Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File:                     0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier:          3r6QQ3w18MybOBnYJmD9hyQcnS4Ybz5JOoZELFGqLTc=
Subject key identifier:   41:0D:74:57:69:99:E0:2F:AA:E8:45:31:61:4B:30:59:F6:1C:25:BB
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer:       /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial:       0197B89087EED81E3F5938337D9790A1E533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number:          0E38
Signing time:             Sat 28 Jun 2025 22:02:48 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:48 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:48 +0000
Files and hashes:         1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: ZkhJAB3rI5ZEY0bl3ApBUHM0V6QIwqoHbyvVNjC/j7E=)
                          2: tWrNNpvQLnIYXShcXDmxPXzlROA.roa (hash: rl7K0aTuna5/yne12oTJUAQ6OhB1j3YlRj4Y9PjqK84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:87:ee:d8:1e:3f:59:38:33:7d:97:90:a1:e5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
        Validity
            Not Before: Jun 28 22:02:48 2025 GMT
            Not After : Jun 29 22:02:48 2025 GMT
        Subject: CN=410d74576999e02faae84531614b3059f61c25bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:59:1d:5d:19:c3:a4:56:a0:29:86:77:63:06:
                    c4:a1:13:ba:45:f4:c6:a7:85:8e:15:c6:49:e6:12:
                    f7:94:d5:35:36:cf:4a:93:1f:92:bf:24:07:80:22:
                    cc:a5:3d:c7:47:9f:36:76:93:d9:35:37:7f:f8:d3:
                    d7:54:80:bc:62:66:05:01:bb:d5:a1:ed:cf:35:f2:
                    42:55:1a:37:6a:a5:04:9f:86:bf:64:b5:e9:b3:49:
                    d4:8b:15:0c:70:95:40:e3:fb:cd:f3:d9:90:2a:d3:
                    ba:26:fa:95:6a:5d:d6:bd:98:7a:6d:11:06:34:fe:
                    6f:98:df:44:32:7e:28:c6:7a:41:ee:d8:d4:e7:38:
                    9d:2c:5f:9f:f9:f8:96:6b:90:c7:a4:8d:85:f0:d9:
                    28:9d:70:71:8f:aa:80:77:31:38:57:8f:74:5d:0b:
                    07:6f:41:a7:36:c2:0c:26:15:c2:54:01:65:13:21:
                    70:27:9d:37:19:6d:3b:6d:d9:30:b9:bc:8f:a5:37:
                    ce:73:f8:1f:c6:71:10:dc:60:b9:c7:25:40:6d:d5:
                    1d:ae:c3:bc:83:e8:ad:3b:da:bc:5c:b2:8b:c4:fe:
                    3c:36:63:5e:19:97:dc:96:ef:5a:d6:ce:80:fc:56:
                    d3:05:c9:5a:a2:43:d1:18:ec:ee:c6:eb:65:1a:79:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0D:74:57:69:99:E0:2F:AA:E8:45:31:61:4B:30:59:F6:1C:25:BB
            X509v3 Authority Key Identifier:
                keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:14:1d:76:f2:f6:47:4e:33:d5:12:31:9d:ef:d9:56:92:22:
         a5:03:90:d8:63:55:85:d7:cc:50:eb:18:9a:29:b6:8a:a0:39:
         45:5e:ce:e9:88:d9:7f:19:29:8b:9f:ce:d6:58:aa:1f:de:d2:
         6c:5d:25:5b:c8:4e:1f:b2:92:17:80:75:9c:e3:a1:f0:47:74:
         a7:c0:c9:b7:ca:9d:11:4e:9a:b2:20:a2:1e:b4:a4:9e:c8:42:
         c0:cf:60:14:91:08:92:16:62:34:a2:8c:61:0b:10:3a:5e:7b:
         d8:40:1d:35:08:98:f6:76:15:fb:04:50:ef:a7:ce:bb:31:df:
         15:62:1c:44:3b:fb:92:f5:1f:34:45:10:52:04:97:50:da:02:
         8d:7c:f0:06:b5:a2:cb:34:61:13:2e:6f:04:59:23:c3:1d:36:
         c6:3f:5d:88:e9:65:2c:f8:f6:fe:35:bf:7e:b1:38:a1:11:6c:
         67:79:6f:68:be:c1:15:ba:39:7d:d9:4d:ee:89:8c:ed:60:2c:
         b7:ed:02:81:3b:8c:8a:ff:ef:10:30:94:81:6d:6f:12:c7:60:
         cc:38:bd:75:ec:ad:53:3d:71:5c:b9:5f:c2:0b:9f:91:fe:22:
         41:fe:ec:b7:46:34:ef:d0:b1:4c:e3:e4:da:f4:2a:f1:31:0a:
         99:03:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:17 2025 by rpki-client