Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File:                     T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier:          jBtzMwzIIb/rEj5bpxDJhpF4nTgrDm0s4bM68NZhW8g=
Subject key identifier:   8D:81:03:21:DE:B6:02:09:E1:D8:B9:56:15:7F:B5:8F:CC:68:CE:D7
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer:       /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial:       01976C2B6D90EC605CD950754835398D072A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number:          1307
Signing time:             Sat 14 Jun 2025 02:01:14 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:14 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:14 +0000
Files and hashes:         1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: g3lt7vrZ/JrLAYr90Y4OIPf+qN5NVyG53hzzMo1jAe0=)
                          2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:6d:90:ec:60:5c:d9:50:75:48:35:39:8d:07:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
        Validity
            Not Before: Jun 14 02:01:14 2025 GMT
            Not After : Jun 15 02:01:14 2025 GMT
        Subject: CN=8d810321deb60209e1d8b956157fb58fcc68ced7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:c1:e4:f4:a7:18:1d:b6:14:cc:dd:54:1a:
                    7e:27:fd:36:bf:26:b3:8d:fc:4d:12:e6:85:68:0b:
                    08:98:a5:8c:10:6c:0a:d3:f5:bd:72:54:0d:f8:42:
                    1b:b8:6f:5b:5e:8d:91:58:b3:aa:27:9b:c4:b8:06:
                    96:01:43:01:ca:62:ff:52:5a:0c:bf:b6:ce:08:8a:
                    a4:a0:6c:0c:d2:84:6a:02:8c:1f:0a:cb:17:1a:99:
                    b4:10:b6:6f:c7:6d:4f:12:54:18:81:c9:ed:f1:5b:
                    e4:7b:61:69:e3:a2:31:22:1b:1d:15:b3:a5:b1:56:
                    1d:64:f5:6e:49:67:f2:17:6e:3b:47:d8:ba:1c:34:
                    9b:62:88:4f:bc:7f:4f:5a:d8:5b:5f:3b:53:58:6d:
                    e9:8d:b4:2d:7e:89:3d:cf:f9:c3:c4:9b:fa:5a:2d:
                    02:11:83:08:a5:00:85:97:4f:81:da:64:5c:b4:fc:
                    2b:af:9e:23:a6:57:38:b2:be:74:ad:3f:f8:8f:75:
                    52:c8:f0:cf:cb:bf:7d:06:f3:7e:c6:a5:f9:1e:d2:
                    0d:32:5d:ec:aa:f4:d1:38:f7:bb:29:c4:c9:3a:55:
                    7b:7f:41:9e:2c:d6:62:52:da:f3:a6:d0:47:79:d4:
                    03:3d:c0:28:dd:08:29:e1:51:31:09:fc:81:9d:99:
                    22:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:81:03:21:DE:B6:02:09:E1:D8:B9:56:15:7F:B5:8F:CC:68:CE:D7
            X509v3 Authority Key Identifier:
                keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:44:f3:d9:7b:71:2a:bd:53:3e:ff:e3:d4:5d:1e:60:21:79:
         5a:fd:be:9a:8d:9e:1e:2b:91:9a:19:e2:ea:07:9a:28:0f:20:
         3e:6c:d8:d7:24:69:f0:a2:61:06:84:b7:92:f4:32:60:43:a7:
         e9:38:7b:b3:3e:e4:03:08:c5:a9:dd:7a:e7:c4:55:ea:00:fc:
         60:a6:75:cb:24:b2:99:24:07:d9:c5:32:9f:93:0a:76:8e:f8:
         f7:ff:c4:3c:8a:9b:38:c6:1d:8b:24:21:bc:c2:60:31:7c:d2:
         ed:6e:62:be:c4:aa:e7:80:f0:db:f2:f0:b4:14:c6:0a:de:8d:
         aa:8e:9c:4d:bc:fb:01:ed:6c:0b:ce:f2:7b:d9:fb:62:68:98:
         4f:ae:d9:ec:05:09:4c:b0:70:0c:57:d1:a1:44:a0:59:d9:11:
         74:bb:68:00:3c:d2:b0:62:0f:82:8e:d4:81:42:cf:ef:9a:ac:
         19:29:f1:71:69:4e:55:6e:a2:06:bb:a2:a8:b0:c4:2c:59:19:
         4d:c6:16:60:12:fd:e5:2e:50:3c:32:56:b3:44:97:24:ff:a8:
         da:2d:4e:7f:2b:f1:da:19:2a:72:94:53:62:ad:ba:52:a7:b3:
         7f:64:36:25:8b:e9:0e:45:51:b3:54:22:f6:73:05:1c:a4:c7:
         27:d7:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:24 2025 by rpki-client