Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File:                     cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier:          ynvgXN8J06YLLXaEgrwgSek/GwFYVad+KDv3hnAwSmA=
Subject key identifier:   9D:11:18:CE:E8:E2:FA:7D:4E:36:0F:FB:21:17:98:9B:73:1E:8A:B0
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer:       /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial:       019757C841977333B1958AB4AA2914270AE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number:          08C7
Signing time:             Tue 10 Jun 2025 03:00:31 +0000
Manifest this update:     Tue 10 Jun 2025 03:00:31 +0000
Manifest next update:     Wed 11 Jun 2025 03:00:31 +0000
Files and hashes:         1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
                          2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
                          3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: DRyFz/HfhNgXAnhbmEncf6mRwDEAVQ1McOfXNnaPOEw=)
                          4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:c8:41:97:73:33:b1:95:8a:b4:aa:29:14:27:0a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
        Validity
            Not Before: Jun 10 03:00:31 2025 GMT
            Not After : Jun 11 03:00:31 2025 GMT
        Subject: CN=9d1118cee8e2fa7d4e360ffb2117989b731e8ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:82:7f:7e:d7:5a:cd:e4:21:5a:db:4c:82:
                    bb:9e:6b:bf:73:1f:56:af:e3:90:0b:3c:8d:da:1e:
                    9c:bc:7a:3d:9a:2d:07:0d:d9:32:85:32:8a:47:c3:
                    40:ee:8c:ad:ea:91:bb:5f:96:77:3d:3c:e4:e6:32:
                    bf:e2:86:6d:77:1e:17:82:ca:71:9b:a5:2b:4e:18:
                    bb:24:82:be:a2:ee:76:8d:36:0b:50:64:1a:f0:ce:
                    36:55:f7:62:6a:44:b7:6a:2b:7d:f5:de:8b:80:02:
                    23:64:cc:6c:47:84:63:5a:2b:e0:cc:06:5d:47:d6:
                    7f:bd:a0:3d:bc:3f:79:9b:a5:d5:8a:33:2b:61:4f:
                    88:d0:e3:02:5f:cd:c0:bc:44:ef:71:6c:28:36:fa:
                    6d:aa:ba:76:bd:17:e5:db:46:de:c8:42:5e:83:3f:
                    f5:2e:cb:af:a4:b5:f0:8a:dc:4c:da:23:65:b5:90:
                    c7:89:b8:9f:8c:4f:3a:1a:ef:31:de:8c:47:c0:2a:
                    07:d1:ce:9e:c8:47:b7:4c:e4:0f:75:08:a4:35:74:
                    9f:e4:a0:b5:73:56:c1:0a:a5:ad:5a:0f:f9:4b:82:
                    2b:e2:bb:c0:aa:aa:94:22:44:79:3a:57:b0:7b:b4:
                    91:d4:11:16:d5:1f:82:2e:49:32:5b:f1:19:cf:2e:
                    ac:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:11:18:CE:E8:E2:FA:7D:4E:36:0F:FB:21:17:98:9B:73:1E:8A:B0
            X509v3 Authority Key Identifier:
                keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d8:98:2e:5f:be:0a:c2:6e:66:0c:69:da:a4:9e:2a:b4:3b:
         14:56:8b:78:4b:01:dd:40:67:73:33:f1:87:5e:c7:92:a2:99:
         96:c9:7c:4e:27:a5:98:72:ef:53:a2:26:94:69:7d:8e:3b:18:
         81:61:4a:45:df:bb:ad:34:e2:c9:84:75:71:76:a0:66:9e:81:
         ac:ea:78:6b:04:1e:9d:c2:a9:e9:f7:fd:54:7a:be:d5:45:77:
         1d:8b:d3:45:88:e0:58:c8:54:cc:70:68:08:6d:9f:f3:b0:96:
         e8:1f:27:5d:92:18:5d:b5:49:88:28:64:b5:99:e8:2f:7b:ef:
         b1:5d:f6:b8:17:fd:31:7d:63:29:bb:18:ed:d4:82:33:fc:7d:
         ef:4f:6a:90:2d:30:cf:3d:9c:36:cc:1d:ab:90:4d:26:64:40:
         37:20:8a:cd:52:f9:0a:d7:80:20:a5:63:56:a1:aa:6f:7b:00:
         b6:9a:e6:59:c9:bd:27:07:d4:d9:39:1f:fd:75:0f:8f:fb:a8:
         a9:a2:49:de:7d:d9:10:14:25:19:81:4c:ac:75:c2:93:b4:c3:
         9e:26:af:11:22:48:21:23:b3:7b:d3:df:71:0f:99:23:82:09:
         58:51:fc:b1:8c:da:02:75:9d:82:04:4d:2d:31:30:e9:7b:b4:
         83:8d:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:23:30 2025 by rpki-client