Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File:                     8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier:          dbV36lYIhJY22VoX8rEyGPcsMwM8EWR31RsSASXEVps=
Subject key identifier:   AB:F0:EB:15:0A:48:E0:D2:B7:5F:30:81:E1:73:D4:68:C3:A6:F4:16
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       01976F9A6630FDCBC05B618CD558E557CB1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number:          0FB1
Signing time:             Sat 14 Jun 2025 18:01:18 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:18 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:18 +0000
Files and hashes:         1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=)
                          2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: R2ylihFd0IcJVrsqPhYyixo8X9NsYzlMYLh/S7C/51s=)
                          3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=)
                          4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=)
                          5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=)
                          6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=)
                          7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=)
                          8: Y1odvpmyDgd_SZNft3LtP_Y9m5Q.roa (hash: 6tgo1juOE3j4wf1OK40ZNiTNEBkar47yAuVkY/NJHx0=)
                          9: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=)
                          10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=)
                          11: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=)
                          12: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=)
                          13: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:66:30:fd:cb:c0:5b:61:8c:d5:58:e5:57:cb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Jun 14 18:01:18 2025 GMT
            Not After : Jun 15 18:01:18 2025 GMT
        Subject: CN=abf0eb150a48e0d2b75f3081e173d468c3a6f416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:e2:00:8d:eb:08:cd:99:51:91:86:f5:7a:
                    73:af:62:46:88:0e:92:d3:19:c0:ef:69:ff:82:bc:
                    93:26:0d:d3:e4:6b:92:ef:f7:0e:56:9b:21:e6:b8:
                    56:7d:bb:e7:21:14:9f:fc:89:76:78:54:da:e9:ea:
                    fb:05:84:00:df:4d:42:c2:47:f3:ad:a2:2c:67:cb:
                    6a:4f:5d:56:99:6f:a8:a9:95:c7:af:45:c3:ba:45:
                    df:95:a2:07:27:8e:68:6f:0b:d5:53:94:ec:88:f3:
                    ed:f0:db:3d:ef:43:aa:fa:7a:9b:dd:0a:92:a3:48:
                    a6:75:c2:21:4a:4a:b0:08:04:1a:28:a0:5c:d2:83:
                    66:ce:de:3b:b9:85:24:dc:b5:67:11:7f:af:0a:48:
                    bf:71:20:4f:53:4b:7b:1d:91:13:6e:2c:bf:3b:7f:
                    44:d4:97:1b:82:79:0f:c8:d0:fa:83:f4:5d:e9:03:
                    1c:00:e6:27:5d:5a:57:b3:94:ea:64:65:4c:70:5f:
                    4e:e8:ef:5a:2b:d8:f7:5c:0e:0a:d4:60:90:ce:9f:
                    41:cc:8a:53:1e:56:a3:48:6b:21:3d:0e:4c:ae:df:
                    fc:6f:cf:36:5b:61:06:77:6d:62:15:9c:4e:9b:29:
                    f3:6d:c3:3e:ea:d4:ac:94:2b:51:50:b4:9f:c4:2b:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F0:EB:15:0A:48:E0:D2:B7:5F:30:81:E1:73:D4:68:C3:A6:F4:16
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6e:3e:10:da:d7:11:4b:17:5f:2e:f7:dd:c5:be:4a:54:67:
         d6:f1:6d:08:56:79:e3:3b:92:cd:18:73:51:1a:a6:05:fc:e7:
         a2:e7:35:5c:94:ac:c8:9d:79:fc:1e:58:43:49:52:7c:0d:67:
         24:37:f2:dc:7e:78:43:57:22:f9:01:0f:ca:7d:7a:fd:bf:ef:
         cf:64:37:c0:b4:30:df:52:d5:f1:c1:d3:fb:6e:25:55:f4:11:
         f0:68:68:0a:10:89:ca:ee:58:c9:5a:a2:46:e6:d2:39:81:00:
         ef:80:80:7b:16:dc:4c:17:c2:61:f2:64:f2:62:5e:b3:f2:07:
         5f:a7:ef:14:8e:78:56:5b:23:cb:f5:5b:ec:02:15:f5:92:23:
         fa:2e:85:ae:3d:5a:2c:df:b7:c2:10:35:8c:fe:54:ba:ca:14:
         70:50:e0:f3:67:80:11:8e:43:23:fc:79:a7:5e:5b:fe:f4:ce:
         bf:42:a9:20:66:fa:5c:fd:19:a0:94:82:c4:19:51:ed:ab:93:
         c3:c9:58:98:65:c9:e2:e0:ff:07:c7:9f:c1:c0:2a:23:c6:d1:
         93:91:d9:8e:13:52:bf:78:fd:1e:7b:ce:ca:92:f1:29:31:39:
         de:b3:18:bc:c2:55:12:29:42:3d:8a:c1:97:cd:c5:28:24:d1:
         56:55:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:36:41 2025 by rpki-client