Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
File:                     1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft (raw, json)
Hash identifier:          Hq83hIaomXkDCMcHilmKvjTR0oH9sHgEDz0XDj1HWEk=
Subject key identifier:   E6:13:2A:EC:4E:A1:A3:5D:3D:02:22:BA:FE:EB:18:14:F9:37:73:54
Authority key identifier: FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80
Certificate issuer:       /CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
Certificate serial:       019776AE5E2C2BF5F77A41E7B85E8855E6E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
Manifest number:          0982
Signing time:             Mon 16 Jun 2025 03:00:28 +0000
Manifest this update:     Mon 16 Jun 2025 03:00:28 +0000
Manifest next update:     Tue 17 Jun 2025 03:00:28 +0000
Files and hashes:         1: 1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl (hash: 8EBwP8rq+ScN8zPP/RBUJ78PVRk/74XOFZQkfcclfho=)
                          2: CN7EuI0-M2CqLCuCRHt6GUrcg0E.roa (hash: nPJ41a5MjCCJYxpL+ZRoeblB2rw9Ylu7iDblmReMQHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:ae:5e:2c:2b:f5:f7:7a:41:e7:b8:5e:88:55:e6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
        Validity
            Not Before: Jun 16 03:00:28 2025 GMT
            Not After : Jun 17 03:00:28 2025 GMT
        Subject: CN=e6132aec4ea1a35d3d0222bafeeb1814f9377354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:86:e9:04:9f:2a:1b:ab:b6:a1:4f:3b:8e:
                    a6:d1:fa:dd:89:44:4c:da:1a:c2:1a:87:68:45:cf:
                    64:cd:6d:be:dc:a2:55:9d:ab:f9:36:cf:c2:42:d4:
                    9d:d1:36:c9:3f:26:f8:13:95:b7:cb:ea:57:14:d9:
                    bc:d6:ce:b9:05:48:c0:df:ee:86:ce:95:0c:81:76:
                    ee:09:44:7c:fc:47:f3:97:84:cb:f9:64:f4:5c:bc:
                    ec:67:fc:55:1d:27:f0:7a:3f:5c:73:79:f7:d1:48:
                    9d:37:c3:4c:d7:37:3c:1d:9b:ca:ba:eb:72:6d:08:
                    3a:b0:47:47:29:53:24:88:16:d4:ee:8c:15:39:98:
                    84:9d:41:62:1d:d6:54:7b:6b:0c:19:2d:ce:a0:89:
                    bc:eb:b0:ce:3c:ba:e8:d5:e2:82:8e:b7:0b:97:04:
                    f3:0a:ce:8e:bf:9d:2d:69:a7:1c:07:80:54:6a:34:
                    f4:27:c8:6a:74:7b:09:92:42:21:ea:70:3e:8b:9e:
                    f9:80:8f:10:05:ea:bd:80:d1:1c:81:2f:ef:37:b9:
                    c1:e9:d5:52:ae:e7:51:52:2d:ce:63:9e:0d:db:dd:
                    10:76:11:f0:dc:9f:ce:be:28:c0:0d:c4:6c:78:0b:
                    75:6a:d6:70:5b:09:a3:ac:02:9b:e0:7c:a5:dd:56:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:2A:EC:4E:A1:A3:5D:3D:02:22:BA:FE:EB:18:14:F9:37:73:54
            X509v3 Authority Key Identifier:
                keyid:FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d9:b7:bc:77:d5:48:5c:f5:99:65:00:08:18:f4:3a:d8:a8:
         5e:c4:e4:c0:c3:82:f2:bb:75:e2:fe:40:54:6f:36:97:9c:78:
         08:5f:d7:93:4f:fc:af:1f:c3:cc:e3:f3:23:9b:ff:03:0f:8c:
         49:25:ca:c6:11:0c:38:60:8e:d6:51:15:a1:2b:0a:4d:8a:a4:
         74:b7:c6:9e:7f:8d:6a:8c:99:bd:6f:a4:38:05:52:aa:2b:1f:
         f1:cc:48:c3:fc:91:3f:be:fc:b7:fa:a9:62:38:3a:4a:3b:11:
         6c:3d:86:e9:59:c8:07:6d:b5:73:c3:38:dc:3f:ab:2f:7e:4b:
         a0:a5:51:fe:2e:c4:8d:fb:5f:7f:c7:18:52:4e:54:0e:27:f4:
         da:9a:bc:0d:aa:5c:ea:86:fc:fe:35:29:9b:87:2e:6d:d9:a7:
         48:ce:bd:18:c7:74:65:c5:be:be:0b:18:59:a8:62:ff:4a:15:
         7d:e6:d8:72:5e:ec:fd:8e:90:4d:5d:2e:51:31:3a:49:2b:79:
         f1:78:bd:82:d9:ef:76:6f:fe:fd:48:d7:bc:03:57:bb:3b:fa:
         cb:ec:ad:53:b1:21:bb:e4:a8:96:97:1a:23:22:71:5f:bf:1b:
         28:86:f0:61:a9:f0:14:27:f3:51:85:75:62:ef:20:d1:4f:04:
         33:1c:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:53:00 2025 by rpki-client