Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
File:                     s1ACugiNW9CcFVPc7VsL85B_9zY.mft (raw, json)
Hash identifier:          7d1QpeUtFXq+py1DKktdB8GHd84dwwBoDQTQOJhvrR0=
Subject key identifier:   2D:02:8E:5D:AB:78:D7:7C:3D:B5:A5:65:C8:EA:13:B9:12:A9:63:07
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Certificate issuer:       /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial:       01976EF503F22C224856078817C349F8E485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
Manifest number:          08A0
Signing time:             Sat 14 Jun 2025 15:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:40 +0000
Files and hashes:         1: D3KzOuSHnINj7YsYIxZhKw2tJLI.roa (hash: TArdMR0dUk5iRwDg/3JrhTXVptyyPyGKyBf2Jxa6esk=)
                          2: K7_w83CbqB50p5lcpbyDnATtK4Y.roa (hash: /8SCcb2O2tmxF/iex69u1hAPcq9K2D7sGmmIbln+NaE=)
                          3: MuKsPf92gYpb4VkgQi1f9xcWVfE.roa (hash: 8DECBi25scQbmewrZN0eRe0LEc/MBejb+MDaRq8CQ1k=)
                          4: RU33m0E_v4JtyZuDuLE7um4TGFs.roa (hash: rYLpalqoskbodL0bGl/nYGGqSHm/lj+AMxh3BExa9eA=)
                          5: s1ACugiNW9CcFVPc7VsL85B_9zY.crl (hash: SEJFSiwhfjTnPZQnS3f0RUOUCOTMb2RfeXx0gB5Z3gY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:03:f2:2c:22:48:56:07:88:17:c3:49:f8:e4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
        Validity
            Not Before: Jun 14 15:00:40 2025 GMT
            Not After : Jun 15 15:00:40 2025 GMT
        Subject: CN=2d028e5dab78d77c3db5a565c8ea13b912a96307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:04:af:8b:d7:18:e0:14:9d:34:d6:9b:4a:
                    5e:f9:5e:37:8d:98:3a:98:81:23:e9:ff:50:9b:78:
                    1f:72:85:33:2e:7b:1c:70:b0:58:87:7b:31:33:cd:
                    17:d0:2c:29:e9:0d:4e:9f:5a:e3:27:d9:91:d7:2d:
                    55:14:fb:87:46:76:52:91:a1:2f:05:26:c4:c4:e0:
                    09:8d:c8:13:07:3d:ca:4b:26:a6:b9:f9:66:93:58:
                    65:a8:34:5f:c4:6f:33:0d:ac:de:7f:08:e9:d3:3d:
                    4b:cb:bb:d6:63:a6:ae:96:7f:6b:a3:0c:df:87:d7:
                    bb:05:99:fb:2a:06:6c:0e:ec:60:15:d2:bd:a9:9e:
                    54:54:07:71:9d:7e:21:88:b2:a6:c4:b0:c7:81:cf:
                    7e:dc:25:28:db:87:9f:2f:d8:1d:8f:fb:a0:17:b8:
                    52:53:ba:ac:71:f6:4f:9e:2f:c3:12:30:43:48:bb:
                    91:7c:ca:03:84:10:69:8c:a4:5b:ef:2c:c8:37:5a:
                    79:7b:3c:1c:ec:dd:df:03:bd:3b:6f:6a:75:60:9d:
                    c5:81:4e:fc:8b:cf:dc:50:87:5d:e3:92:01:9e:2c:
                    84:f0:92:1a:f7:96:f4:57:20:57:f6:0a:8e:fa:aa:
                    95:60:b9:49:f9:42:6e:28:cd:ed:38:a7:cb:49:c3:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:02:8E:5D:AB:78:D7:7C:3D:B5:A5:65:C8:EA:13:B9:12:A9:63:07
            X509v3 Authority Key Identifier:
                keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:45:6d:9e:ee:5c:27:1f:4a:92:66:f0:1a:32:e4:ad:08:
         58:ec:bc:ea:16:1f:df:80:06:74:fe:61:2d:4f:77:1a:ef:8d:
         bc:60:dd:7d:5e:c4:ef:37:88:b5:de:b8:f0:82:9a:f1:cf:59:
         f9:be:8d:88:bf:c2:d5:9d:07:54:63:52:bc:ec:f4:ed:e9:d0:
         ac:08:aa:7b:b3:a7:f9:c1:c7:eb:f2:86:7e:7f:80:6a:40:48:
         85:75:f0:80:31:79:58:13:11:f8:72:40:46:a4:5f:35:13:e9:
         76:5b:4c:7c:ce:42:d8:51:f9:5c:a2:b2:f5:61:09:9a:14:10:
         57:64:79:69:b3:41:a4:09:ea:34:85:55:d2:d3:b3:cd:90:b6:
         bb:7d:51:e2:46:0c:4c:fb:28:8d:ce:6b:b6:7f:39:de:60:2a:
         0d:d6:91:1c:3a:e8:0d:26:73:85:97:34:ed:74:7e:08:a9:9c:
         6c:e2:4d:99:ff:c8:0f:3f:25:7a:be:6a:3c:40:93:4d:41:66:
         6b:21:75:b9:50:ca:79:2c:b1:be:e2:3d:90:a0:8f:d6:5a:6c:
         2e:12:9f:31:de:33:53:35:23:df:b7:c7:f9:d7:54:d9:98:28:
         79:2f:2b:db:b3:45:e6:5b:14:88:8f:7c:c8:30:92:b8:0e:04:
         ab:9b:57:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:20 2025 by rpki-client