Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File:                     i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier:          PxllUbPBStcqDmwETEl0t7/paxGxpyOFV0Nb7FrrSaM=
Subject key identifier:   66:8C:9F:BB:DE:B6:78:C6:45:8D:2C:D1:EE:18:9D:5E:F0:58:7F:3F
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer:       /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial:       01974DB2B7E98144FD89DBE75A2E58DC6FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number:          0834
Signing time:             Sun 08 Jun 2025 04:00:47 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:47 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:47 +0000
Files and hashes:         1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: WE6tZBMhU9Y4Cn6uS7DjCP4Hv3KC6VyFwiGSneOzbAI=)
                          2: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (hash: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:b7:e9:81:44:fd:89:db:e7:5a:2e:58:dc:6f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
        Validity
            Not Before: Jun  8 04:00:47 2025 GMT
            Not After : Jun  9 04:00:47 2025 GMT
        Subject: CN=668c9fbbdeb678c6458d2cd1ee189d5ef0587f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:c6:44:36:14:e6:85:6d:26:74:01:ce:66:
                    94:1f:0a:3a:83:d1:60:46:e0:0c:16:6e:09:9d:24:
                    39:1d:7b:5c:cb:30:bd:c8:74:d9:49:3a:a4:c1:70:
                    38:cf:79:ef:7d:05:4d:59:d5:bc:37:bd:c2:84:64:
                    85:ad:e1:7a:b9:15:21:36:df:ec:c9:d9:cf:f8:c4:
                    b3:a1:f0:e1:64:41:d4:dd:0a:d1:fc:57:41:6f:fd:
                    9f:cb:24:34:e5:3f:e5:8f:a4:0e:ea:12:7c:3c:47:
                    0a:0f:bc:bc:92:be:44:56:02:2c:60:2f:c9:99:b5:
                    78:8d:01:c7:51:79:8f:c9:36:40:54:ac:bc:5c:d1:
                    1d:32:dc:61:fc:fc:74:12:39:75:9e:42:06:38:f2:
                    56:47:e1:4b:ec:b7:2f:94:c6:7f:20:2d:40:75:71:
                    d0:f3:bd:0f:24:8b:cf:75:24:72:4a:1f:47:fc:7b:
                    3b:02:d4:01:96:59:9e:d1:56:37:7d:60:e1:c4:e5:
                    f5:c9:9e:fa:f0:09:05:b0:c3:bf:f9:03:84:5a:8a:
                    40:90:4e:80:ad:d3:74:7e:ae:38:95:ec:91:33:67:
                    58:88:64:c9:08:81:4c:9e:fa:3f:f6:85:c9:42:bb:
                    1e:3a:77:49:a6:5f:fa:8c:a9:1c:07:ad:eb:1e:8a:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8C:9F:BB:DE:B6:78:C6:45:8D:2C:D1:EE:18:9D:5E:F0:58:7F:3F
            X509v3 Authority Key Identifier:
                keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ac:46:84:96:6d:07:ac:b4:7e:bd:f0:e6:97:a1:74:45:96:
         7e:88:eb:62:b7:7a:3d:f3:02:fb:41:82:c2:79:6f:d3:f6:93:
         e5:22:a3:90:cf:31:2c:9d:9d:f3:2c:64:dc:db:b5:5e:e4:6a:
         d0:62:04:d7:0d:bf:59:72:02:91:2a:e2:1a:dd:b7:a4:c4:9e:
         66:fa:08:78:a8:d9:96:8b:17:a8:47:a9:4e:24:be:67:ae:a0:
         31:6d:72:c3:1e:b4:d5:fa:db:e2:b9:fd:83:3c:4b:96:6f:79:
         14:f7:fc:66:23:62:fa:11:b9:f8:bf:4f:29:4b:34:fa:93:bc:
         de:29:1f:6f:10:ea:32:8c:55:e1:6d:65:17:0c:fc:fa:a3:29:
         cb:29:20:11:15:77:d1:2d:74:81:f7:43:29:b2:6f:ea:54:29:
         b2:28:a8:b7:01:a3:62:6d:82:55:db:61:8c:71:f5:2a:c2:97:
         6d:27:50:81:e9:3b:6b:af:23:bb:58:d5:ef:67:8c:8a:bc:e1:
         f2:21:20:7b:69:6b:9c:3e:12:ec:96:4a:e8:cf:68:11:6a:ad:
         62:0b:6b:9f:03:4e:1f:e4:f8:9f:64:f3:fc:e8:78:32:e7:55:
         d2:69:82:bd:1e:af:77:f7:77:59:72:c9:03:a4:b2:8e:ba:35:
         d5:ec:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:45:40 2025 by rpki-client