Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
File:                     81296PvNv0KF6HvkkO1vzbRqBfs.mft (raw, json)
Hash identifier:          H/DoiL6YtKyOcDHfFXFBmr5Jh7M7N13YSJuMrD2nP7I=
Subject key identifier:   E8:47:7E:B4:E6:CE:C4:26:70:6A:69:8D:77:9C:03:FC:18:7D:33:36
Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
Certificate issuer:       /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Certificate serial:       01976E5022AD796359E632C4E32E34205C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
Manifest number:          0613
Signing time:             Sat 14 Jun 2025 12:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 12:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 12:00:34 +0000
Files and hashes:         1: 81296PvNv0KF6HvkkO1vzbRqBfs.crl (hash: bxeMFmvONd8b4CduKy/zsvw3Rn1OrXcYEib3xxY5TKU=)
                          2: XwCCzqbTFIbNt4tDIiPwvE7s53o.roa (hash: tvLAuw3pgR4MhRPh7vqk9g2rkTx+zeY+ExS4WrgC8y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:50:22:ad:79:63:59:e6:32:c4:e3:2e:34:20:5c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
        Validity
            Not Before: Jun 14 12:00:34 2025 GMT
            Not After : Jun 15 12:00:34 2025 GMT
        Subject: CN=e8477eb4e6cec426706a698d779c03fc187d3336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:95:0e:d5:6f:33:1a:db:0f:23:3e:8a:df:
                    67:7a:1c:33:6e:39:aa:90:40:68:7c:70:3a:40:26:
                    77:37:98:39:c5:7b:ad:3c:3f:be:b6:f7:38:2a:48:
                    fd:1e:63:1a:c8:d3:da:58:8b:db:07:2b:14:e4:e3:
                    96:92:ac:02:cd:6f:74:ee:cc:8e:12:7d:40:a0:10:
                    a6:4a:0e:7b:5e:2a:ee:e9:fd:76:2c:22:29:da:00:
                    f1:aa:5b:7e:4b:8d:b0:d1:fd:91:6e:15:fb:b3:61:
                    26:ed:fd:1e:dd:ea:0b:46:b2:59:7c:b0:3c:30:7f:
                    26:c7:e3:0c:a9:f3:9b:e4:2b:6b:76:eb:07:9b:fb:
                    98:8c:80:cd:17:95:04:33:3d:4f:d0:84:c0:bb:6c:
                    f7:9d:69:46:4a:fb:84:a9:e6:57:a3:a3:61:2e:ca:
                    2a:16:36:73:27:b9:f3:20:5e:1a:06:47:ce:76:e8:
                    d0:5a:87:fa:26:20:0c:5a:c8:66:18:19:fa:d2:62:
                    1c:c9:9b:17:cb:b1:15:af:e5:7d:6c:3a:ad:af:a7:
                    2a:2a:e9:56:08:3f:41:f2:6e:e3:0a:87:2c:0c:ec:
                    01:28:25:39:18:c1:ad:36:ed:04:e0:c2:cc:c3:83:
                    25:69:71:ba:32:20:1b:67:e5:3a:d7:77:48:fa:c4:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:47:7E:B4:E6:CE:C4:26:70:6A:69:8D:77:9C:03:FC:18:7D:33:36
            X509v3 Authority Key Identifier:
                keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2f:57:d4:d8:07:dd:46:db:f0:c5:38:e9:49:0a:3a:8f:ee:
         bc:39:0b:89:8a:25:5b:41:e1:dd:0e:ae:ce:72:e0:56:9e:7c:
         f9:00:82:6e:08:88:0b:0a:0c:9d:aa:04:55:87:18:f7:f7:6e:
         e5:e9:4f:da:7d:c7:52:82:9d:c2:48:ff:cf:93:87:94:33:57:
         ac:1a:a3:88:9d:59:b0:a2:cc:f9:a7:43:8a:1e:51:6c:63:63:
         0d:f2:1a:a9:25:52:ae:72:74:2c:59:63:e9:31:18:44:bb:02:
         c3:6b:29:c8:2c:cf:ee:72:25:6a:27:28:85:3f:41:ef:7b:89:
         86:bf:49:f9:12:1a:d7:df:3d:20:92:6f:ec:31:7a:61:b8:fc:
         1f:d4:f1:17:8c:f3:27:f6:b2:3e:09:08:f3:1c:1c:94:dd:bf:
         2e:5e:a8:4a:d0:17:a4:54:55:a3:36:c2:bf:65:d3:38:d7:4e:
         5f:5d:00:17:c6:a1:59:79:33:53:66:08:f6:44:03:1d:ce:68:
         02:e7:c7:27:d0:e5:62:b9:2a:c1:21:15:fe:18:74:3b:6c:ae:
         78:ff:d7:2f:ca:0e:4a:84:5d:40:83:25:71:c5:82:73:6b:37:
         af:4c:c7:ba:50:54:4b:2f:54:3b:52:60:83:3a:63:2a:e2:e6:
         6b:90:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:45 2025 by rpki-client