Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
File:                     8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json)
Hash identifier:          cFAhI4WWjp8zClj7m0MUC6l8RoTHNc4qtlkar52GNS4=
Subject key identifier:   02:C2:88:D4:13:41:52:B5:DE:4E:B4:AB:A0:46:59:BB:AB:F3:24:E1
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Certificate issuer:       /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial:       01976DAB8C68A25CF1AB3E278473BE3D018E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
Manifest number:          017E
Signing time:             Sat 14 Jun 2025 09:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:48 +0000
Files and hashes:         1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: IlhdjoLf1D5LaRyH/CeWpMZTAOTlj4Cd63L0JR4k+gI=)
                          2: cD-tw650Z_Y6Vmxx9pyza1DBukk.roa (hash: wcc3gJVDDM85KdHRToySGGF6W2lO6V1fBEScrl4XQJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:8c:68:a2:5c:f1:ab:3e:27:84:73:be:3d:01:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
        Validity
            Not Before: Jun 14 09:00:48 2025 GMT
            Not After : Jun 15 09:00:48 2025 GMT
        Subject: CN=02c288d4134152b5de4eb4aba04659bbabf324e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:78:3b:ec:61:5b:76:8c:6b:8d:d1:26:bc:
                    2b:e3:04:ab:a1:30:50:71:ae:2e:02:c9:0e:d3:6e:
                    81:0b:90:ba:13:51:b8:8c:c2:14:d2:c0:7b:0b:46:
                    b1:6a:97:f0:82:4d:a9:e7:80:5e:8a:bb:58:28:35:
                    a9:b6:d3:89:0e:1c:68:27:5e:3a:7f:2f:13:36:80:
                    70:4a:0c:05:24:b9:0b:d5:4d:e9:de:48:fb:1b:e4:
                    ba:21:23:78:5e:7f:4d:c2:d6:2e:31:78:2d:30:d5:
                    0d:24:d4:0f:ca:cc:d5:93:da:16:7e:5b:2e:cd:a6:
                    ab:0b:a5:33:f8:b7:46:a1:e1:a8:08:92:dd:c7:55:
                    0f:8b:4f:2d:38:17:00:3f:33:fd:cd:20:71:3c:06:
                    d0:f9:d6:be:0b:ba:2b:2a:a8:fc:c3:1b:be:c3:74:
                    a3:e9:ac:b6:f6:4e:05:cd:b0:83:8f:ab:52:2d:ef:
                    08:bd:79:8e:49:9a:24:4a:1a:86:88:5d:3d:74:a1:
                    84:1a:c3:bb:8f:bc:a9:11:fd:c7:f9:00:9c:29:b1:
                    a3:78:87:38:fa:34:d7:59:76:4e:8d:5c:82:b5:a4:
                    50:54:b4:72:5f:e3:22:5b:42:2f:80:f3:01:7b:e8:
                    92:20:79:c1:22:96:dd:0e:35:1a:6e:71:35:4f:7b:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:88:D4:13:41:52:B5:DE:4E:B4:AB:A0:46:59:BB:AB:F3:24:E1
            X509v3 Authority Key Identifier:
                keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:19:71:17:4c:bd:77:be:b3:96:ae:88:29:eb:7e:2b:d9:
         aa:1c:ec:cf:97:70:18:ac:7f:bf:98:c6:c7:98:98:3a:e3:69:
         72:0c:cb:32:72:b8:f7:7d:73:58:dc:36:58:fd:2f:46:d4:bc:
         b3:cf:c0:b1:3d:ad:f3:b0:c6:72:56:08:ea:c8:36:fd:db:11:
         0c:0f:a9:94:af:a2:7d:d2:4f:e0:e6:98:31:69:9c:c7:ca:a8:
         1b:43:5c:72:96:8d:79:ee:96:e6:5a:ba:12:f3:7c:c5:86:c2:
         ad:b7:4b:d5:e2:3d:73:80:70:c8:e5:8a:50:7e:62:b4:ad:c2:
         6c:f5:9a:a4:b9:04:07:a1:0f:4e:41:44:e0:3c:be:ca:57:26:
         cd:a4:2c:ce:1a:c3:b3:e3:b7:cf:42:7e:25:16:6a:36:f7:67:
         13:d2:0a:01:91:89:8b:d6:63:52:32:fb:d7:62:fb:0b:69:c9:
         49:06:b0:89:9f:ab:5c:b4:30:5d:70:0c:a6:98:88:62:1b:cd:
         1f:ad:1f:b3:e2:43:79:6d:bf:2d:94:5c:4e:1b:b1:4c:6f:be:
         b1:bb:a8:21:78:31:6d:cc:25:81:15:bc:5d:8a:6e:70:17:87:
         9d:e6:6c:bb:e8:e1:61:4d:20:fc:bf:29:42:50:2b:22:b2:51:
         92:2a:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:18 2025 by rpki-client