Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
File:                     s1ACugiNW9CcFVPc7VsL85B_9zY.mft (raw, json)
Hash identifier:          t63dLYjS9GAp9sA96pic7jP0r2E0GUK9jXzNFcsKPXg=
Subject key identifier:   68:A2:01:8B:70:36:8F:D2:C1:84:76:93:DE:6F:C8:05:63:A1:15:25
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Certificate issuer:       /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial:       01974C321C880C072E6AD7E678C59069C0BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
Manifest number:          088E
Signing time:             Sat 07 Jun 2025 21:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:41 +0000
Files and hashes:         1: D3KzOuSHnINj7YsYIxZhKw2tJLI.roa (hash: TArdMR0dUk5iRwDg/3JrhTXVptyyPyGKyBf2Jxa6esk=)
                          2: K7_w83CbqB50p5lcpbyDnATtK4Y.roa (hash: /8SCcb2O2tmxF/iex69u1hAPcq9K2D7sGmmIbln+NaE=)
                          3: MuKsPf92gYpb4VkgQi1f9xcWVfE.roa (hash: 8DECBi25scQbmewrZN0eRe0LEc/MBejb+MDaRq8CQ1k=)
                          4: RU33m0E_v4JtyZuDuLE7um4TGFs.roa (hash: rYLpalqoskbodL0bGl/nYGGqSHm/lj+AMxh3BExa9eA=)
                          5: s1ACugiNW9CcFVPc7VsL85B_9zY.crl (hash: dr03xYAz/xxkttZW91p46IAXkWDJWXnQ3XxdJS8sCkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:1c:88:0c:07:2e:6a:d7:e6:78:c5:90:69:c0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
        Validity
            Not Before: Jun  7 21:00:41 2025 GMT
            Not After : Jun  8 21:00:41 2025 GMT
        Subject: CN=68a2018b70368fd2c1847693de6fc80563a11525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:bf:7c:04:65:9e:f2:ef:54:fa:ac:d0:42:
                    52:49:6a:b8:58:51:b4:a3:71:3c:35:cd:dd:a1:44:
                    1d:82:ab:c4:2f:35:43:33:7b:17:01:25:75:a3:2f:
                    b1:6b:1b:00:c5:fa:33:08:1d:a3:a7:d3:47:ed:cf:
                    54:6b:1a:04:42:f6:82:06:b7:a8:cc:3f:44:dd:32:
                    72:c6:91:3c:3a:64:22:e9:de:b6:a0:c2:6f:85:3d:
                    58:df:ca:2f:f5:e0:18:6d:d6:c8:3b:f8:41:30:f8:
                    7c:8b:44:b8:ff:e7:de:ac:f5:f3:a2:99:9a:0b:9f:
                    21:9f:4f:d7:ff:38:c0:92:2d:75:15:36:c6:d1:74:
                    b8:c4:fd:98:c4:93:52:79:8e:41:e2:78:f6:74:a5:
                    3e:93:d3:34:84:36:f8:81:c6:cb:8e:4a:5b:20:14:
                    44:8c:39:de:19:13:9a:15:1a:b3:a6:d8:6e:c6:62:
                    7b:8d:00:b3:ff:a7:41:52:94:bf:d2:af:c8:bd:6f:
                    76:d8:f7:59:26:93:8a:cb:5d:ac:fa:eb:70:e6:14:
                    f5:4b:ed:1f:f7:a3:e0:60:5e:78:20:b5:66:0e:06:
                    0d:f3:27:5f:31:60:08:ba:63:ce:ac:fc:84:98:78:
                    a2:63:45:38:da:b8:85:9a:f6:9b:df:cd:58:12:8e:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A2:01:8B:70:36:8F:D2:C1:84:76:93:DE:6F:C8:05:63:A1:15:25
            X509v3 Authority Key Identifier:
                keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5c:53:7e:2e:ab:2c:06:f4:d4:bc:bc:43:fa:00:99:8c:d6:
         04:9d:49:80:e0:28:ad:c8:e1:22:f1:16:b7:77:5b:1f:25:94:
         1b:23:6a:a5:77:88:13:aa:3e:fa:68:32:e3:92:21:5a:f8:de:
         3a:04:72:77:76:97:7b:8f:65:37:fd:23:3f:c9:cb:da:8d:a6:
         a2:ea:a1:63:3c:47:43:73:55:92:70:65:3c:84:2a:57:78:29:
         3a:13:b3:ea:6f:37:81:e0:85:56:55:4d:4d:e4:73:b5:55:6b:
         86:10:a3:80:50:d2:fe:21:78:4f:0a:f5:b8:bd:4b:1f:cf:e9:
         43:53:e0:e9:5b:9b:31:56:05:de:a9:6c:e1:cd:92:b2:e1:ce:
         7f:99:26:08:dd:fa:be:85:33:66:22:78:c6:b5:4c:3b:f3:33:
         f0:db:ef:7f:cb:4b:6b:08:4f:d6:47:33:fc:d8:8c:51:5a:26:
         f4:ca:49:0e:72:9e:3c:47:d1:0d:99:7d:b4:56:f2:52:4f:7f:
         16:34:cd:a4:13:64:de:df:eb:2e:5e:75:f8:fa:71:5b:6c:15:
         26:fd:b9:fe:04:de:28:bb:45:e8:98:23:b6:c5:d7:6b:e0:f0:
         30:00:67:ea:c1:ef:72:0d:a2:bd:fd:31:7c:e1:a5:a2:89:68:
         a6:bb:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:20:31 2025 by rpki-client