Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File:                     5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier:          94fVF9TIGy0VqaxZKKHbuFMraAJEum7rZqtRWU5l5N8=
Subject key identifier:   F8:E8:DB:95:91:DE:33:EF:20:BD:E8:0B:76:B4:02:B1:7F:D6:99:3B
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer:       /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial:       01988B0EE0697332B8ED067695EFCF589BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number:          0B66
Signing time:             Fri 08 Aug 2025 19:01:04 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:04 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:04 +0000
Files and hashes:         1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: 6PTa2Kdxwylmqnve/epWlXmqQNJWmdpRAj2FjqkcS00=)
                          2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:e0:69:73:32:b8:ed:06:76:95:ef:cf:58:9b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
        Validity
            Not Before: Aug  8 19:01:04 2025 GMT
            Not After : Aug  9 19:01:04 2025 GMT
        Subject: CN=f8e8db9591de33ef20bde80b76b402b17fd6993b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:37:d4:f9:38:c7:5b:77:07:fb:37:de:7e:
                    df:1c:1e:36:79:0c:10:8b:a9:f6:82:3c:40:9a:a6:
                    09:2d:b1:0b:56:8d:b6:55:4b:18:9c:dd:12:05:57:
                    92:80:27:dd:ea:81:5e:79:8c:9e:e3:2b:2e:d0:57:
                    ca:3a:81:79:29:29:ba:a4:6e:0d:18:19:69:6f:17:
                    5a:49:a9:6d:30:ef:9c:cc:9c:ae:d7:b9:44:67:1b:
                    6f:02:4b:66:45:2b:38:eb:98:ec:bf:0b:12:c5:e9:
                    1d:78:92:02:0c:3b:62:e6:80:de:31:18:40:c4:94:
                    6d:6c:f8:52:ba:88:32:c3:d6:a2:6f:bc:de:c9:c2:
                    83:f5:9b:ed:db:cc:fa:f2:b4:47:d1:c6:70:46:6e:
                    a0:36:52:88:b1:1e:18:a3:7d:6f:cc:36:0d:d1:58:
                    35:17:83:81:82:ad:9f:8a:61:12:2c:6b:af:d0:c4:
                    05:94:65:77:3c:23:a8:d3:fe:bc:8b:d8:33:1a:97:
                    c9:2a:f7:e0:4b:b1:b9:b6:70:4d:a6:2e:9b:2d:c8:
                    e3:73:86:86:54:27:89:8b:9a:eb:c8:ac:1d:30:e6:
                    2c:42:76:0a:38:51:2e:11:68:62:58:3a:5d:e6:93:
                    56:15:b9:93:1d:2e:cb:96:1c:db:5a:21:81:e8:2f:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:DB:95:91:DE:33:EF:20:BD:E8:0B:76:B4:02:B1:7F:D6:99:3B
            X509v3 Authority Key Identifier:
                keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8f:cf:53:be:66:88:74:3e:08:14:c0:a2:32:79:a1:17:d7:
         5a:74:4b:9a:86:8c:21:ed:9f:c1:f2:c0:5d:79:a6:8a:7a:60:
         af:92:99:c6:9b:9a:a4:1c:f8:38:bf:d4:0c:09:ee:74:96:ca:
         9c:f1:70:24:be:8c:32:09:16:e0:1f:db:9f:86:46:53:55:fc:
         09:90:ef:08:de:6f:56:42:1c:ff:ba:47:e8:75:62:0f:a9:35:
         8f:57:d2:f4:d0:a4:de:33:b9:99:92:73:25:4b:1b:79:01:5c:
         86:57:5e:94:9e:9d:6f:d0:53:da:75:82:d0:52:a5:0b:23:d9:
         0b:40:b7:d5:45:ea:a2:d9:37:fe:b2:09:d3:df:72:04:a3:b0:
         01:88:e8:1f:12:db:84:48:38:2b:c2:bc:f8:30:41:9b:fe:89:
         3a:cf:03:b4:2e:97:81:f1:fc:eb:22:ec:04:19:21:9d:7e:00:
         73:01:1e:e7:dc:92:b0:7b:ed:34:b8:62:13:e6:c4:8e:68:e8:
         2e:f4:a7:80:e0:b7:9d:24:da:19:ad:bb:31:e1:fc:21:d0:59:
         80:70:6f:8d:59:7a:9e:6f:93:b0:02:4b:54:35:e0:77:97:fc:
         e7:fc:05:4b:62:c5:8a:d8:11:1d:e6:42:2d:12:66:bf:b2:18:
         98:92:3e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:59 2025 by rpki-client