Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File:                     8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier:          NPboVZZ44BhsEZGdLGQvLzBdX3xPzvfZTkitefQqjW0=
Subject key identifier:   02:EB:90:9F:88:C1:47:E2:F3:85:A2:CB:D3:11:19:6F:4C:2A:82:C0
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       01976CCFEA887A0D265DFA0547FF84749051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number:          0B94
Signing time:             Sat 14 Jun 2025 05:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:54 +0000
Files and hashes:         1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: jBekX0TM2w58VIhZteWNImPIiOE2dotvycKzuVLrKr4=)
                          2: rMoZ83VQ7iYFtJcAmlmBDs25c0s.roa (hash: 5UVFXIRMFFdYenUl6z+JEcUUQ5VhSSfJAeVRB/Ej+fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:ea:88:7a:0d:26:5d:fa:05:47:ff:84:74:90:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: Jun 14 05:00:54 2025 GMT
            Not After : Jun 15 05:00:54 2025 GMT
        Subject: CN=02eb909f88c147e2f385a2cbd311196f4c2a82c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:b7:d9:30:25:f5:c8:1b:c2:a7:3e:18:bf:
                    ae:7c:55:f7:32:7d:60:dd:20:55:6b:ef:8e:f3:6c:
                    0d:31:2b:aa:c0:f6:01:53:5a:f2:d3:82:58:a1:36:
                    7c:3d:79:d0:25:14:55:6d:a6:94:2e:e5:6e:a7:83:
                    9e:ca:d4:2a:46:63:69:29:de:d2:bd:24:cd:7e:8b:
                    ea:0c:2f:3d:3b:10:bd:5f:ac:83:bb:e4:36:97:ee:
                    37:75:72:40:1a:24:79:86:9c:0c:aa:bb:e9:cc:8f:
                    06:38:d8:cd:46:59:4a:61:ce:a6:13:97:ea:4a:80:
                    4a:c8:26:64:bc:05:ec:11:60:66:40:76:d0:43:7f:
                    98:28:f1:99:63:11:b8:0c:10:c9:7d:ee:e3:40:f1:
                    ab:bd:43:ad:77:01:41:72:6b:24:aa:41:fe:69:f7:
                    32:bf:7e:3d:00:e4:f0:37:33:f8:34:f4:08:9f:e3:
                    d4:d7:42:11:1f:a9:8d:67:56:60:6a:e3:fc:11:6b:
                    ff:f7:52:52:08:4d:91:af:ce:d5:f8:8e:7b:eb:51:
                    0a:ba:84:13:75:2d:6f:ce:b9:a1:1f:74:f2:91:68:
                    f1:30:2d:e9:b5:3c:24:20:0b:99:3c:f7:cf:50:28:
                    00:73:e1:05:8b:7b:d9:c3:a4:09:1c:89:55:d2:8c:
                    96:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EB:90:9F:88:C1:47:E2:F3:85:A2:CB:D3:11:19:6F:4C:2A:82:C0
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f8:f8:3a:c8:a8:aa:7a:27:cc:91:f4:0b:4f:8d:99:1b:a4:
         ef:9f:15:04:1b:77:7d:1a:51:a2:45:25:67:a7:cd:2c:47:d9:
         2d:78:ce:ae:05:c3:79:85:ee:fc:df:9d:ce:e4:62:7b:22:ce:
         29:5e:5f:cd:1f:8c:99:59:1f:a6:f9:67:a5:6c:24:93:83:52:
         6b:ab:f8:d8:61:9b:ac:6c:47:40:0b:1f:2c:f6:06:fb:4b:22:
         79:69:4b:72:ac:16:86:1e:13:08:e5:42:2e:9b:96:26:51:1a:
         ad:0a:67:e6:a4:11:73:28:2f:26:f9:cf:62:cd:bf:fa:ec:2a:
         85:6c:fb:ca:4a:e7:a1:4a:f0:11:be:9c:01:cc:b6:d3:f9:f2:
         47:10:ce:40:fc:4b:6d:bc:23:06:a7:3a:d4:99:55:2f:be:82:
         9c:ef:3d:a2:8b:26:6b:8d:e6:fb:9d:5e:6f:57:46:0d:4d:c1:
         b5:cb:16:2f:0e:3d:ef:2b:f7:07:ba:f5:f3:6e:0e:72:55:2d:
         c9:46:bb:f1:b9:90:46:31:2e:32:d8:06:aa:d0:cd:a0:99:4a:
         17:37:0e:55:b5:26:81:cf:6f:43:54:a2:f4:3c:e2:36:51:b5:
         00:dd:dd:1a:ae:65:96:db:66:c9:ba:ac:53:c6:ac:44:15:61:
         65:26:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:21:54 2025 by rpki-client