Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
File:                     u8o_JdVGILUO-FIGV2NNOwlrrFc.mft (raw, json)
Hash identifier:          kvDXAj5aEvFKsKcf8h18//WhKObyM1pxBFAaOuj7nYs=
Subject key identifier:   A8:27:4C:73:8F:F6:C5:90:10:05:B2:2A:A7:51:85:15:38:ED:2F:E0
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Certificate issuer:       /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial:       01977A8B2FAAB4FB19E8773A91EF771A2C1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
Manifest number:          0DC7
Signing time:             Mon 16 Jun 2025 21:00:31 +0000
Manifest this update:     Mon 16 Jun 2025 21:00:31 +0000
Manifest next update:     Tue 17 Jun 2025 21:00:31 +0000
Files and hashes:         1: Rp_msz1sKXospi7oXq9Ephc77qY.roa (hash: 62qZ7LL8c9IYZnsBXvNbfGkN5Rp0kCxvzgl0G0a3B3E=)
                          2: u8o_JdVGILUO-FIGV2NNOwlrrFc.crl (hash: N7+BlK0FElh6qHnYdnETD6Iu1DmTBxhospYldSCHlJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:8b:2f:aa:b4:fb:19:e8:77:3a:91:ef:77:1a:2c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
        Validity
            Not Before: Jun 16 21:00:31 2025 GMT
            Not After : Jun 17 21:00:31 2025 GMT
        Subject: CN=a8274c738ff6c5901005b22aa751851538ed2fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:8b:db:66:54:e4:4e:48:3c:f3:36:0e:7d:
                    86:e8:6c:1d:72:1e:f7:78:69:96:c4:8c:d3:ce:8c:
                    7c:f1:12:4d:b7:fd:7e:73:85:2b:a5:d6:34:e4:2b:
                    fd:2c:9b:f2:a6:3c:c4:e4:59:5f:24:07:7c:a0:1a:
                    7a:1b:0c:2c:fe:32:4c:05:e1:69:84:76:d0:58:eb:
                    8a:fa:70:58:f4:f7:5d:6b:ae:6a:89:85:a6:6d:3c:
                    80:7a:16:46:68:32:ef:ef:7d:12:b5:2e:6a:25:46:
                    d1:0d:a2:a5:d7:23:57:fa:84:ce:7c:ea:49:3f:ea:
                    e8:38:b1:2c:7c:c4:33:a0:5b:49:18:1a:85:90:2b:
                    8a:6a:a2:eb:80:4b:d2:bc:78:08:aa:f0:6a:ff:21:
                    dd:bf:74:bb:37:8b:b0:9e:34:69:b0:fe:95:d3:08:
                    c6:c8:83:76:65:29:a6:2f:7c:71:8c:72:63:6a:35:
                    dc:de:56:db:37:b4:27:c5:3a:f6:2e:4e:ee:43:49:
                    93:ff:89:13:77:3c:47:79:ad:08:6a:8e:4a:a9:55:
                    8c:14:e9:51:12:3a:ac:3c:eb:81:d5:fa:44:c3:25:
                    2f:69:c3:0a:27:69:5e:f1:29:57:f1:72:45:c4:c8:
                    fc:0c:d3:04:0b:0f:0e:0d:f1:51:1a:da:58:80:01:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:27:4C:73:8F:F6:C5:90:10:05:B2:2A:A7:51:85:15:38:ED:2F:E0
            X509v3 Authority Key Identifier:
                keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:29:1a:81:b2:57:90:9a:11:5d:55:73:52:32:2e:53:fa:ac:
         48:3e:37:12:38:2f:b9:5d:6a:af:be:04:dc:fe:0a:25:f8:89:
         a7:9d:c3:66:ba:c1:60:00:e7:e7:1a:ca:53:d4:cc:00:e9:28:
         06:78:c8:e3:2d:19:9e:6d:8c:da:ca:5f:ff:a0:15:10:9d:6d:
         cd:18:67:e1:3a:8b:4a:2f:cc:da:fd:37:7d:94:b0:4a:36:fe:
         6e:1b:83:18:a3:1d:c6:8a:c3:8f:43:de:c9:02:7a:56:69:df:
         63:f1:c6:21:5e:f8:82:98:8b:f8:8e:4e:f2:c0:b3:d3:78:34:
         ec:08:c0:68:75:73:29:9a:69:d8:17:f7:3d:2b:7e:ba:c6:e5:
         7f:5d:83:d2:e5:98:03:c4:04:ca:7f:23:76:ae:77:f1:96:b8:
         9c:cb:67:cc:35:fd:83:c8:ad:99:50:e4:20:cd:f7:35:cd:a7:
         c5:7c:63:dd:d6:d7:cf:89:26:fd:88:a2:61:c6:75:4d:a2:03:
         7e:4e:5d:8d:93:6e:6b:a6:36:5e:48:80:f1:94:3e:2b:3d:97:
         a3:8d:b6:2f:f9:23:f6:cd:bc:13:a9:66:4a:ae:7a:d2:f3:d0:
         20:49:9e:c6:6c:08:de:11:6c:e5:38:be:90:bf:cd:a6:7c:af:
         df:fb:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:09:18 2025 by rpki-client