Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File:                     8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier:          D9nLbmXLU25aUaiuFtdNIaMX5GLZOybF4sTi+mX3jes=
Subject key identifier:   E0:42:C5:2B:3C:6E:A0:8A:00:25:AF:C9:E1:D6:CA:F6:7A:3E:1F:F5
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer:       /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial:       01976884C7A843183B3560606A313A54BA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number:          0731
Signing time:             Fri 13 Jun 2025 09:00:21 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:21 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:21 +0000
Files and hashes:         1: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: 76Irmw9iyNPlI4sLEhVNqgvJrU2oGRRcqKa6fFugka0=)
                          2: DReP9bc0zwfbsr8Nie7Lz--WV3I.roa (hash: bjq88usQ48nTatb5B4QsLmgQZv99AHE50C/OVUr97Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:c7:a8:43:18:3b:35:60:60:6a:31:3a:54:ba:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
        Validity
            Not Before: Jun 13 09:00:21 2025 GMT
            Not After : Jun 14 09:00:21 2025 GMT
        Subject: CN=e042c52b3c6ea08a0025afc9e1d6caf67a3e1ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:64:0e:3a:a6:fc:f7:14:42:42:35:6f:e2:
                    5e:c0:72:9a:0b:48:09:0e:dd:83:d1:9b:33:dc:13:
                    9e:fe:6a:24:4f:1b:27:18:39:40:be:53:ba:a0:a3:
                    e3:ed:6e:b1:2c:fd:d3:27:c5:00:02:85:d1:62:5b:
                    fe:44:f5:4a:63:34:ad:39:12:e4:b9:77:bb:e2:76:
                    5c:9e:a2:6e:42:0a:78:b4:e4:83:53:40:93:a9:63:
                    15:63:ab:4f:bb:71:7f:6c:16:63:3d:f9:61:fd:6e:
                    33:15:15:ec:4f:0e:fa:e8:29:37:aa:de:af:5e:27:
                    89:6e:9b:6d:d8:43:47:38:36:22:8c:11:d8:a7:be:
                    ce:a2:70:4a:7e:fd:42:5c:2d:a0:c6:1e:46:e8:84:
                    2c:c9:01:be:8f:01:78:d8:f5:0c:c6:c4:f3:59:aa:
                    36:6a:72:59:9d:80:ae:47:d1:10:7d:70:9d:d1:d1:
                    29:6f:98:3a:c5:09:83:29:07:5a:49:8f:5d:43:2f:
                    1c:24:d5:38:57:ba:09:8e:c3:6b:38:ec:f1:4c:6d:
                    b5:f4:7d:9c:4e:20:40:9e:c2:9d:1c:03:93:f9:42:
                    e6:5c:a1:30:d3:e3:33:18:03:53:b6:b6:68:06:a3:
                    96:64:8d:d2:ab:f1:a2:8e:04:07:94:29:2d:1c:5d:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:42:C5:2B:3C:6E:A0:8A:00:25:AF:C9:E1:D6:CA:F6:7A:3E:1F:F5
            X509v3 Authority Key Identifier:
                keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c1:d9:e2:8c:7d:53:06:73:24:e0:10:fa:c9:00:72:ee:4c:
         b5:56:78:cf:4b:e2:83:36:f3:72:8b:0b:db:48:d6:ef:d9:1a:
         58:51:32:58:08:e6:05:b7:07:a0:e8:28:0f:1d:7d:d7:77:da:
         9d:02:6b:a6:7c:58:7b:9b:f3:e8:6a:34:c5:46:ba:90:ec:cf:
         1e:fe:e0:a4:a7:4d:92:7d:5d:5a:13:00:64:a0:3c:d8:d3:72:
         15:69:b9:60:ca:cf:9d:e3:60:26:00:0a:53:2b:db:3d:18:4e:
         62:87:75:f1:e8:97:ff:52:da:e8:3e:ac:49:a3:85:88:8d:9f:
         a7:0f:c7:41:01:45:e8:b7:09:a2:fc:14:e6:cf:dc:74:14:59:
         b6:60:7b:81:29:d0:b1:d1:ee:49:9c:a3:1d:f9:15:c9:b5:0c:
         63:f3:56:ee:33:3b:e5:2e:15:e9:42:98:e8:dd:58:a8:ac:58:
         6c:c5:d2:4f:df:cf:c2:7e:c7:31:5b:51:e8:ec:e6:c1:6c:75:
         ba:3c:4d:8a:39:5b:a9:e7:7a:58:12:b9:4b:ee:31:52:e6:f2:
         91:aa:86:97:36:18:e8:04:1a:a0:4f:be:93:54:59:1c:ab:e0:
         f2:1d:cc:12:44:6b:e6:89:55:e1:19:f2:7a:3e:23:4d:9f:5a:
         06:03:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:24 2025 by rpki-client