Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File:                     8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier:          2Ew7AKr2c4+B5JeY37LzB0oy9oonrQX8VEJCrWHe76c=
Subject key identifier:   4F:14:93:BD:52:D3:E2:F4:A9:62:2E:88:73:B9:59:C8:F0:A7:BB:B4
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer:       /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial:       0197542321A0E2F46499CA1797A3965C421B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number:          112C
Signing time:             Mon 09 Jun 2025 10:01:17 +0000
Manifest this update:     Mon 09 Jun 2025 10:01:17 +0000
Manifest next update:     Tue 10 Jun 2025 10:01:17 +0000
Files and hashes:         1: 0tRdpRIVKa8GC5rndgVUBjWyq_0.roa (hash: zQ8BfDuwqWf4BKhuE29aPhx2YBI5m36iLFxsbczWouw=)
                          2: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: Yv2x8o7bH/brXgbBD5W0rO5oJXyHOG6w8D7XdvO88u0=)
                          3: MkYvLYpqbrY1k1hziBPcgNzDk5A.roa (hash: 9jZ4rUSHtTJBWwTiSaqDWjUP8V/ZrhGAYaJndS1KB3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:23:21:a0:e2:f4:64:99:ca:17:97:a3:96:5c:42:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
        Validity
            Not Before: Jun  9 10:01:17 2025 GMT
            Not After : Jun 10 10:01:17 2025 GMT
        Subject: CN=4f1493bd52d3e2f4a9622e8873b959c8f0a7bbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:39:26:81:c9:e1:d6:76:12:80:2d:40:54:
                    6f:7c:18:9e:e4:18:0e:d3:8b:ce:f7:5f:d3:39:13:
                    40:bd:28:76:24:3c:ff:1b:08:c8:dc:8a:aa:65:dd:
                    7a:e8:ff:87:ed:b6:79:df:fd:68:8a:3c:83:1f:20:
                    fa:5c:98:2a:9c:4a:d9:0a:83:99:cf:9b:27:6f:a9:
                    a4:b9:64:60:d6:aa:96:07:6c:04:92:b7:e6:2c:04:
                    c1:76:2c:73:8f:80:d2:be:f0:70:ab:4c:c5:6e:ac:
                    c2:8d:08:9c:41:e4:2c:ad:27:39:29:01:03:ee:0e:
                    df:91:60:18:67:97:bb:46:55:ce:84:2a:c0:4a:35:
                    68:aa:7d:4c:55:bc:f4:4a:4f:02:b6:f9:8e:a2:c1:
                    79:e6:0b:81:4e:89:e1:33:fa:9d:9b:bb:1b:8a:3e:
                    33:bb:0e:4e:1f:f9:4c:4e:39:f7:6a:b9:68:30:d0:
                    c7:e0:5b:a1:c7:56:26:cd:00:56:41:ca:9c:ce:b8:
                    0b:fb:0b:10:41:66:d4:18:9d:96:e7:f8:a5:53:76:
                    d7:68:5c:e2:60:58:17:28:79:a4:74:b5:ac:03:97:
                    83:c8:f9:0c:ef:98:30:66:8d:3f:e9:43:16:ed:2f:
                    d0:1d:27:bb:48:d8:1b:27:0d:cd:56:62:52:24:3a:
                    7c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:14:93:BD:52:D3:E2:F4:A9:62:2E:88:73:B9:59:C8:F0:A7:BB:B4
            X509v3 Authority Key Identifier:
                keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9c:54:19:cc:35:f1:fb:e0:1b:19:98:87:3e:79:29:26:92:
         7d:85:60:be:c7:ca:58:1c:93:89:8c:0a:82:38:c9:e4:d9:fc:
         df:63:ae:e5:16:a6:e8:39:66:54:71:e4:e3:4e:e9:7e:92:0a:
         86:c8:2a:3f:72:4d:18:4f:57:e5:dd:af:ef:aa:02:2d:4c:d2:
         10:9f:a8:76:19:38:25:a5:30:ed:c8:6f:6a:2d:3e:d6:28:9d:
         be:ee:7a:e3:60:8d:0d:fa:f4:30:8d:ec:52:a7:99:fa:b1:90:
         dc:f8:86:e1:6a:06:cf:29:21:e3:2b:c6:30:7e:4b:7d:d1:ac:
         65:1b:eb:2c:49:2e:b5:fc:22:0d:09:c6:8a:29:e2:cd:7b:75:
         b0:47:ad:07:a1:8c:46:41:24:e9:d0:d1:87:03:42:2d:1d:4f:
         f3:8a:90:4d:f9:14:8c:7b:95:29:4e:ed:94:c3:ab:38:10:04:
         47:87:47:3a:64:bd:c9:c8:43:fb:86:8c:33:00:c7:54:f7:38:
         78:33:95:0f:6f:a4:56:ea:1e:f4:1e:1c:1a:25:05:65:52:de:
         ea:01:70:c5:c9:7f:77:be:da:9a:1e:36:e4:a1:a4:df:5d:c8:
         77:df:0a:17:50:8b:c9:4a:a1:4f:1d:07:17:2d:7f:dd:90:c5:
         f6:85:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:40:04 2025 by rpki-client