Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          eRcIEL8D5jC70n77stqGpqWFSPWR50aPGaQp0SRbkWE=
Subject key identifier:   9C:02:0A:B0:69:BA:96:90:37:BB:75:BA:C8:81:C4:D8:EA:E3:E4:B9
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       01976D3D4F49A3BC15F990A29C13DFCF5786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0937
Signing time:             Sat 14 Jun 2025 07:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:23 +0000
Files and hashes:         1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
                          2: XdmrjuWzZy62aNAP27lIvhOU4pg.roa (hash: GLuRF8qY+3QymEUwnc/Z5m+7OQeVn6lmu8CHrOCaebE=)
                          3: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: /zCtNsdWfjTN9jq20B5/RBxbcmwHZ5fqw+4c+tWQPwc=)
                          4: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:4f:49:a3:bc:15:f9:90:a2:9c:13:df:cf:57:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Jun 14 07:00:23 2025 GMT
            Not After : Jun 15 07:00:23 2025 GMT
        Subject: CN=9c020ab069ba969037bb75bac881c4d8eae3e4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:35:f1:c4:74:58:50:e8:2c:0b:b0:19:48:2c:
                    d1:9a:91:96:15:44:19:40:e0:3d:94:0e:68:df:34:
                    76:20:57:e3:24:47:d0:12:f9:66:b5:f7:3f:0a:d7:
                    63:e6:97:5e:3e:30:71:0c:8c:a4:fc:24:23:8d:81:
                    ce:01:25:2f:6c:1a:37:9a:d1:22:05:a1:86:af:54:
                    5d:be:ae:ef:4e:dc:fe:74:e6:32:95:9f:f9:3b:63:
                    b7:c5:76:98:71:95:5b:0f:fc:64:c3:b3:ce:f6:05:
                    91:b5:79:75:4d:d2:6e:69:f0:78:1e:29:84:40:01:
                    41:8a:ea:44:ee:e9:c6:42:1d:7f:5e:ca:da:da:2e:
                    e7:60:f9:53:67:f3:8b:ca:10:bf:3f:f9:35:95:b6:
                    62:11:42:49:be:a0:60:da:9c:cb:b7:92:bf:ee:33:
                    69:59:59:f6:a7:a1:3f:d4:e9:a9:38:e7:f4:e9:fc:
                    f4:c9:e1:0d:73:ba:0c:75:3c:45:48:0e:36:c1:35:
                    b3:be:c9:16:f2:9b:b6:3b:40:48:60:61:27:79:3a:
                    54:ae:ad:26:35:cc:39:b9:e9:00:34:35:b8:a5:df:
                    71:26:7f:bb:9d:66:6f:bf:22:ea:81:33:3f:c2:a6:
                    da:a9:25:27:aa:5c:d6:49:09:93:96:cb:78:93:06:
                    4b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:02:0A:B0:69:BA:96:90:37:BB:75:BA:C8:81:C4:D8:EA:E3:E4:B9
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:82:4d:c3:27:1c:c4:42:f1:f1:9f:0c:c7:a8:ab:ca:6c:
         81:4c:89:ef:2f:e4:ed:a1:9e:36:c6:b0:33:2e:cf:1d:60:77:
         80:cd:cc:dc:c8:1d:e4:73:22:b0:1d:fd:cd:05:af:47:47:c0:
         6d:9d:71:29:06:cd:c5:13:59:13:48:33:06:74:54:44:02:25:
         f2:b6:e7:d2:dd:2b:86:c6:5d:5e:01:87:1d:52:84:69:6d:79:
         36:dc:40:d5:18:22:4f:77:a6:ed:14:16:56:aa:b2:c3:ea:9f:
         17:e4:80:6b:89:31:81:c6:c7:7c:ea:e2:57:31:6e:1c:d8:25:
         3f:f5:03:8f:15:52:7c:15:5e:4e:d2:7c:91:ea:0e:36:81:37:
         7f:f3:bd:92:46:ec:43:25:ef:c8:f1:21:d9:ee:88:d3:eb:5f:
         21:33:05:18:1f:ea:06:d2:04:5f:27:2e:2f:da:2a:45:37:22:
         0e:1c:25:35:95:cc:c8:21:bb:42:b8:63:d3:de:cb:f6:c0:e1:
         b6:c7:a4:85:83:5c:70:88:d7:dc:ff:f1:af:73:75:7a:a2:72:
         60:f8:c8:68:90:d5:a3:12:a1:55:1b:08:f6:0b:1f:c1:4b:bf:
         05:a7:95:5e:f1:47:fa:cb:44:c6:0e:d9:cb:96:7d:a5:bb:76:
         82:dd:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:33 2025 by rpki-client