Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File:                     xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier:          ETFzjBwrvi89fAgWAe/DU3/3UArRE5cRmcOx0qUBtVE=
Subject key identifier:   88:FC:3A:AA:D3:B9:FC:D5:70:8A:80:59:79:F0:39:85:E9:AD:2C:B3
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer:       /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial:       0197499F60B797EE3FF817AC4D9B5986E237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number:          06FF
Signing time:             Sat 07 Jun 2025 09:01:11 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:11 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:11 +0000
Files and hashes:         1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
                          2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: Bk3Aeqi7k8LPJj3YSYYy3luGbZRdaXqFh5czXgQN4js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:60:b7:97:ee:3f:f8:17:ac:4d:9b:59:86:e2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
        Validity
            Not Before: Jun  7 09:01:11 2025 GMT
            Not After : Jun  8 09:01:11 2025 GMT
        Subject: CN=88fc3aaad3b9fcd5708a805979f03985e9ad2cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:99:3b:13:f7:1b:a8:65:e8:74:65:58:d4:
                    24:01:ba:52:82:55:45:7d:42:9f:86:a2:80:74:5f:
                    80:1f:0f:d6:8e:9d:43:fe:8b:50:81:2f:31:87:f4:
                    92:1c:13:dd:4d:69:a4:c5:82:4a:f9:b3:9e:e5:2c:
                    cc:fc:23:4b:8a:06:fb:48:bc:70:c0:86:fe:0c:8c:
                    eb:84:81:2b:b2:bb:4c:af:37:1d:bf:ea:d5:1e:57:
                    84:f9:b7:b6:e1:16:cc:40:d8:b2:0b:29:58:96:82:
                    28:18:ba:ca:32:d8:41:f7:fc:3a:fb:6a:1d:5f:67:
                    47:7f:ae:8f:3f:c5:ed:55:c8:8d:86:f4:87:64:70:
                    99:55:8f:4d:85:98:7d:23:85:e6:ef:b5:0c:fb:52:
                    01:ce:2e:d6:cb:42:b2:e9:54:8e:d5:5b:05:ca:24:
                    11:b8:08:00:b3:dd:d1:3f:21:31:2c:f6:ab:4d:d0:
                    3e:8f:87:37:b0:2a:f6:dc:62:1f:2b:9b:23:ee:5d:
                    dc:90:df:77:78:f7:48:d0:d7:6c:ba:30:99:8f:13:
                    d7:a7:14:2b:63:7d:ba:6f:35:72:87:3c:3e:74:fa:
                    20:c5:4d:63:8c:04:aa:ee:04:b8:61:17:f2:50:4b:
                    60:45:c9:8b:55:7e:b9:90:8a:cb:53:04:81:ec:89:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FC:3A:AA:D3:B9:FC:D5:70:8A:80:59:79:F0:39:85:E9:AD:2C:B3
            X509v3 Authority Key Identifier:
                keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a7:fc:60:71:f3:7b:f1:d9:86:3a:f8:34:55:24:55:49:82:
         7d:dd:9a:d5:8d:23:82:9d:32:38:aa:c0:d6:1a:4b:a0:d4:72:
         a9:3a:3f:91:8d:68:d8:48:22:f5:92:3c:2b:23:e6:26:40:a7:
         78:ac:b6:cf:58:99:0b:8b:80:14:f0:b2:e4:67:56:4a:8f:c8:
         6f:4a:da:b7:f5:ab:0c:75:55:60:50:a0:48:d1:0b:34:bc:8b:
         39:ad:3a:d5:02:6a:09:8b:99:c0:7b:f9:74:37:37:1c:c0:99:
         f1:eb:be:59:8d:3b:bd:16:58:9f:67:d5:11:2f:96:8f:3e:0b:
         25:0d:4a:7a:49:fb:45:b2:24:e2:70:1c:69:c0:25:c3:a7:da:
         d1:69:c2:6c:b8:9a:68:d0:c3:63:3a:8c:f1:7c:88:e1:6d:29:
         0c:53:13:6e:7b:53:ef:09:30:f6:2a:a6:f9:35:67:3f:b8:3e:
         ba:a0:10:e6:7b:48:01:b0:58:11:63:a7:a3:82:f6:1d:4e:9d:
         cf:da:fb:cb:86:9b:b8:05:c8:69:17:64:8d:1c:8f:58:c5:d1:
         24:dd:88:7b:ba:37:5f:1b:01:ea:58:27:7a:e8:04:15:c2:80:
         68:35:0e:61:57:ee:ed:ad:e1:f3:3c:60:1a:40:18:26:66:01:
         56:af:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:50 2025 by rpki-client