:9E:A3:30:DE:06:9C:A9:6B:27:4B:59:8B:08:B6:50:F7:28
            X509v3 Authority Key Identifier:
                keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:41:98:6c:3b:23:6e:53:ec:2b:3e:26:6b:ae:4f:42:09:9f:
         ba:8c:0c:90:76:03:ca:f5:e1:69:94:40:eb:93:64:36:f8:24:
         a4:6e:42:22:64:68:5f:bd:33:3f:e8:13:40:c6:1d:c0:33:14:
         f6:19:4b:85:67:99:6f:ae:cc:0d:75:8d:0a:7f:b8:df:65:bc:
         8b:4e:d1:8d:b3:00:64:b0:6b:23:f0:71:c3:84:21:b5:ed:56:
         56:ff:46:81:af:6f:95:19:72:51:de:ae:e5:59:99:a6:c1:37:
         b8:15:0c:24:43:5b:12:d5:69:95:07:90:ef:8a:3c:2e:72:d7:
         56:1e:bb:83:cb:7a:8a:73:ae:74:34:06:c2:c0:a6:f8:53:48:
         9c:66:8f:b6:3d:7e:16:85:7d:d1:f1:ee:4f:34:75:08:cc:62:
         c2:26:44:94:67:46:ef:21:2c:a1:cc:69:9e:eb:f2:4b:a6:b0:
         02:6b:13:f2:aa:e3:56:58:f7:7d:5c:13:60:9b:e1:3d:e1:d9:
         23:6d:67:5b:b1:e1:a8:c2:7e:36:f0:f9:b5:8b:22:71:39:a7:
         1d:46:13:83:8d:62:4d:83:89:3e:35:c8:09:32:f9:2b:92:a0:
         7e:19:cf:98:06:9a:ca:2c:f5:ab:a2:93:05:c4:93:04:db:50:
         93:52:2f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:07 2025 by rpki-client