Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File:                     8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier:          4rQRRsxCxl1jSfTua9AOugU4/TyJugliRrKASnlZu+w=
Subject key identifier:   92:5B:BB:36:67:46:55:46:CA:3D:33:76:8A:E0:CC:C0:4C:53:AA:E3
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       019769CE7B7D7764332E38FBE0E6F557C7F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number:          153C
Signing time:             Fri 13 Jun 2025 15:00:29 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:29 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:29 +0000
Files and hashes:         1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=)
                          2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: dhQvD5Sz+7XTkhkNCSI+rRJxDsNtt+fJyXKAB+TK45U=)
                          3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=)
                          4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=)
                          5: LhFj95I_FAK0SQt_IVeu_j9yy-Y.roa (hash: UKe9AQrQFX9sK5Sb3u4prHdwMu3msjjjq1TGlUk7HFU=)
                          6: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=)
                          7: qapdX9GHEa2o929_QuPaQDtsKOo.roa (hash: yXoeklRVR1pGxKI4F+grxEP1kght2DQV6MfbRtkPOyI=)
                          8: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=)
                          9: wl4AgRxN-dsEZVWVRwagB4p0FuM.roa (hash: D3k3ebSuA5lnvxMk1CjJz6RjXbgYa8hOXOr3a2fIOuU=)
                          10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:7b:7d:77:64:33:2e:38:fb:e0:e6:f5:57:c7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Jun 13 15:00:29 2025 GMT
            Not After : Jun 14 15:00:29 2025 GMT
        Subject: CN=925bbb3667465546ca3d33768ae0ccc04c53aae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:a5:58:23:47:44:91:e4:14:72:3e:a5:97:
                    93:43:fe:04:23:97:c2:25:0a:72:b2:dc:16:5c:80:
                    50:ce:44:85:83:7c:cb:dc:f2:24:ab:d9:ca:a8:05:
                    e9:be:bb:b2:d3:3f:dd:6f:a4:54:64:97:b4:f2:88:
                    7c:b4:79:30:42:5a:c0:a0:82:53:7b:55:ab:de:24:
                    e4:72:2a:52:e3:3a:f6:fd:bc:b5:9f:c5:f1:16:a9:
                    cd:86:36:c7:70:44:c2:a2:ec:49:9d:ba:2b:e8:08:
                    41:3e:24:13:a6:d7:04:e9:27:97:3f:ba:77:92:80:
                    35:a4:ab:87:37:48:7a:5f:81:cd:90:ce:60:39:31:
                    a2:29:48:ae:6f:b3:c4:57:3a:04:26:43:b1:69:9c:
                    2d:41:72:dc:36:d8:1b:57:e9:84:e5:74:5b:c8:63:
                    7e:94:4d:20:3a:54:1a:df:1f:26:18:68:65:7d:bd:
                    f8:93:55:11:bd:09:27:65:c1:b3:d2:b3:99:3c:82:
                    c3:83:0a:81:fc:79:7c:f3:25:b8:56:5d:8e:da:52:
                    7b:41:e7:c4:48:cb:a2:e4:df:20:02:41:8f:f1:06:
                    97:3e:fc:b3:6c:1c:60:6b:0e:b7:1c:0c:48:d8:df:
                    65:c5:c3:3b:f6:e3:a9:c1:c4:72:58:48:4e:3c:ce:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5B:BB:36:67:46:55:46:CA:3D:33:76:8A:E0:CC:C0:4C:53:AA:E3
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:00:2c:5b:4a:39:af:a3:f4:a0:de:f3:df:8e:41:55:ac:3b:
         46:41:dc:07:2b:ba:fe:ee:20:e1:e3:fe:9e:65:33:d8:0b:eb:
         31:88:d4:7e:38:95:b0:8b:d2:52:c4:af:f1:a3:84:5c:d8:2e:
         47:16:87:ff:4e:79:55:2d:50:e1:ec:53:82:a4:cb:fe:6d:4d:
         49:c8:6b:5d:fa:6f:17:6c:d0:df:c0:b7:b9:ce:54:d3:0b:1a:
         24:d2:7e:17:8f:67:ac:9d:c4:fa:17:8c:4e:16:bf:82:d0:36:
         d4:19:9b:95:7e:b3:74:7b:57:92:28:5a:86:1f:b4:f9:be:6c:
         b9:49:55:2b:4b:cb:7f:10:f0:7e:5d:77:a0:ab:0c:05:f2:36:
         d9:07:b9:1a:c9:f6:40:7a:48:f7:49:89:cd:a5:43:57:8a:8e:
         b7:f6:c2:c1:b2:36:6f:17:6c:f4:f0:e4:ec:62:5e:be:1f:8e:
         c2:c2:f2:f2:76:df:0b:53:c8:fc:b7:fa:58:03:98:31:ae:d5:
         47:4a:cd:c8:d5:e8:75:49:76:14:ff:5a:bd:53:7c:1a:3d:07:
         dd:4e:96:f0:6f:69:17:6e:a9:9c:8f:ee:ec:c3:b7:be:90:4f:
         a0:60:26:f8:c3:71:43:42:57:c2:9a:e7:ad:b3:31:f4:7b:50:
         08:ad:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:04:08 2025 by rpki-client