Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          2h4yMj21zLi07jGWwshcDP9wrjua9eYRVTuIHJe2z9M=
Subject key identifier:   8C:F1:06:C5:13:85:12:D2:42:DF:A2:97:34:04:C6:DC:4B:C2:F8:7C
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       0197481E35EDE7B56423D724F296E4069966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          150F
Signing time:             Sat 07 Jun 2025 02:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:28 +0000
Files and hashes:         1: BUuoPdUgpRssN_8s1xD5RE2knSk.roa (hash: i3w2fhY/oY9rEDtPXwfXHRtgj9nEgJpg1E4G0VvBSNE=)
                          2: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: MVR0ZkIEDq0FR16FW6BvZ6Tup4Z87r7aXz72C1xyQiU=)
                          3: hI-d9_-nLNRhqznA_vGtUzzzpi4.roa (hash: 1ticuQGef+AQNaEeVWAc8kEXscPJuukVCdQXQ58jy44=)
                          4: yp6VXJ9ttEuEqrWfh1dI64LQkQ8.roa (hash: Mr06/vk6uaXb+ILhJfXZxgC4nSBWLm8yARcjAKzBYPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:35:ed:e7:b5:64:23:d7:24:f2:96:e4:06:99:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Jun  7 02:00:28 2025 GMT
            Not After : Jun  8 02:00:28 2025 GMT
        Subject: CN=8cf106c5138512d242dfa2973404c6dc4bc2f87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:f2:37:2c:44:ff:0a:23:ba:af:ed:e2:9e:
                    8a:94:eb:cf:5e:2d:14:b6:cf:7f:87:2b:e1:61:2c:
                    d2:1a:a3:f0:16:1e:10:6d:39:7b:3e:6f:4d:7d:59:
                    1f:52:5d:db:ad:8f:d2:ed:ef:e8:53:d8:0e:3c:6f:
                    b6:08:3f:00:88:f8:41:98:bb:02:8d:6d:20:c0:b6:
                    d3:7b:58:9e:aa:8e:99:7b:2e:23:dc:f6:2e:94:71:
                    61:fc:ef:07:ea:94:73:4c:db:33:1e:36:ae:fa:e7:
                    eb:cf:eb:fd:48:50:f3:a8:d2:7d:4f:cd:96:b5:bf:
                    e8:8d:ce:7e:30:a9:09:63:12:6d:99:6e:af:4f:de:
                    62:dc:77:1c:c7:1c:e3:a9:bf:5e:a0:6e:a7:58:56:
                    8e:0f:72:0c:ea:e2:5f:3a:d1:ed:4a:a5:25:c1:77:
                    53:cd:4a:ce:da:ce:a4:f6:5c:95:41:50:28:9d:3c:
                    12:46:3a:68:7b:49:c8:e8:d0:48:61:cd:67:09:9f:
                    35:5a:4b:ef:0b:54:35:d0:ce:be:b6:67:5b:11:87:
                    96:d4:65:b4:75:47:72:ff:66:14:55:60:71:23:e4:
                    d1:23:3b:7d:cd:a3:51:de:65:f0:c8:dc:fa:e8:02:
                    61:c0:bf:c3:b8:d2:41:b7:ca:d3:77:04:a8:bb:47:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F1:06:C5:13:85:12:D2:42:DF:A2:97:34:04:C6:DC:4B:C2:F8:7C
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:3a:39:c7:3b:3d:3e:61:af:f2:03:3b:e2:7e:8d:b5:90:
         0c:d5:93:21:ae:fa:92:c5:74:8f:09:3e:60:51:ee:ee:5c:9f:
         6b:09:33:37:40:cf:85:3a:a7:fe:3f:60:7f:95:9e:6e:be:78:
         53:79:10:c7:13:7e:0a:4b:eb:ad:b4:60:dc:b6:0e:7c:d7:78:
         11:9c:6f:bf:15:2f:8e:99:67:2b:76:7c:2b:92:5a:95:a7:3e:
         23:5b:0d:65:68:3d:fa:99:bd:92:69:bc:2f:b8:49:c7:34:d2:
         fb:54:47:9e:f7:8c:16:07:6e:e8:b5:46:6e:e6:c2:29:3e:6e:
         5a:a0:60:dd:a6:2a:f4:08:19:7b:62:bc:9f:46:12:4b:cf:d6:
         eb:d9:94:79:d4:70:f4:20:12:28:bf:c6:92:ec:51:43:35:95:
         77:8a:f5:b4:ba:1c:7a:37:3c:16:05:d6:18:82:3f:29:72:18:
         09:3b:ca:39:c5:ce:1b:48:37:24:4c:11:52:b8:e4:4a:b0:bb:
         ac:ba:90:a7:40:06:57:3b:e3:9a:ec:ce:d1:f0:b8:eb:f9:61:
         b5:57:01:6e:73:80:40:bd:41:e1:7d:d0:d4:29:ac:1b:ad:3f:
         ee:39:5f:06:5e:80:8a:01:ef:db:ea:b7:ad:83:e0:14:d0:d1:
         8a:cc:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:06:00 2025 by rpki-client