Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
File:                     1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft (raw, json)
Hash identifier:          iUfctxeOsR+uk2rrAtOyZdJpGtUk35EOL9rvc498H9I=
Subject key identifier:   8C:5C:76:EB:09:2B:DD:21:57:90:E6:95:44:90:DC:EE:4C:C1:BB:0A
Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
Certificate issuer:       /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Certificate serial:       019769CEB409DD6429095DB5F924178D1511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
Manifest number:          8E
Signing time:             Fri 13 Jun 2025 15:00:43 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:43 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:43 +0000
Files and hashes:         1: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl (hash: 0OIPtefkV7NAHHELaFtZrQs/b/ioBfKgaEoDHCP3T28=)
                          2: EOs1OcIjU7QpGNyQW0WAVHDhwZk.roa (hash: GhAzKLkw2PqF2q1j22FlhKv8LsjLpt0qx1W6/h0p4Js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:b4:09:dd:64:29:09:5d:b5:f9:24:17:8d:15:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
        Validity
            Not Before: Jun 13 15:00:43 2025 GMT
            Not After : Jun 14 15:00:43 2025 GMT
        Subject: CN=8c5c76eb092bdd215790e6954490dcee4cc1bb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:10:ef:8e:a3:f0:d2:90:ef:a3:01:d9:3f:83:
                    6c:56:20:c3:e1:74:c7:fa:bd:12:69:95:c7:9f:1a:
                    94:e9:1f:59:29:c3:bd:22:a7:bd:44:28:5e:b8:2e:
                    67:12:79:28:c9:2c:ff:b9:74:f6:38:17:cd:c2:a9:
                    ee:85:92:7d:eb:1f:b8:55:b1:7b:0d:7b:31:51:44:
                    e8:a6:70:ab:66:f4:87:8a:a8:d6:75:5f:88:8c:47:
                    a0:8c:2c:24:69:ac:2c:86:1f:1e:45:7d:df:79:9e:
                    b2:66:03:82:db:fc:6d:28:61:aa:b8:c3:99:31:d4:
                    ed:d2:ab:df:c1:1a:d7:d0:b0:69:b0:0c:09:2c:b2:
                    0f:2b:8c:49:45:5e:8e:ba:ee:cc:e9:18:d3:8b:82:
                    c5:81:77:87:1f:30:82:dc:f8:9e:cd:d9:e2:2e:8d:
                    97:5f:d9:ee:22:54:51:d6:ab:26:fc:72:11:69:4f:
                    cb:b4:e0:99:94:b2:3e:e6:1e:2d:16:87:28:7e:37:
                    e5:b9:e9:03:1f:cc:99:2d:03:b3:2e:87:f6:e9:8f:
                    f0:25:a5:d7:06:69:a9:72:74:7c:82:de:3b:bd:b7:
                    2b:d3:02:82:5d:a3:f9:ee:74:c6:e2:7c:b0:a7:2f:
                    07:71:e8:b6:82:76:a9:c6:49:4f:dc:c8:12:22:2b:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5C:76:EB:09:2B:DD:21:57:90:E6:95:44:90:DC:EE:4C:C1:BB:0A
            X509v3 Authority Key Identifier:
                keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:28:8f:3b:a6:d2:63:de:64:c4:99:8c:fb:4c:cf:38:1c:4c:
         99:d9:30:a8:5f:28:8a:f4:9e:b4:88:06:7c:4a:dc:87:fe:a9:
         cb:cf:f8:06:86:18:fd:82:49:fc:ba:de:7c:ac:e9:b8:54:3e:
         a7:71:a5:3d:e7:ec:19:5c:d7:0e:4d:9f:8e:17:14:d0:ec:09:
         f9:fc:f6:76:f2:db:9e:5c:c4:df:f6:1c:7d:01:86:dd:cc:af:
         ff:c5:5d:bc:aa:f2:72:5c:e7:dd:b9:c5:38:c5:23:f5:83:61:
         98:c9:f2:d2:9a:23:c7:46:a5:64:62:35:b5:e2:27:ba:df:1d:
         e9:52:92:96:20:b2:f7:fd:e8:b6:77:51:5e:96:b8:07:99:96:
         d3:ba:bf:17:9c:06:da:4b:7c:24:37:c2:91:94:3f:8c:3c:31:
         b2:09:42:bc:c0:56:c2:5f:03:55:a3:53:25:26:da:3e:f4:fb:
         6c:74:22:71:f3:69:d3:03:20:2c:05:bd:1f:c3:bd:ae:39:e8:
         07:e0:ae:34:a8:bf:2b:47:2f:42:4c:fe:c7:1f:4e:4a:83:7f:
         df:53:ad:04:2f:e6:02:d6:c4:cb:93:b8:5e:d7:f6:74:8b:d9:
         54:57:c7:6f:b7:66:92:1a:95:38:1e:d0:84:fe:62:dd:03:83:
         af:cd:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:03:36 2025 by rpki-client