Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File:                     cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier:          0tt97EgjkB4SDiqZuHy0P+T+KKKcTa/wu14SNIECkek=
Subject key identifier:   58:80:5D:CF:B0:01:FE:0C:2D:BB:E8:A4:65:4F:0B:69:52:41:D8:9A
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer:       /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial:       0197654CF1E4010E35EEF699D174BFD1B0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number:          08CE
Signing time:             Thu 12 Jun 2025 18:00:30 +0000
Manifest this update:     Thu 12 Jun 2025 18:00:30 +0000
Manifest next update:     Fri 13 Jun 2025 18:00:30 +0000
Files and hashes:         1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
                          2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
                          3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: o85DgA4NfReRlko4t1GhmAb+geI1uF6ARhdvV3D/VBg=)
                          4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:4c:f1:e4:01:0e:35:ee:f6:99:d1:74:bf:d1:b0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
        Validity
            Not Before: Jun 12 18:00:30 2025 GMT
            Not After : Jun 13 18:00:30 2025 GMT
        Subject: CN=58805dcfb001fe0c2dbbe8a4654f0b695241d89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:a8:e8:dd:cf:0a:24:3f:8a:5e:5d:a6:25:
                    05:b1:30:a6:97:64:e4:b2:1e:45:a0:89:27:1c:b3:
                    b1:b3:8a:67:5c:8e:9f:1a:fe:8b:54:28:bb:57:08:
                    0f:b7:5a:f9:c1:6d:33:bf:9a:97:6c:26:d4:36:48:
                    1d:5d:94:9d:39:7b:25:28:de:8d:5f:78:c4:9b:1f:
                    35:0a:64:2e:59:96:a8:5c:bd:84:a1:ed:36:92:be:
                    c1:eb:5b:7d:86:9c:30:82:c6:c9:be:c3:dc:ec:4f:
                    67:11:15:6d:c7:a8:01:d7:21:77:36:a6:f8:f4:79:
                    76:48:e1:36:ae:9b:e2:84:56:55:eb:bf:16:76:f5:
                    b8:c6:99:2f:b0:cc:ac:48:e9:dc:33:4b:67:46:15:
                    8d:13:f4:1b:77:12:aa:64:94:a7:7e:9d:24:da:23:
                    47:d1:90:1f:63:58:fd:b2:16:06:6a:6c:ff:62:de:
                    08:2b:4e:31:16:88:2b:6b:41:4c:e9:b0:b0:4d:74:
                    20:e4:f1:59:7e:d8:31:23:0a:96:62:24:1f:b0:73:
                    83:c0:13:11:84:ef:69:b6:ae:90:43:a0:0d:13:06:
                    57:9f:be:a2:b0:ae:00:9e:ed:77:35:0a:3b:7a:7b:
                    ef:ea:ce:53:b1:33:91:81:2e:ef:26:ea:dd:54:db:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:80:5D:CF:B0:01:FE:0C:2D:BB:E8:A4:65:4F:0B:69:52:41:D8:9A
            X509v3 Authority Key Identifier:
                keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:a0:ac:49:eb:95:85:5c:96:7a:ba:e9:81:af:6f:82:77:
         39:e3:61:f8:b6:dd:f7:64:c4:36:ea:ed:0e:7d:7f:c8:6c:fa:
         7e:44:90:60:8f:db:76:05:73:d1:71:bb:3b:65:9f:4d:02:d9:
         7d:b0:ec:d8:c0:f6:34:f4:84:07:38:08:fd:f3:26:2e:08:00:
         65:63:ea:7c:7d:36:cc:79:e6:86:63:80:e5:bb:6e:12:cf:23:
         5d:29:98:40:24:59:a6:76:54:0f:9d:3d:d0:d5:9c:14:b2:1d:
         45:75:16:be:61:0f:28:64:46:0c:c3:ad:da:b0:ee:f7:d7:a0:
         1a:2c:80:c6:5d:f8:46:a5:77:60:1d:b8:2c:45:b9:07:0b:61:
         33:fe:52:b5:c7:74:4f:5d:8e:8a:c0:c1:8b:62:0f:de:ba:7b:
         fc:e0:3a:7e:e7:00:2c:a5:a5:15:58:1f:b1:5a:82:b8:54:9f:
         80:e2:73:d0:30:39:81:d4:13:07:d5:f2:e7:30:b0:1c:12:bd:
         76:30:d7:f2:44:3c:b2:7c:b4:4a:fe:7d:98:9b:98:0c:53:da:
         d6:18:13:89:1d:0c:8c:85:78:98:e4:23:b8:3e:56:20:3c:19:
         ef:69:16:aa:5e:c8:b0:c1:37:c5:00:5e:ce:95:f5:fc:29:05:
         28:1b:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:20:22 2025 by rpki-client