Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File:                     0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier:          eC2v0WWK//K+2f38/8+HkvLwLbmj6fCkqdjlJ1JBTV0=
Subject key identifier:   C9:CB:CF:E8:2F:93:B8:68:3A:A8:3A:FE:5B:0B:D7:73:F9:93:E0:D2
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer:       /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial:       01976DABFEA6F2D8B4F409E7860021F2B1B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number:          51
Signing time:             Sat 14 Jun 2025 09:01:17 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:17 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:17 +0000
Files and hashes:         1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: bgbH+TEmisbrIaoAIxB2kWE7Z/HHD8RLuN5HY5UsVlo=)
                          2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:fe:a6:f2:d8:b4:f4:09:e7:86:00:21:f2:b1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
        Validity
            Not Before: Jun 14 09:01:17 2025 GMT
            Not After : Jun 15 09:01:17 2025 GMT
        Subject: CN=c9cbcfe82f93b8683aa83afe5b0bd773f993e0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:07:39:b1:8d:41:97:97:57:6b:f3:63:8b:
                    20:58:e8:5e:97:b3:28:65:c2:7d:06:d7:ff:85:09:
                    c1:81:94:b8:dd:c6:81:21:f5:16:e9:91:f2:51:65:
                    13:d6:dd:ad:51:0b:2d:55:bf:d9:2f:db:61:e5:ef:
                    08:44:79:f7:9a:0e:24:8b:06:09:35:a5:43:a9:db:
                    6f:83:45:03:a8:d6:a2:db:e6:0f:8e:b5:2b:95:4e:
                    32:34:21:33:23:0c:21:79:db:6b:7b:28:5a:1b:07:
                    50:1e:95:42:7e:d8:93:51:d8:ca:a2:31:16:51:a1:
                    9f:35:dc:70:6d:26:28:de:58:b5:3e:44:1b:41:70:
                    a0:ea:d7:91:9a:fb:b7:23:6c:4a:7b:17:cf:ba:1b:
                    11:bc:4f:81:15:21:28:3a:c5:ce:64:f2:02:64:42:
                    3d:78:8a:24:13:16:03:d4:55:0d:8b:a6:3e:77:1c:
                    17:e5:36:2e:eb:82:18:44:4a:23:28:7b:8c:8a:69:
                    55:1c:d0:6b:e8:68:77:64:c9:2b:c3:44:4d:ba:a7:
                    76:70:41:11:a2:a9:f2:0e:f3:26:40:41:53:f7:0d:
                    45:f2:eb:94:ed:5e:74:08:09:ba:f1:40:55:9f:6f:
                    0d:10:32:47:e8:56:58:7f:1e:20:13:4c:b1:b4:63:
                    6b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CB:CF:E8:2F:93:B8:68:3A:A8:3A:FE:5B:0B:D7:73:F9:93:E0:D2
            X509v3 Authority Key Identifier:
                keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3e:9c:a2:6d:a0:0a:f7:52:da:04:fc:10:32:07:15:8f:d3:
         54:34:0c:9a:fb:54:e0:8b:32:54:71:ea:49:6e:c0:f7:e9:af:
         0d:6c:07:2c:4c:2e:c7:26:23:32:6e:59:b8:74:8a:10:16:09:
         c5:07:6a:46:f1:26:77:9b:86:fd:9f:b3:b8:53:ea:8f:9b:bd:
         84:27:1c:17:1e:bc:49:ad:0b:03:79:aa:55:c7:d4:6e:c2:08:
         ea:a4:35:a8:22:1a:2b:cc:2e:7d:7f:b8:3f:06:5c:5a:27:13:
         58:f7:a4:95:1b:b6:fa:a0:21:34:9c:64:d4:b8:3a:de:de:b9:
         de:d6:a1:79:41:87:e5:d6:c1:99:ef:17:23:60:9b:41:1d:15:
         0e:82:30:19:91:a0:80:98:7a:5d:cc:21:97:9f:31:a5:0e:0b:
         36:69:b9:0c:a6:b4:95:7a:14:ab:48:34:a0:26:a0:e9:fb:ac:
         f6:ee:7b:98:3d:7d:c8:91:f8:5c:92:1b:00:f8:2e:9f:0f:93:
         3f:6b:77:9f:f7:75:60:aa:f3:72:43:7e:fb:0e:e8:b9:1c:c6:
         59:3d:8d:ad:e6:c3:4c:5a:70:6c:fd:58:4e:fa:fb:1e:d5:a5:
         a4:c1:20:c0:28:cc:5e:6e:5f:da:3e:9a:59:9f:bb:2f:9d:54:
         f0:08:87:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:10:49 2025 by rpki-client