Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File:                     8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier:          I74S17RjGs84fI3jI7mMG+RcG8OYzak0gbeUHP2ZQWA=
Subject key identifier:   0C:C7:B7:44:8E:88:F4:F1:CC:D0:98:38:ED:32:E0:D3:BB:27:73:F7
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer:       /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial:       01976997ED71F870706080D8A7782E5FB8EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number:          117F
Signing time:             Fri 13 Jun 2025 14:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:53 +0000
Files and hashes:         1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: u21vRXA7GroSbMKGg+0GOxvbCbD/dRH7TSd+zpp5XjA=)
                          2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:ed:71:f8:70:70:60:80:d8:a7:78:2e:5f:b8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
        Validity
            Not Before: Jun 13 14:00:53 2025 GMT
            Not After : Jun 14 14:00:53 2025 GMT
        Subject: CN=0cc7b7448e88f4f1ccd09838ed32e0d3bb2773f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:cc:3b:c3:80:f9:79:2d:1f:ca:d2:84:3f:
                    bf:96:9d:c8:82:65:b7:20:87:44:4f:fd:14:5b:c8:
                    cb:d1:a9:77:7b:b9:26:8e:dd:32:ca:37:a2:f0:b6:
                    dc:cd:c3:5f:51:21:bb:0d:27:1c:d2:c7:f5:f4:17:
                    f7:f3:97:82:39:5e:5b:a0:02:50:64:b6:1e:2b:96:
                    e8:a5:e9:bd:cf:85:72:74:d2:9e:9d:d5:78:42:0e:
                    af:d8:b5:b2:fa:11:52:b6:63:4b:d3:fb:62:3a:40:
                    7c:11:08:1e:84:34:f1:42:82:c5:ca:34:2f:f7:f6:
                    33:72:07:b2:c0:1c:e7:05:f0:12:bd:8a:db:c0:b5:
                    1c:e9:05:a7:2f:47:74:34:a2:66:d2:47:ba:a7:61:
                    b5:27:b2:5a:ee:db:14:50:cd:c4:ec:e5:c1:c2:7a:
                    71:61:2b:f9:8c:32:57:50:3e:47:8c:54:bc:07:12:
                    f7:bf:2e:dd:c8:2f:0e:ab:6b:d6:67:9b:3a:98:81:
                    6c:c2:cf:73:07:40:00:a8:aa:49:c1:a4:71:c6:bb:
                    b5:5a:b7:b5:9f:bf:f4:aa:15:5b:63:63:7a:18:46:
                    cc:4b:0d:e8:8d:16:db:fc:60:9a:2a:a5:17:e5:45:
                    fa:c3:fa:4d:3a:16:0b:68:c0:53:55:fc:4b:aa:75:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C7:B7:44:8E:88:F4:F1:CC:D0:98:38:ED:32:E0:D3:BB:27:73:F7
            X509v3 Authority Key Identifier:
                keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:03:35:1e:5e:9a:18:5f:8f:18:64:e6:3a:f8:25:36:53:af:
         98:06:1b:b9:51:13:a7:53:ae:68:16:9a:e1:d6:a0:b1:f8:cd:
         e8:3c:00:55:6d:04:cb:aa:5d:b4:97:16:ca:44:66:ba:ed:81:
         2b:e3:69:a1:c3:38:00:ae:95:06:c9:70:9f:46:57:5b:45:10:
         fd:98:31:0d:23:57:43:f5:fe:46:fc:ff:ca:3c:e8:91:6f:15:
         60:f7:73:99:fa:60:fe:43:ec:39:27:5c:80:6d:45:19:55:71:
         8b:39:32:ec:9c:5b:fe:77:c9:b8:57:ca:bf:c9:b2:58:c4:c4:
         68:74:04:72:ce:2f:1b:25:8a:be:fc:3f:82:a7:91:f5:78:5f:
         f2:c5:68:83:88:19:63:28:fa:95:90:ad:bf:34:8f:19:2e:7d:
         9e:0a:72:47:13:a8:e3:fd:02:35:b9:42:2f:63:24:62:6f:8c:
         68:eb:60:44:6b:b2:f6:6d:5e:2f:84:49:a1:ca:60:19:be:03:
         eb:5c:f3:1e:9a:49:c0:9c:18:04:6e:4b:9b:28:c4:7b:87:ae:
         38:98:28:c4:82:09:19:7e:63:51:f7:0c:de:e8:8c:89:dc:db:
         91:9f:a0:c6:fb:c2:4c:6e:b9:8e:5b:cb:4e:32:69:42:c1:12:
         38:d1:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:13:29 2025 by rpki-client