Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
File:                     m7wD9sWihPoA27WqYJxRW3xYmWk.mft (raw, json)
Hash identifier:          SgSoZOxg3heLMgO8KLrvZVwPUJH/KdvU3u92Za16l1k=
Subject key identifier:   E8:D9:1C:06:ED:88:3F:AB:5A:3D:47:A2:B9:59:DA:23:8D:40:3D:5D
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Certificate issuer:       /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial:       01976F2BF0FED85DCC41516039408F2629C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
Manifest number:          0DA2
Signing time:             Sat 14 Jun 2025 16:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:40 +0000
Files and hashes:         1: 3sPU2X2zzDRvsMfK94CkKzBQsU4.roa (hash: R00sfB2denxS/OHNxg4q8pRCPm0SOYbizoeUhKRjq4k=)
                          2: m7wD9sWihPoA27WqYJxRW3xYmWk.crl (hash: cMWYVbQ/C5iNvTuFZMKXbD0+TKaMK8QPntOOFNiuWFs=)
                          3: opItG7iycfoqyIbeJkA-iBhJGY4.roa (hash: 3K1U6liu+Oy3aeOJx85XxOBGN8iAYZ7rHauSs3gu8HQ=)
                          4: p85mwjNpw2DPiEwmt3DneLuJKMU.roa (hash: 9txQiYeTXR7ltBlHFbZo2A2VUj0ra3QUmGnLHYSLM/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:f0:fe:d8:5d:cc:41:51:60:39:40:8f:26:29:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
        Validity
            Not Before: Jun 14 16:00:40 2025 GMT
            Not After : Jun 15 16:00:40 2025 GMT
        Subject: CN=e8d91c06ed883fab5a3d47a2b959da238d403d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0a:a8:97:b4:a4:0e:13:01:6c:67:30:4b:62:
                    62:5b:e1:cd:f0:33:81:75:f8:a7:ff:f1:fc:e9:52:
                    79:04:33:5d:ad:b8:3f:e9:3a:f0:51:c8:3a:47:0e:
                    73:b0:4b:38:3f:ad:58:77:c5:2d:73:19:63:0a:cb:
                    27:58:0c:89:0f:ba:c3:d6:01:fb:31:1c:61:79:bd:
                    2f:0d:51:90:b9:bf:96:b7:6c:36:93:84:dc:54:2b:
                    b6:80:02:a4:ca:a2:54:b5:23:63:5f:9f:97:4d:e0:
                    39:de:0e:b0:b8:bb:fa:46:8b:f2:d2:d5:36:98:29:
                    5d:6a:92:b9:e8:27:fb:3a:d0:de:13:09:fb:3b:10:
                    16:99:23:0c:22:72:9e:3f:41:47:a4:5b:78:02:d5:
                    f4:c3:a1:72:6a:f2:23:bb:61:83:60:cc:7d:d1:9f:
                    5d:a8:92:f2:8c:9d:93:b9:cd:a9:d7:ea:ca:3c:6a:
                    d5:e5:28:df:53:47:3a:80:c8:82:72:4c:0a:6f:b2:
                    b5:f4:f4:05:0a:1a:59:59:ab:cb:82:57:60:5c:86:
                    8a:15:16:60:37:e4:be:eb:2e:1a:3e:e4:4b:82:fe:
                    f7:bd:a5:2b:3d:d3:9f:f3:72:97:88:7e:25:db:ba:
                    28:15:44:87:ed:f7:79:5c:a7:8d:0e:6e:cd:47:84:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D9:1C:06:ED:88:3F:AB:5A:3D:47:A2:B9:59:DA:23:8D:40:3D:5D
            X509v3 Authority Key Identifier:
                keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:2f:6d:90:76:1c:76:00:46:33:d3:bf:b6:30:63:e7:14:
         69:c3:f1:8e:3a:7e:02:26:24:d4:03:c5:45:06:e7:f7:f0:d9:
         de:85:72:a3:5d:4b:20:cd:e2:34:4a:11:53:0c:82:09:57:f1:
         e5:18:03:8e:a0:a3:c7:2b:27:00:e2:aa:c2:19:db:ea:15:68:
         ab:30:dc:6c:b8:80:62:0c:61:8a:7c:31:a8:47:02:86:b9:ea:
         a7:f9:c8:18:e1:d5:7c:5f:5f:2c:30:13:19:78:ab:d4:ae:2b:
         e1:e7:6d:bd:89:5a:b7:f8:f1:3f:b2:74:cd:72:33:8b:06:a3:
         47:69:96:c0:1a:a9:25:83:ff:f3:2e:43:b4:cf:a3:00:87:97:
         a1:b3:c5:9b:6a:c5:bc:dc:2a:1d:d2:1c:dc:a1:19:14:40:fd:
         42:6a:32:75:24:51:ba:e2:46:44:27:5c:bc:48:98:f7:46:a7:
         02:fc:10:e6:96:93:11:58:f6:db:b2:c1:ab:68:b5:79:04:3b:
         eb:33:45:5b:46:71:74:3f:a4:a7:29:b3:c4:69:93:de:27:07:
         21:33:3c:52:22:c1:dd:f9:06:c0:02:b5:3b:c7:6b:fe:c2:97:
         11:a5:4b:6d:1a:7c:ec:8c:43:4c:32:7c:a3:46:7c:17:09:9d:
         1e:b7:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:41:17 2025 by rpki-client