Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File:                     mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier:          9kRaf8FvKs+bNlxgUO0IgrP4ewR5k1wlZV6tqLwfODc=
Subject key identifier:   99:04:6F:8E:13:6B:3C:B2:A9:BA:B2:99:95:4B:1C:5E:80:1C:F6:7B
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer:       /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial:       019770076460443265D918CC00AB525E2F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number:          13B8
Signing time:             Sat 14 Jun 2025 20:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:21 +0000
Files and hashes:         1: 0aA52a05uApLKY3CXNmnXhwKrks.roa (hash: MeSVjVqbWBXWuoo0WV7N+n6x9g24v2DXI6O3Ubp3bGI=)
                          2: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: PYmjmrBrlx9Xqr/AkbtY4V/FTbwuNWhNeO/bZiHSvew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:64:60:44:32:65:d9:18:cc:00:ab:52:5e:2f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
        Validity
            Not Before: Jun 14 20:00:21 2025 GMT
            Not After : Jun 15 20:00:21 2025 GMT
        Subject: CN=99046f8e136b3cb2a9bab299954b1c5e801cf67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:4f:1d:5f:4d:73:e8:08:f0:43:a3:ff:eb:
                    7e:88:16:bb:cf:36:30:f4:9c:13:87:d3:6d:15:6a:
                    60:95:f0:ca:ef:4a:b1:60:18:a0:62:8a:c5:4f:a9:
                    3d:29:96:19:4e:2c:67:c9:de:1d:64:52:7e:17:dc:
                    f3:24:4e:fb:3e:43:cc:e6:99:8b:e3:01:5c:c3:c0:
                    67:cc:e2:e2:2a:1e:79:f5:f5:75:cb:ea:6a:3c:82:
                    d9:0d:12:f2:8e:f0:cf:86:42:64:4f:0f:0f:02:dd:
                    4e:f4:e0:92:bd:50:32:03:59:a9:ac:60:2f:d2:f5:
                    80:de:92:90:49:9d:25:80:3d:05:d2:67:8b:17:70:
                    00:3b:3c:27:1f:0f:c1:73:1c:cc:c2:2a:64:e2:f2:
                    46:5d:f4:26:84:53:ba:87:94:15:e8:5f:80:fc:c0:
                    aa:41:b8:7a:5e:3c:ed:78:a8:65:66:da:cb:65:be:
                    6e:d9:c8:3d:ad:91:17:ce:03:f4:14:68:7c:9d:4c:
                    c9:77:85:98:d0:5f:71:4a:bf:85:ee:7e:b0:29:bc:
                    f9:6a:2f:ed:8f:ef:00:20:74:23:0e:f4:84:ee:a8:
                    f0:5a:cf:b1:26:d7:a5:77:4b:21:2e:8a:1d:b2:1d:
                    0b:9c:53:89:66:75:93:e4:ea:e8:0c:7b:4e:0b:9d:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:04:6F:8E:13:6B:3C:B2:A9:BA:B2:99:95:4B:1C:5E:80:1C:F6:7B
            X509v3 Authority Key Identifier:
                keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:28:9b:fb:04:4d:43:06:95:68:e1:f3:28:88:c2:e2:b7:3b:
         0e:22:19:e7:f7:3a:4f:cc:40:39:11:19:a0:42:90:e2:fa:bf:
         4a:06:5a:6a:50:4f:17:9a:bb:26:ca:73:f5:c5:49:73:fb:14:
         83:99:0f:79:00:aa:5d:6f:d8:7b:a0:fb:04:d8:90:4b:68:c8:
         21:f1:af:9a:54:f2:5b:24:ca:db:45:d3:1c:bd:da:f6:34:e6:
         ed:df:c1:0e:c8:61:b2:86:2e:24:d4:45:62:e0:0f:89:4d:4c:
         fc:ee:78:fd:5e:23:34:b6:73:5f:66:1d:7d:ef:04:f0:09:42:
         d2:fc:41:dd:b4:f2:c5:a2:84:9a:8c:07:2e:01:07:b4:b5:11:
         03:9c:fc:61:56:7c:e4:9a:c2:c6:e4:2f:ed:64:c7:90:b5:1b:
         d8:e4:51:f5:68:00:36:40:70:48:f3:84:2a:91:d6:ff:39:94:
         0f:52:87:89:1f:3b:05:15:9d:22:bd:3b:8b:d5:a2:07:f1:4d:
         9c:f0:15:9d:97:92:af:78:4c:7c:da:53:59:7b:14:91:20:17:
         d0:51:15:51:23:30:e8:06:99:71:f9:b5:4b:dd:df:33:fc:d2:
         39:02:f4:6c:0b:76:a0:0a:4a:10:c9:e6:68:27:18:61:ca:ba:
         67:0e:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:21:10 2025 by rpki-client