Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File:                     1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier:          MxNdDl/WhkCoY1Dnt3xAXPFr/ZZiyETn+pre1AfYWYo=
Subject key identifier:   83:35:5B:3C:D5:C2:D1:36:AB:70:0F:01:EC:B2:2A:30:9E:0F:CA:CA
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer:       /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial:       01975158C107105ACDD192F975E318949987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number:          0307
Signing time:             Sun 08 Jun 2025 21:01:00 +0000
Manifest this update:     Sun 08 Jun 2025 21:01:00 +0000
Manifest next update:     Mon 09 Jun 2025 21:01:00 +0000
Files and hashes:         1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: vnZHgqOtbqmRlXsKvVdhBk0RRmDheQT7QIE3LF8oD+c=)
                          2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:58:c1:07:10:5a:cd:d1:92:f9:75:e3:18:94:99:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
        Validity
            Not Before: Jun  8 21:01:00 2025 GMT
            Not After : Jun  9 21:01:00 2025 GMT
        Subject: CN=83355b3cd5c2d136ab700f01ecb22a309e0fcaca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:1a:bf:3a:48:3a:e2:0b:a9:7f:af:64:59:
                    17:eb:58:de:f3:4c:f8:53:0e:44:da:45:6a:4e:4e:
                    0e:99:75:8d:a0:b7:49:ac:0b:13:1e:e6:b5:13:03:
                    63:a9:2a:90:8e:59:ff:50:88:56:f5:7f:f3:18:a2:
                    81:bb:5b:d4:1a:df:65:97:8a:1a:6d:67:25:05:b6:
                    1d:aa:91:06:3d:49:95:1a:ab:49:c8:b8:fd:95:94:
                    80:8b:36:f0:d5:d6:71:4e:77:58:31:7b:2a:99:68:
                    8c:85:2d:83:85:15:a3:20:ca:92:b6:be:c7:b7:e8:
                    01:d2:37:b6:c1:25:bc:86:d3:a6:fc:db:83:51:91:
                    67:42:94:cc:9c:51:da:b4:6b:c3:94:61:b9:ab:94:
                    a2:6c:f6:68:7c:90:c5:ae:fa:d1:29:74:8e:7e:e2:
                    05:91:bb:45:96:f8:e2:92:a4:bc:d1:bc:ad:86:cf:
                    85:05:97:ce:4b:10:a7:0b:10:4e:7f:83:0b:ce:0c:
                    c8:1b:ad:0f:63:85:64:01:e9:a0:0d:21:82:0b:1c:
                    f4:ca:ce:49:36:41:6a:71:e0:c3:5a:1d:cf:2f:d5:
                    31:4a:d7:e6:d6:43:b4:37:44:a5:86:40:6d:71:71:
                    d6:f8:00:4c:fe:c2:02:f5:9d:54:22:f4:d3:31:e0:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:35:5B:3C:D5:C2:D1:36:AB:70:0F:01:EC:B2:2A:30:9E:0F:CA:CA
            X509v3 Authority Key Identifier:
                keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f2:f2:04:56:82:f9:ca:9c:cc:98:38:6b:24:d1:f2:2f:e3:
         5a:52:36:df:d1:df:b1:38:dd:f5:89:35:b5:2c:f7:ff:36:d9:
         0e:69:6e:0b:1b:7d:a1:79:5c:a1:ff:b8:2f:a3:9c:51:23:fd:
         76:9e:88:a8:e3:43:7b:cd:7c:4e:4d:71:99:15:1c:ce:57:87:
         ab:80:ae:f8:8d:0d:da:1a:7b:29:87:24:7d:b3:03:75:93:f1:
         b4:0c:3a:87:ba:30:d5:97:2e:1b:4f:bc:2e:92:2b:79:bc:de:
         9b:ff:58:ba:b7:b2:78:10:4d:c6:c0:8e:e7:90:73:82:d7:a3:
         22:3a:d9:b3:bd:2a:88:ce:77:70:d5:a2:01:f1:e6:06:97:d7:
         a6:d0:94:69:89:e1:69:db:3a:bd:c5:6d:7a:45:86:08:9b:c5:
         b7:47:ae:e0:e2:af:e6:d7:27:14:10:c7:45:fe:eb:99:13:ce:
         1c:2f:d1:0f:9c:1a:eb:95:f5:7a:62:58:ae:a8:11:f7:63:37:
         6c:63:fa:79:34:3b:bf:09:21:88:1f:18:62:99:69:aa:f0:86:
         fc:6b:46:58:74:77:ab:fd:85:f0:cd:cd:f2:82:93:0b:df:58:
         3c:8b:14:19:7d:22:18:f5:5c:20:9b:55:41:c6:7b:fd:a5:06:
         dd:d7:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:30 2025 by rpki-client