Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          34pF1HAVpM/+rESPV9x4J41ZVa+v8P5fmyJyGI8ROHY=
Subject key identifier:   10:80:99:57:62:5B:DE:29:72:24:29:E1:2B:7C:D0:D6:D1:A1:3D:97
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       0197767750DB20CDB4A4F39EC0E520F2BF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          0A3B
Signing time:             Mon 16 Jun 2025 02:00:20 +0000
Manifest this update:     Mon 16 Jun 2025 02:00:20 +0000
Manifest next update:     Tue 17 Jun 2025 02:00:20 +0000
Files and hashes:         1: 2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa (hash: F4E+yi6wuov8nVtjH23YAurT+H1Svha6Z7BC42V28wo=)
                          2: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (hash: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=)
                          3: M2T_h-HT-LjV3MxmhC3AaCL7DR0.roa (hash: JUe0w/L/a5YNGKCvQ5Od3tGqP8OCxA0GZG5F9koR5ws=)
                          4: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: hEJMbS7bwDLA6M1IK/6IhaEhwI1LKZiWe7gJhC3LdtQ=)
                          5: hfZ9JmRYsdrX_WsZKnGJG03yjoY.roa (hash: KsXjtR8VJ0gF1kTfS5RfLRCRZJ2gEjdzhxwY2pQ41Hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:77:50:db:20:cd:b4:a4:f3:9e:c0:e5:20:f2:bf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Jun 16 02:00:20 2025 GMT
            Not After : Jun 17 02:00:20 2025 GMT
        Subject: CN=10809957625bde29722429e12b7cd0d6d1a13d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:01:c6:97:11:f4:cf:f4:06:0a:39:53:0e:
                    23:0d:4a:35:c7:52:56:c6:80:86:72:66:d8:3b:e7:
                    dc:e9:e3:3b:9e:74:2b:74:fd:88:f5:4b:67:83:dd:
                    3d:28:e3:ee:92:fe:2e:b0:56:47:42:32:00:23:db:
                    85:7a:58:7c:ce:cc:1d:de:72:83:0a:fe:87:e0:9e:
                    f2:b5:25:dd:b2:84:db:07:23:fc:42:9b:09:98:43:
                    df:1f:45:59:5e:4a:f6:9a:ab:37:eb:fa:6b:1b:aa:
                    cd:cc:44:0c:21:54:97:9a:52:71:6e:3b:74:c9:d8:
                    15:14:c4:b7:02:67:a9:c4:6e:36:3b:8b:f1:5e:6a:
                    0f:d0:b5:c7:0a:22:97:68:78:87:06:07:81:3a:b9:
                    cb:ed:79:23:1e:ec:85:1d:79:ec:af:5d:51:e3:3f:
                    10:4e:5a:a7:48:49:24:9a:f2:ec:de:bc:fe:ee:81:
                    d8:43:cb:84:ef:9a:48:db:d5:e8:32:eb:b8:c3:20:
                    f1:46:7f:b6:90:e4:f9:9d:99:8b:bf:97:98:18:93:
                    4b:ee:69:17:e5:75:ae:6a:d1:eb:8c:0c:34:d6:44:
                    df:18:4a:5a:ce:df:b6:cc:8c:4d:6d:56:40:27:88:
                    07:43:ca:d1:eb:54:29:21:4a:15:c7:70:59:31:7b:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:80:99:57:62:5B:DE:29:72:24:29:E1:2B:7C:D0:D6:D1:A1:3D:97
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0c:d7:14:ed:d4:40:d5:89:f6:b4:47:82:d1:1b:db:9a:47:
         8e:38:f1:1b:2d:73:7d:09:be:a2:ca:57:7c:5b:33:1a:b4:52:
         21:e5:f9:c5:92:d0:38:50:90:f1:8e:bd:ee:f5:64:64:eb:9c:
         61:e6:8c:8d:d8:86:f4:04:0f:9e:1d:a6:4c:22:4d:3a:2d:3e:
         49:3f:85:e7:47:30:6f:23:47:51:e4:59:e0:f5:f3:ca:32:41:
         6c:1f:b7:05:2c:0a:36:db:a4:8b:c6:72:57:6e:c8:02:42:eb:
         05:67:d6:b1:fd:97:67:f7:49:69:fd:59:3b:dc:86:19:bd:55:
         eb:bd:92:86:dc:81:94:2e:56:3e:78:69:04:2a:63:c6:2e:82:
         23:ed:61:cf:a3:69:ab:d2:6b:be:33:8f:a2:52:a5:53:49:51:
         11:8c:db:c9:4b:a6:f1:39:17:9e:b7:4c:e6:03:91:d5:a2:0e:
         94:2a:80:6f:5d:40:2d:81:01:64:6b:6a:02:3a:4c:a1:83:68:
         7c:02:8d:70:47:2e:bf:39:f5:e8:03:53:7b:22:0a:48:96:2e:
         b5:2d:c5:e9:1b:55:0a:47:cd:77:b9:be:e2:d9:e9:43:e5:ed:
         b6:10:a6:6c:d0:32:fc:46:d1:15:fe:ff:36:9b:64:bd:2c:3e:
         d8:77:99:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:20:25 2025 by rpki-client