Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File:                     d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier:          k/FhyKHIaMb75wiTGo0mAb/TgGM867OPIFFkkXUMmtc=
Subject key identifier:   24:54:B2:F9:3E:89:BF:1A:A9:60:94:7C:BA:D5:69:EB:7C:77:2E:F9
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer:       /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial:       01974B56B50B6E2744893C5CCC2B7685C8F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number:          0D1D
Signing time:             Sat 07 Jun 2025 17:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 17:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 17:01:02 +0000
Files and hashes:         1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: M04A52lRJ8+PtsjMiFusnXzYvgwUC3nqnZiao4cNkI4=)
                          2: hNGctvUgxsV9VRFcAR330Ay19l8.roa (hash: zQTWmn2EIkYMs7iDpMx3kmmkHaS8RfsfTxjAwAVdFG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:b5:0b:6e:27:44:89:3c:5c:cc:2b:76:85:c8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
        Validity
            Not Before: Jun  7 17:01:02 2025 GMT
            Not After : Jun  8 17:01:02 2025 GMT
        Subject: CN=2454b2f93e89bf1aa960947cbad569eb7c772ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:b5:c2:e7:78:24:80:b9:4e:b4:02:94:c3:
                    f6:8e:2c:2b:69:b0:6d:79:83:96:d6:1b:8d:d9:30:
                    8d:97:fc:60:aa:d4:09:58:e8:1a:f4:84:bc:f4:71:
                    45:c0:33:52:26:da:fb:7e:bd:05:7f:26:64:3a:aa:
                    ce:2f:58:5d:79:1c:a3:52:cb:88:b4:0e:b6:2d:1e:
                    d8:5f:33:53:3d:5d:01:25:d1:3e:0f:94:27:67:16:
                    47:1d:47:40:7b:28:78:f6:d2:b4:c5:4b:ee:83:70:
                    95:fa:fe:41:d2:46:c9:c7:e6:6b:2d:4a:b4:3b:ec:
                    68:3b:e6:14:05:b8:40:79:4e:a4:59:02:97:a4:44:
                    ba:3b:1f:6e:7c:24:d8:b9:61:e4:35:c6:f8:df:65:
                    8f:16:c8:5c:de:d9:11:16:6e:a6:25:77:08:ff:32:
                    25:f8:5b:de:13:e1:b8:ff:1f:99:e5:e3:31:0a:bc:
                    3f:5d:40:29:3c:4c:ca:a0:05:3c:86:a6:78:23:cb:
                    70:b1:96:57:74:71:39:45:13:14:df:54:be:4f:c2:
                    b6:ed:15:e9:9f:85:04:66:95:2e:47:64:be:04:a4:
                    f8:c1:cb:38:e7:22:8b:0a:1b:2c:f1:a0:7a:6d:5f:
                    3f:3b:46:2f:1f:45:5c:e9:b1:f9:c2:68:9c:c4:0f:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:54:B2:F9:3E:89:BF:1A:A9:60:94:7C:BA:D5:69:EB:7C:77:2E:F9
            X509v3 Authority Key Identifier:
                keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ed:69:b1:7c:f4:04:4f:d0:2b:03:31:ec:e9:4d:95:63:8c:
         02:37:95:3f:d7:6a:9d:75:5a:7a:25:25:2a:f8:b3:8c:89:e7:
         69:4a:29:57:14:5c:20:51:20:20:1b:b0:72:25:0a:68:ca:ab:
         28:e7:65:e3:ab:f2:6e:33:91:56:25:17:07:b2:bb:ac:52:cb:
         fa:06:6a:11:84:1b:9a:22:54:f7:66:b7:23:d9:b6:f0:34:1a:
         0e:1a:6b:7b:1c:3d:1f:9c:5f:fc:c9:0b:79:40:a8:2a:c4:09:
         87:75:34:fc:87:9d:7e:ad:e5:b9:2c:68:7e:1b:e6:02:f4:07:
         86:5d:5d:d7:10:65:e3:f7:1f:71:bb:d6:9d:c6:4c:91:b4:98:
         ea:5b:29:04:95:f5:5f:ac:8d:fa:ff:d6:25:a5:4a:98:1d:15:
         b6:0c:09:ac:2f:48:b4:f2:05:7e:d7:19:93:64:49:78:a8:62:
         96:56:66:3b:62:66:fe:96:78:d9:bc:a2:99:2b:57:93:10:f2:
         31:cd:56:3b:3f:14:9f:f6:88:06:72:f8:68:35:e6:f7:73:59:
         9d:32:2e:04:c0:b8:1a:05:60:ec:1f:87:39:35:ce:e5:21:86:
         44:08:d6:bf:5f:95:9a:8a:b6:6e:da:fd:e0:b6:b0:53:47:f3:
         f1:9c:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:10:47 2025 by rpki-client