Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          dYo2vEA1gzFmktAcACRV2VjaE5d6CIrUhhTEkd1OJlk=
Subject key identifier:   76:6A:87:E8:FA:A3:09:1E:2E:A7:22:B3:E4:57:D5:0B:DD:78:96:81
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01976C2AE86FAC3471B5A76816F439D7F765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          15B0
Signing time:             Sat 14 Jun 2025 02:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:40 +0000
Files and hashes:         1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
                          2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: YlazuxeZ87F9IOLl5XYEdurjuscgvEVVpYcOFI81Rp0=)
                          3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
                          4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:e8:6f:ac:34:71:b5:a7:68:16:f4:39:d7:f7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jun 14 02:00:40 2025 GMT
            Not After : Jun 15 02:00:40 2025 GMT
        Subject: CN=766a87e8faa3091e2ea722b3e457d50bdd789681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:5b:d6:6d:91:94:62:08:2a:ae:95:22:e0:
                    84:14:53:1f:a8:ce:99:0f:63:16:16:47:a8:8e:16:
                    c0:22:c3:37:d4:a0:8f:a2:6a:10:5e:d2:2f:76:cd:
                    36:b7:4c:7b:df:4a:61:6a:28:21:73:6c:67:3d:10:
                    04:52:05:94:04:de:5d:a1:30:97:6d:2b:41:35:74:
                    cd:62:08:fc:26:4d:07:b9:95:40:aa:7a:b7:5d:75:
                    f2:d8:f3:3f:93:fd:83:53:76:40:d3:1c:9a:98:20:
                    b5:cf:a7:cb:cc:03:c3:98:22:2f:e6:62:cb:9e:3f:
                    d6:8e:71:03:34:a4:26:ec:51:68:b4:7f:e5:de:63:
                    76:2e:93:6e:89:e8:61:0c:c4:81:1b:e6:0b:0f:13:
                    34:0c:1e:c1:9d:36:a0:c0:54:9a:62:82:6e:5e:78:
                    42:c3:59:0f:6c:47:13:3b:b9:9d:81:09:07:5d:f7:
                    a8:e3:39:72:1d:6a:5d:42:34:69:eb:51:ed:5c:45:
                    c8:ae:f6:24:1a:d2:09:8a:0d:ac:27:07:f9:04:60:
                    a7:6f:9a:00:bd:84:51:e3:33:25:6c:30:08:f4:be:
                    c3:8f:ce:81:2c:ba:f2:29:0c:f7:dd:a6:2a:d6:49:
                    e5:d9:24:9b:86:95:ef:8f:7e:d2:0b:3b:3c:d9:bd:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6A:87:E8:FA:A3:09:1E:2E:A7:22:B3:E4:57:D5:0B:DD:78:96:81
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:91:b1:2f:0b:d2:c2:d3:a8:5c:63:c7:38:17:ff:a7:c6:
         93:ff:51:60:54:8e:3b:54:2c:c5:28:02:cd:7c:7e:90:40:fc:
         a8:79:30:5c:dd:fb:51:98:0e:30:ef:97:85:c4:d3:e7:e9:07:
         ce:70:23:bc:a9:d7:a5:b3:af:e6:15:dc:68:b1:e5:c2:4a:99:
         47:44:9e:de:da:11:d9:97:ec:96:a8:f4:4f:d1:23:78:04:63:
         c8:ff:8f:53:bc:51:6b:f3:ee:62:d8:64:93:af:10:44:25:95:
         f7:cb:a2:9d:5b:43:f3:50:91:b8:b2:01:cb:6d:65:fe:cc:ae:
         5e:6c:19:1d:d8:1c:df:50:b0:52:fd:4d:94:c6:3a:db:fb:3a:
         2d:55:cb:fb:37:1b:18:9d:e7:a8:3f:ae:bd:36:81:5c:6a:28:
         69:a1:c4:bf:3a:66:f2:16:1d:4b:43:ec:3a:12:36:4e:92:b7:
         6e:fb:9a:f9:66:ef:c5:66:33:45:03:0d:e5:81:98:52:d5:21:
         ac:2f:19:16:c5:2e:01:cf:2b:3d:dc:df:cb:6d:20:f7:1f:22:
         ce:29:b7:9f:11:4d:1a:bc:97:d7:91:59:fa:62:0a:ed:34:f0:
         f0:c2:c1:1b:14:df:8f:58:e8:f4:b3:ab:4d:05:36:b1:12:10:
         72:4a:d4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:42 2025 by rpki-client