Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File:                     cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier:          qzqd5JwQtG/2zmQ1kw5AlEyPBblgwyj7Su/llnUqjzM=
Subject key identifier:   98:F2:2A:0D:DE:E6:BA:0C:B2:FD:02:2E:05:D8:C4:DB:F8:AC:02:C5
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer:       /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial:       0197D24EA0068899CE907773A6DE7D38093F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number:          06F8
Signing time:             Thu 03 Jul 2025 22:00:57 +0000
Manifest this update:     Thu 03 Jul 2025 22:00:57 +0000
Manifest next update:     Fri 04 Jul 2025 22:00:57 +0000
Files and hashes:         1: R-wXA-kWQa5PdCJfUeOG1Bar_7E.roa (hash: eg3vfMOt4/2VviBbur6gIcbu+ezOh6ft9BbXqbZkqec=)
                          2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: 4bqxUTGpSAYrXp6fx+6hm2G8ObRGQWlzA/5GFq+tz1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d2:4e:a0:06:88:99:ce:90:77:73:a6:de:7d:38:09:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
        Validity
            Not Before: Jul  3 22:00:57 2025 GMT
            Not After : Jul  4 22:00:57 2025 GMT
        Subject: CN=98f22a0ddee6ba0cb2fd022e05d8c4dbf8ac02c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:54:7c:9e:4e:23:09:c5:5c:76:d2:3b:ac:
                    43:e9:d0:03:44:a6:01:5b:7d:07:ef:a3:fd:06:09:
                    97:02:41:8d:ec:c5:17:6d:69:dc:42:da:ec:c8:af:
                    af:19:38:c2:af:85:96:a9:e0:c9:34:07:14:8c:c0:
                    41:03:ae:40:d9:67:b7:df:3d:af:19:49:4a:35:7a:
                    dd:c6:ee:67:47:73:f3:99:ab:3e:0f:e0:98:50:e7:
                    e1:16:86:b9:a2:e6:55:5d:a4:79:60:2f:9a:32:ef:
                    6e:a3:36:d3:38:1d:80:bd:8b:15:79:a8:35:40:01:
                    6f:c4:58:a4:14:3b:ce:4c:e8:17:59:ee:22:c5:70:
                    ee:97:64:a6:a3:72:1a:38:54:c3:16:a2:27:48:8f:
                    12:04:9c:df:97:25:e2:be:db:18:17:b2:d9:ba:59:
                    34:aa:0a:25:d8:ad:9e:7b:d9:f7:cc:76:86:6a:c0:
                    1a:a4:40:16:a6:b3:89:54:a5:e1:11:2e:47:42:de:
                    14:7f:91:51:c1:dc:e6:6c:f5:c3:d0:45:cd:e2:67:
                    a9:f3:54:22:ee:94:04:97:0f:ab:c5:55:85:c4:18:
                    17:a5:46:ed:04:c6:b4:14:2d:87:d0:f2:f1:17:32:
                    10:9e:bc:14:dc:23:96:2e:5d:b2:14:a8:b5:2f:24:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F2:2A:0D:DE:E6:BA:0C:B2:FD:02:2E:05:D8:C4:DB:F8:AC:02:C5
            X509v3 Authority Key Identifier:
                keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:26:0a:5b:61:ed:db:0d:c9:fb:80:12:88:92:1e:10:97:9e:
         51:87:03:72:55:aa:48:f4:30:b1:4c:d2:52:bb:0d:62:86:87:
         fe:16:0b:1c:66:cc:6d:cc:7f:c6:36:59:ce:a8:02:2e:66:12:
         a3:54:24:82:16:90:7a:a9:ae:ca:c5:82:8e:68:d7:4c:9f:d2:
         f5:0a:e0:1e:f4:31:0c:9d:da:c8:8b:bd:89:df:46:62:df:e4:
         a5:c5:85:f2:a1:46:7a:5b:8e:b6:00:49:cc:44:de:15:d6:6c:
         82:24:fc:36:ee:14:77:87:3c:e1:4b:90:08:f5:46:5c:aa:36:
         d0:cf:1e:19:13:ba:99:99:95:b6:62:aa:a9:9f:02:be:c9:32:
         f3:1e:65:8c:2d:6c:7b:ce:09:6a:3c:e4:6b:c2:9a:6f:7e:c0:
         66:29:22:19:b8:09:b1:64:15:1b:c6:91:9d:54:8e:e1:48:63:
         43:68:31:26:39:f5:bf:8d:bd:e3:3d:bc:69:3d:da:98:31:fb:
         31:3d:63:9c:b4:ae:16:9d:a4:cd:a3:90:e6:5b:d7:d4:ba:5d:
         c9:5d:ef:26:47:6e:2b:1c:e3:90:2a:f4:ce:ad:c2:e9:62:39:
         1b:32:2c:02:dd:8e:2f:4b:11:08:2c:05:38:9b:ab:b8:b9:14:
         df:90:da:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:52:03 2025 by rpki-client