Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File:                     8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier:          0Wn/3c73kTHRP3yYn+RYIBiiTo0D0b4Y9F28kXTC04Q=
Subject key identifier:   37:10:6F:DA:6B:F4:8F:17:35:8C:7B:30:F6:D1:03:66:85:92:1B:F3
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer:       /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial:       01977187FEF01E37F8935CED8AA24ECBBBC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 03:00:27 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:27 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:27 +0000
Files and hashes:         1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: y7n8ASkq2B7Z9eOBiDCvw6Ah4iZFQVu/GkeZ/aJUHhE=)
                          2: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (hash: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:87:fe:f0:1e:37:f8:93:5c:ed:8a:a2:4e:cb:bb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
        Validity
            Not Before: Jun 15 03:00:27 2025 GMT
            Not After : Jun 16 03:00:27 2025 GMT
        Subject: CN=37106fda6bf48f17358c7b30f6d1036685921bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:0f:35:ff:a2:1f:42:b0:4a:cd:de:b6:50:18:
                    f4:c7:e2:ae:0c:1d:8d:2a:47:81:b1:af:e0:4f:00:
                    df:da:07:ff:f8:db:80:ef:d7:0a:03:97:25:cc:ec:
                    47:1e:8f:32:b8:77:30:d2:0a:21:29:b1:23:da:33:
                    ad:b4:46:ea:fa:dc:40:a7:88:1d:ab:6c:5b:75:e2:
                    4c:05:e6:9e:7f:d6:12:96:58:ef:cd:cc:7e:86:81:
                    e0:1f:66:d8:83:3e:9f:e7:dc:2a:56:b0:65:a4:69:
                    74:3e:0c:7b:7d:5d:86:5b:7e:c5:fd:75:02:25:0a:
                    19:1d:44:bb:94:5d:d7:45:56:06:7f:4c:0a:a5:fd:
                    5a:88:b0:21:7f:97:29:de:3a:5e:97:d1:37:7b:d1:
                    0a:69:af:1b:ce:3c:36:24:5e:c0:22:e9:d3:c1:90:
                    e2:ca:b7:32:90:60:5a:22:70:8a:fc:18:af:f1:4d:
                    db:6d:af:1a:ea:b1:52:27:9c:1b:f2:93:b7:10:19:
                    f9:0f:3d:6a:5d:97:70:0e:5d:35:07:aa:76:95:be:
                    e9:a9:2d:a4:32:6b:39:09:cf:59:c8:3c:44:5c:9c:
                    aa:5e:9a:81:27:8b:57:8c:5f:61:17:c2:30:5c:f9:
                    2e:b2:b9:a7:cc:bd:52:84:11:0b:33:fd:3b:3c:e7:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:10:6F:DA:6B:F4:8F:17:35:8C:7B:30:F6:D1:03:66:85:92:1B:F3
            X509v3 Authority Key Identifier:
                keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cb:da:15:48:e5:04:37:09:9a:7e:65:bf:eb:9b:c5:ce:1e:
         62:65:23:56:6e:1f:11:3b:6d:7c:66:6c:16:8f:6d:3a:cd:06:
         72:70:d9:7e:28:ae:02:7b:34:a4:eb:c0:81:b2:a5:31:22:41:
         60:47:3e:60:b0:b6:9e:d7:d8:dc:6c:4a:a0:4f:c9:2d:78:93:
         bd:5a:32:9b:45:bc:99:bc:29:0f:f5:d8:ba:7a:18:8f:1e:c1:
         55:7a:bc:64:83:4e:46:cd:17:27:25:82:51:f9:b9:ca:2c:ad:
         45:31:80:93:e5:bf:42:e7:cd:fb:5a:e4:96:33:84:7b:85:7a:
         b5:02:b5:94:ca:76:71:7a:e6:3c:f4:e0:14:0f:3f:36:dd:42:
         bf:55:a4:a9:e6:70:db:6c:af:f7:f1:26:c4:32:55:20:66:e5:
         21:90:71:13:0b:08:8b:93:f4:30:5f:01:5c:87:3b:f4:15:73:
         0d:59:88:2f:2c:16:07:49:a0:7a:d2:30:b9:bb:88:f1:8b:e2:
         4c:d5:dc:22:32:61:42:92:57:39:12:0e:88:55:ab:d8:cc:c8:
         3a:a1:f7:19:b8:c3:99:40:fb:67:90:2e:2b:71:4e:ea:d0:4e:
         f1:2f:84:25:d8:a6:de:99:79:d3:be:2c:62:6e:8a:4c:2f:e0:
         a4:90:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:10 2025 by rpki-client