Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File:                     k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier:          dRbb5eq14SWgfDtY4yiIKy6mCGbqXkrzOkhFA5vTSXQ=
Subject key identifier:   F8:19:30:68:E0:B6:A6:3C:74:60:0D:A8:E8:BF:F2:56:C3:A7:A1:09
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer:       /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial:       01977F7B0CBF2AC396F9CAEBF427D60E7D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number:          09BB
Signing time:             Tue 17 Jun 2025 20:00:59 +0000
Manifest this update:     Tue 17 Jun 2025 20:00:59 +0000
Manifest next update:     Wed 18 Jun 2025 20:00:59 +0000
Files and hashes:         1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: hQlGXilv+Z8FatVDaabC5EOJay7Y/n3/WrEdgeH54bo=)
                          2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:7b:0c:bf:2a:c3:96:f9:ca:eb:f4:27:d6:0e:7d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
        Validity
            Not Before: Jun 17 20:00:59 2025 GMT
            Not After : Jun 18 20:00:59 2025 GMT
        Subject: CN=f8193068e0b6a63c74600da8e8bff256c3a7a109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d6:69:77:e3:ce:9f:ab:08:97:6a:16:74:38:
                    80:3e:39:c7:7e:fc:d7:3c:6e:63:04:ec:18:07:59:
                    21:8d:f4:44:c8:17:f9:dc:64:b9:ad:51:be:50:34:
                    f8:bc:42:a4:a7:75:cd:77:2f:b5:39:03:c9:2c:53:
                    03:9e:e5:bf:56:71:7c:5f:47:66:8b:55:d2:33:2f:
                    17:b7:a3:a8:c7:95:30:5f:46:51:6b:9c:8b:9b:ef:
                    0a:7c:ab:49:d6:e3:6c:ec:03:8a:91:6a:6a:b1:a1:
                    83:f0:b6:c6:d2:4a:11:fe:f5:f8:7e:87:70:e2:dd:
                    a4:08:f0:be:48:d8:de:38:03:5f:49:2a:c3:c1:77:
                    11:b8:85:7e:de:13:ec:21:01:0c:84:83:51:93:02:
                    99:45:a9:9e:cc:7c:70:53:5c:f8:40:f2:0c:e4:0a:
                    bc:5d:50:82:b2:6c:a7:e8:c2:61:e6:79:fb:cb:98:
                    54:bb:08:e0:e5:c3:f4:a2:03:85:4a:14:88:71:78:
                    18:2f:8e:0c:eb:e5:77:e1:79:2d:0d:c4:a1:0d:d1:
                    57:d6:51:f1:6d:cd:69:8c:22:9c:ac:5a:99:f1:d9:
                    3a:87:e6:0a:8b:27:4c:10:72:67:e6:0a:1f:f8:b0:
                    60:73:63:1e:bf:66:4a:0a:f3:3d:ea:fa:c9:85:29:
                    2f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:19:30:68:E0:B6:A6:3C:74:60:0D:A8:E8:BF:F2:56:C3:A7:A1:09
            X509v3 Authority Key Identifier:
                keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:07:e9:fb:6e:22:28:4b:4b:6b:93:16:dc:5b:9b:78:f8:8f:
         a8:bb:6b:73:ee:77:f9:e6:24:1e:e2:77:9b:4d:d9:2d:28:1e:
         91:f4:9e:a3:11:2f:56:8c:be:8a:06:8c:37:b2:cc:0f:3f:f2:
         6e:0c:c7:61:4f:0d:ea:c1:90:83:7d:c2:89:e5:13:12:51:a8:
         85:40:20:fd:f3:6b:b1:27:c8:51:a2:cf:74:4b:82:d3:8e:4b:
         a8:dc:90:a9:69:12:86:b9:6f:7f:d0:29:05:cc:cb:15:3d:49:
         f6:65:2b:c1:70:a4:3a:6d:cb:85:58:74:2e:e5:8f:8b:17:b5:
         ea:fc:c9:66:50:68:8c:88:bb:bc:7f:aa:f6:46:59:87:6c:23:
         d8:11:cd:8e:d4:52:6a:0e:d3:7e:50:05:5c:9a:94:8b:2a:37:
         6b:fc:55:e6:e9:16:94:67:ef:53:95:30:3b:1c:61:2e:e2:4e:
         3c:71:5f:03:ec:b1:8f:cb:9f:e2:48:d8:98:58:c6:75:51:88:
         d8:51:71:18:ef:10:7f:2e:4a:e8:00:58:9e:ac:4d:0d:bd:c7:
         84:c4:fa:ed:14:e6:c6:d9:e4:58:c6:03:8d:2c:0b:44:2f:a6:
         d5:c5:12:aa:14:dc:c4:e1:fb:20:9b:3a:1a:87:04:7f:f9:03:
         34:20:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:32 2025 by rpki-client