Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File:                     i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier:          FoC4x395NtPy5c8+7/ne8gW4zBk6v32AvV0dfPNHFaQ=
Subject key identifier:   31:A0:D0:E6:B1:47:8B:3A:BE:4A:BA:1E:8A:E5:A2:89:E7:F6:57:04
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer:       /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial:       019756ECA050A6CB136AEA28941935745BBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number:          0AF0
Signing time:             Mon 09 Jun 2025 23:00:37 +0000
Manifest this update:     Mon 09 Jun 2025 23:00:37 +0000
Manifest next update:     Tue 10 Jun 2025 23:00:37 +0000
Files and hashes:         1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
                          2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
                          3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: Rod8sOM8Hy/XzoZmZOopwwgqnFUZ5jmTfV6GRMnX1wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:ec:a0:50:a6:cb:13:6a:ea:28:94:19:35:74:5b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
        Validity
            Not Before: Jun  9 23:00:37 2025 GMT
            Not After : Jun 10 23:00:37 2025 GMT
        Subject: CN=31a0d0e6b1478b3abe4aba1e8ae5a289e7f65704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:61:2c:01:eb:a8:fe:9e:10:53:23:bc:82:
                    ca:fb:bb:39:c2:49:6a:35:48:75:cb:66:55:ef:3f:
                    b2:aa:d9:82:e7:0d:e7:10:26:0b:71:20:38:86:f3:
                    60:cc:30:15:f4:e0:bd:f7:79:8a:05:e2:c7:e4:c2:
                    77:1c:da:5c:20:04:61:4d:ee:60:79:a4:53:11:5f:
                    20:8f:47:2f:f9:0c:03:cf:9f:d2:25:bc:85:4d:2f:
                    f2:51:39:52:56:9e:a2:37:73:29:c1:4b:5e:7c:13:
                    84:44:aa:5a:85:4b:38:e6:3c:37:3e:90:a7:64:77:
                    00:e8:25:c3:4c:40:24:d1:9c:97:e5:c8:06:ab:0a:
                    b8:b3:07:cc:f9:de:88:1f:cb:6a:79:6a:11:9d:19:
                    0f:d0:99:61:53:64:67:4a:bb:90:57:b4:92:e8:f1:
                    31:bf:67:4e:6c:81:9a:6d:29:1e:5e:d7:d4:34:60:
                    13:72:63:7f:ce:e5:66:e7:12:b3:6d:e6:e4:a3:07:
                    93:d5:10:7d:c3:76:f0:47:88:ec:0e:f1:06:89:81:
                    a9:9c:bd:c9:50:db:df:b7:77:31:10:32:5b:1e:46:
                    bb:9d:85:df:6a:e3:65:fe:26:2b:36:7f:3a:3e:13:
                    0c:ba:d4:69:e5:c4:4c:bb:e5:23:20:81:8e:c2:55:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:D0:E6:B1:47:8B:3A:BE:4A:BA:1E:8A:E5:A2:89:E7:F6:57:04
            X509v3 Authority Key Identifier:
                keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d9:37:ae:43:4f:8d:94:bf:aa:b3:67:dd:97:b6:6d:08:73:
         4c:b1:9b:ac:c1:df:ff:90:70:db:d4:8b:20:e3:6f:d8:68:f9:
         96:10:5f:37:2b:70:0f:26:83:92:37:8f:4a:14:a8:5b:e5:85:
         d5:c4:8a:e9:33:3c:d7:a9:67:79:c8:99:7d:b9:ca:31:58:b9:
         50:88:a1:24:c5:67:ac:78:01:9e:b3:2f:5d:d3:c1:ff:3c:a2:
         85:65:52:71:3c:d7:c2:87:db:24:d1:20:72:d0:67:1e:88:67:
         2b:80:62:ed:86:6d:8a:47:e3:ac:8f:6b:3a:fe:00:bb:af:03:
         84:85:88:0a:c1:cd:b1:dc:0c:36:01:74:83:fb:a5:88:51:90:
         6f:1a:80:8c:b0:84:c4:46:5d:ab:21:0c:21:50:04:28:d6:71:
         81:c8:68:ad:c8:96:55:e2:52:b5:ca:9b:52:b7:39:9f:da:ea:
         7a:06:38:38:ef:25:c8:f8:be:80:75:f8:58:4e:3f:15:77:a7:
         0e:47:52:a5:d5:b1:a8:25:52:f7:26:38:14:c9:a3:2a:b9:d6:
         5d:3c:c7:39:68:e2:30:55:c5:21:5d:a0:b1:3a:dc:22:62:6f:
         89:db:d4:a4:9b:02:5b:7c:de:c4:93:ef:38:d3:05:24:92:ac:
         b2:7f:0d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:30:59 2025 by rpki-client