Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          dG24Ps+2chn92NXP8M0TXVGhetUMh1V/UygH+mHuFXg=
Subject key identifier:   DC:0B:75:85:FE:DA:34:F1:2D:94:B2:E9:2C:79:B2:26:92:AB:2B:46
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       01974AE8B4C8F334B21DCA23E3A7E012F08E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          0DBF
Signing time:             Sat 07 Jun 2025 15:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:53 +0000
Files and hashes:         1: 1333qp73ruq7A2nSo9kOVQ7ZzE0.roa (hash: JX94IngnG5jgwt/Et193zGmN4IyvZ77gInsz4D23C18=)
                          2: 72ompPbzpmnzneIjTtp_bgxv8to.roa (hash: aazsmeYdXGvcDu68YTmlm+z5hJVBvjGJrpJeAcUoELg=)
                          3: 89lMNrhD2F5x0Ke_v2bBXPEQYgU.roa (hash: K5oebEL4UYGbpI6omznf50HWdMyeoL9B3ezd2prsxV4=)
                          4: E_3-qae-50qWA7R56c8VnNml0ZU.roa (hash: nkgMixGbN46lHgT97kcU8QjXRmEi7iabVPw78zf1uq4=)
                          5: EoqOLJZzdQ3i-M95BH6ZqX7Pq-o.roa (hash: a3yd5mlm4a54YbLPpH0dQXH+MNyJ+T7A5cQjTmvitXU=)
                          6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: 4owNJt4OFzAKjW/KEcKlMWDqpEe2S4/0XwM5pJQZ53k=)
                          7: J8otkOOOFhMQcKskyfSet45vpaA.roa (hash: OKOZ6+uREzTIvRtmYWOfCPq5FGMam+EbPwErDVD6eGc=)
                          8: dPBOUNuMluSVUVsbkWd3r_lebgU.roa (hash: pOELbtPhwT+Xz573ShVJg/36cMfG9CcY6YmD29hT1jk=)
                          9: h4WPx1Sgez5mjA1QOYWXTeKaf6I.roa (hash: j0LdK7x2Tf65HMuHIG0cj+mnli0iJ+gVK8H+vxjuT5g=)
                          10: m6IyPWEEbbAvvvSNw5JH6euTQ7A.roa (hash: 06SutFrXFPpCbXeexyGeEPlk43CPE0aY99qdVjAphr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:b4:c8:f3:34:b2:1d:ca:23:e3:a7:e0:12:f0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Jun  7 15:00:53 2025 GMT
            Not After : Jun  8 15:00:53 2025 GMT
        Subject: CN=dc0b7585feda34f12d94b2e92c79b22692ab2b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:08:51:1d:8c:17:12:68:fe:a3:4b:b8:44:
                    a2:7b:fb:a5:2c:01:90:b8:5c:f1:ba:f5:63:27:7f:
                    fb:8e:02:6d:ca:d7:fb:53:75:66:3b:c9:42:66:07:
                    aa:28:ce:c9:6b:ad:0b:7a:e5:8c:f5:5c:b1:06:d6:
                    cb:6c:31:56:f8:f4:43:e9:91:3d:c1:7c:5d:9a:82:
                    7b:f3:ae:bc:c4:14:22:17:a4:2b:2d:98:9d:60:62:
                    f6:99:3b:d1:fa:d9:7c:f1:d7:ac:60:a1:6b:40:be:
                    2a:58:89:1d:11:ef:e8:9c:c3:51:55:df:e3:28:fb:
                    1c:af:c4:38:55:c6:4d:e5:4e:c4:e1:b4:1e:b8:7b:
                    ab:c4:c0:2b:7e:c2:2b:a0:4f:c4:e0:df:52:a0:25:
                    cb:d4:fe:91:3b:15:7a:e5:2b:5c:7e:bf:a1:5d:a8:
                    64:64:f0:a1:1c:7e:c7:99:40:a3:b9:f2:7f:01:f7:
                    36:bf:ff:35:6e:ba:5c:bd:5f:18:95:ec:e3:17:49:
                    b0:06:a6:10:3a:40:56:7c:01:41:34:0a:25:2b:eb:
                    fd:93:f5:60:43:3a:37:18:8a:f0:e7:ad:f1:d2:31:
                    6a:94:f9:96:b1:6b:4b:f9:10:f3:d2:fd:2d:44:7e:
                    00:ee:96:75:5f:18:9f:e4:66:32:3c:15:31:28:10:
                    23:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0B:75:85:FE:DA:34:F1:2D:94:B2:E9:2C:79:B2:26:92:AB:2B:46
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:db:08:3e:5a:57:70:2f:14:cc:93:85:fd:c1:1d:f6:70:03:
         63:9d:56:fd:65:4a:02:78:5f:fb:08:87:35:6a:18:d7:7b:27:
         93:f6:73:c6:cf:ef:aa:35:ef:3a:12:05:c3:74:e2:6b:b9:d6:
         6c:0b:2b:33:0a:bc:7b:6a:fe:65:b5:8b:01:2f:89:ac:c7:cc:
         86:49:57:f7:c8:c5:2d:19:f2:58:08:eb:97:e7:4e:37:d9:d8:
         6a:ee:c4:ae:11:2b:0b:1f:76:3e:09:17:f4:04:75:13:84:fc:
         8e:78:4c:08:d0:25:56:39:66:61:ba:f4:7a:54:67:71:bf:84:
         8b:fd:2b:f3:05:f6:38:74:5b:c0:0d:21:e3:d0:c1:3f:ef:23:
         b3:ef:1b:df:d2:9a:2f:e9:5e:eb:69:62:a4:fb:a2:9e:4a:c7:
         13:64:3d:91:3c:ba:9a:f7:fd:85:73:eb:4e:ce:2b:ed:c4:69:
         52:f3:5f:ad:e6:03:d5:49:07:7b:0e:7c:2c:8c:3b:8f:07:b4:
         74:cd:8d:66:75:64:0a:f8:ae:ea:a8:9f:5c:04:5f:f8:57:22:
         9a:f3:9c:23:bf:e3:26:70:5c:c9:68:a4:da:06:3a:78:06:25:
         27:af:f4:4e:d3:c4:d0:39:76:4e:42:4b:28:3d:45:23:1e:34:
         1f:40:2b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:11:39 2025 by rpki-client