Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File:                     8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier:          APWOm+1JuR/e1vCw3Bbucwfkp0hS6euuFW7c9Tu1sfo=
Subject key identifier:   2F:05:70:5F:15:D7:41:7F:5A:F1:B4:3E:65:8D:44:16:FD:21:A7:8E
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer:       /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial:       01976DE2A9A8410606FCE6AB983E4FF6D705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number:          1203
Signing time:             Sat 14 Jun 2025 10:01:00 +0000
Manifest this update:     Sat 14 Jun 2025 10:01:00 +0000
Manifest next update:     Sun 15 Jun 2025 10:01:00 +0000
Files and hashes:         1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: C3eiW5Ov/AnflV2dFk7Ad0+C+zzed+zsOxfs/KgjJKc=)
                          2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:e2:a9:a8:41:06:06:fc:e6:ab:98:3e:4f:f6:d7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
        Validity
            Not Before: Jun 14 10:01:00 2025 GMT
            Not After : Jun 15 10:01:00 2025 GMT
        Subject: CN=2f05705f15d7417f5af1b43e658d4416fd21a78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:f5:18:62:bd:8f:77:ca:bf:e0:55:91:a8:
                    0e:ec:85:0b:94:5e:e0:dd:29:70:8e:34:e5:c8:96:
                    16:b3:e5:d0:48:37:3d:c1:fd:71:fb:b6:59:e3:77:
                    05:05:0a:df:ef:c5:76:9b:67:65:c6:cb:a6:fd:7f:
                    5b:d2:52:a0:07:a2:5d:03:71:fe:6f:61:b3:f8:14:
                    d5:d4:c2:fc:42:15:cb:9e:d9:6e:ae:14:62:b8:a4:
                    8d:56:57:34:ed:13:ae:1c:7c:6c:64:c2:d4:40:16:
                    68:e9:51:73:7f:49:e6:9a:c7:75:c0:3f:ce:ea:6c:
                    38:08:02:ad:4f:0b:e1:f2:68:d2:fa:12:31:43:af:
                    b6:e8:bc:52:9b:ec:15:50:72:a2:82:71:86:7e:2a:
                    ab:20:82:41:25:d3:15:19:39:60:36:a3:86:3d:c5:
                    73:56:4a:59:c6:e9:70:74:8a:9a:ec:f3:af:78:74:
                    c7:5b:61:c7:6d:00:a0:11:56:ac:3e:0e:de:7a:d4:
                    66:7f:e5:45:e0:d5:f5:f3:fa:0b:54:76:ee:0e:e7:
                    71:9d:92:f9:1d:ce:76:6d:3d:26:bf:43:bd:ea:4a:
                    a1:b1:55:0d:90:c2:9c:60:04:aa:f0:33:7c:d8:db:
                    f5:66:0b:ac:d4:4e:cf:1e:b1:96:e1:a6:11:c0:8a:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:05:70:5F:15:D7:41:7F:5A:F1:B4:3E:65:8D:44:16:FD:21:A7:8E
            X509v3 Authority Key Identifier:
                keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:94:f1:48:a2:ed:3d:2c:5c:f8:f3:9f:fa:07:07:1d:ff:
         fa:d5:97:de:81:71:22:7f:ab:27:16:87:16:02:e6:02:09:29:
         c8:0a:1f:61:21:a7:a3:2b:4a:07:8c:03:c7:b8:fd:7c:f0:6e:
         5b:7e:3d:a0:c9:fa:6a:f6:29:53:70:7b:55:ad:24:96:31:1c:
         61:8f:ca:37:39:db:75:03:e0:97:3a:ec:e7:07:5d:8c:4c:6c:
         5c:8e:1d:fb:c1:22:71:22:c0:0d:50:f3:a8:a0:e0:36:07:fb:
         0f:a5:ab:62:94:b3:be:52:f7:04:d8:11:97:07:47:a9:bf:6a:
         45:4a:35:2a:86:43:fa:60:aa:47:07:bb:86:ba:29:f1:07:a5:
         fe:41:1a:25:f8:f9:6f:c4:40:8b:fd:51:d5:a4:c7:e7:b9:be:
         4a:cb:68:fa:0e:c3:66:88:fb:de:7d:05:8c:06:e4:75:f9:09:
         bd:bb:c3:a4:29:81:33:5c:d9:a7:e9:60:11:68:01:65:d0:98:
         7f:a9:b9:dc:76:9a:02:3c:6f:d0:20:e8:72:86:01:ed:3e:35:
         4d:ca:5a:4c:91:ed:d5:b9:46:02:2f:a1:f3:a3:87:78:15:28:
         a8:c2:c4:5b:98:15:20:65:18:8f:76:f8:bb:11:9d:62:0c:8c:
         94:88:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:17:56 2025 by rpki-client