Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File:                     i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier:          v09/hI/Xy4MuTfj5+SSgrzMxrpF5P6ZZCaaXUg0GrRI=
Subject key identifier:   BC:91:D8:32:C8:C6:BB:3E:6F:18:C3:B8:9A:AB:BD:78:8F:8A:26:1B
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer:       /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial:       01976EF5460D82A93CACA18B0D9199B8BF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number:          0412
Signing time:             Sat 14 Jun 2025 15:00:57 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:57 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:57 +0000
Files and hashes:         1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: NUboc+s5qKCXQtOrCde/itsz4SQDY95Y4K9jml2D4H8=)
                          2: r5RExikwh9VTxHZbndQhO_XU-vQ.roa (hash: 9NeQ0bAnfg+NNUQ9+vUOpq7EYWJaPxwQiPdu/Cupofw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:46:0d:82:a9:3c:ac:a1:8b:0d:91:99:b8:bf:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
        Validity
            Not Before: Jun 14 15:00:57 2025 GMT
            Not After : Jun 15 15:00:57 2025 GMT
        Subject: CN=bc91d832c8c6bb3e6f18c3b89aabbd788f8a261b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:c8:6c:eb:27:06:33:df:ad:15:7e:9e:7d:
                    43:a7:aa:60:33:d5:f2:f8:34:49:31:32:1f:74:8a:
                    20:dd:d3:56:cb:00:61:d8:82:98:ec:aa:d4:ed:a5:
                    58:ef:a2:74:c7:7c:29:66:64:08:6a:e5:a0:1a:e2:
                    98:c1:a5:5b:ef:2d:74:ac:4f:53:85:b5:b8:9c:6c:
                    25:7a:1d:e7:39:1f:39:85:70:13:d8:82:0c:56:a8:
                    09:39:56:b9:f4:bc:e3:6e:cc:1e:0c:d0:d8:58:23:
                    d1:7e:9b:c2:c7:20:7e:eb:20:f8:0d:c1:53:ec:27:
                    44:b7:1e:27:16:44:eb:a1:e5:9a:13:54:c4:66:f9:
                    ea:fb:14:90:44:76:8c:64:b9:08:1a:78:a5:b7:45:
                    34:40:25:73:fe:5b:39:3f:7d:8e:26:a0:45:fb:f5:
                    7a:a1:e9:2e:da:66:7b:26:91:14:2b:ec:26:55:27:
                    07:d5:dd:b3:da:ca:09:95:46:43:04:7a:15:c3:70:
                    a7:c4:79:99:37:82:aa:5f:ad:9f:ed:3a:4b:f5:fa:
                    8e:9c:4d:76:ce:9c:b6:23:86:9b:51:03:e7:61:78:
                    d2:d1:49:13:d4:dc:b3:93:c6:4b:4b:df:52:a2:f3:
                    ef:3f:b6:03:88:c8:22:72:a7:d6:eb:18:da:7c:96:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:91:D8:32:C8:C6:BB:3E:6F:18:C3:B8:9A:AB:BD:78:8F:8A:26:1B
            X509v3 Authority Key Identifier:
                keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:21:2d:40:1f:4c:c4:54:72:88:4f:9f:28:62:26:cd:6d:b2:
         20:79:cb:b1:76:05:9b:18:eb:ae:64:24:84:09:31:88:0e:a7:
         96:92:c5:61:1d:9a:b1:ac:b2:91:12:9f:04:28:0e:79:ca:cc:
         a5:3c:5e:aa:2b:93:3b:00:e2:39:2c:ce:72:de:63:53:64:4f:
         1f:53:60:99:b1:87:70:7b:85:be:8f:6b:95:8f:ae:af:96:81:
         9b:bc:74:60:d7:ea:30:49:23:2d:5c:7f:93:cf:64:e4:17:85:
         e5:bf:c3:d1:16:f0:d8:c4:cd:87:fe:1a:ce:ec:70:15:9e:36:
         c5:53:ec:b0:63:51:9e:06:c9:48:04:20:d4:be:a8:1e:fe:e7:
         fb:e3:93:ba:43:f3:47:4e:5f:48:f5:3a:10:c7:72:1a:d0:6c:
         08:d2:57:26:50:c4:d4:a4:2e:fc:92:57:ce:7f:41:f2:99:04:
         cd:e4:31:e5:2a:54:ca:cf:e4:f1:c2:33:b0:fb:0a:fd:76:be:
         d8:9b:7b:03:a0:24:62:11:73:ef:7f:3c:0f:cc:25:09:05:f7:
         3d:a4:99:02:5c:5d:cc:10:41:ca:58:97:ed:fa:b2:4f:6f:77:
         44:b3:b3:f3:64:68:fd:18:c9:03:35:41:e5:1c:98:96:a1:90:
         0b:a9:63:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:52:24 2025 by rpki-client