Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File:                     8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier:          /dKJymV+ABb+jg1aPvzs2Y3qnxj3ChFa6+6cxHxvQ40=
Subject key identifier:   A9:37:72:69:C1:93:C1:F5:13:7E:31:16:13:D4:48:79:F7:6E:2E:0D
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer:       /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial:       0197B7EA2FF0398B5C104584BAA914997799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number:          07B5
Signing time:             Sat 28 Jun 2025 19:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:07 +0000
Files and hashes:         1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: DazkaPSUUkmcQrQGQCkEIA/D/fFsui+9g4G/CilHVVI=)
                          2: jB8O0EexbXRJ48aM1Kli0Ktl1vI.roa (hash: IcThWozF746RiVAe4jDaPPGv0zWnJg0lyhHJVcObykM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:2f:f0:39:8b:5c:10:45:84:ba:a9:14:99:77:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
        Validity
            Not Before: Jun 28 19:01:07 2025 GMT
            Not After : Jun 29 19:01:07 2025 GMT
        Subject: CN=a9377269c193c1f5137e311613d44879f76e2e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:fa:9d:5e:19:19:5e:84:50:86:9f:2c:7b:
                    80:b4:7a:46:17:61:86:24:41:a5:cb:74:02:4d:26:
                    28:b2:83:93:9f:7c:ab:12:06:49:8e:ea:0a:89:bc:
                    47:4f:ce:7a:85:f4:63:dc:a1:d9:24:d5:cb:d0:b5:
                    b4:1e:51:e3:9d:09:d2:71:5a:43:83:c5:e3:80:96:
                    7b:72:73:79:c5:eb:6b:7e:35:8e:a3:9e:75:94:d9:
                    15:d8:ef:6c:c5:9f:0d:9a:1a:7e:a9:d8:57:e3:c0:
                    b1:ca:89:3d:37:50:db:fa:03:88:4d:87:b7:3b:3f:
                    eb:d3:70:a9:e1:a1:34:50:de:a6:3c:15:48:e9:06:
                    d2:29:a7:e9:38:bf:4f:c0:e2:fe:5a:da:ae:8f:a2:
                    08:1e:69:8e:e8:94:21:00:41:7c:d8:8f:fa:36:f6:
                    90:42:68:94:1e:0e:d3:38:17:aa:f1:e3:b3:c6:e4:
                    fe:b6:99:06:44:71:8b:b1:a6:88:d8:72:04:84:57:
                    13:ae:e7:b8:14:5b:4d:71:f8:b1:1c:64:e2:e4:7e:
                    1f:b6:27:3a:6b:39:f0:bd:1c:9e:ed:00:7d:63:ba:
                    b4:dd:d8:1f:6f:d1:ec:0e:93:b6:a5:6c:6d:9f:6c:
                    3b:58:ca:49:da:f4:af:db:7c:38:1b:8b:b2:29:60:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:37:72:69:C1:93:C1:F5:13:7E:31:16:13:D4:48:79:F7:6E:2E:0D
            X509v3 Authority Key Identifier:
                keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:62:d4:57:9c:88:98:93:25:97:00:bb:e1:07:8a:49:9f:8e:
         06:fa:d1:a2:a1:34:bc:f7:52:b0:18:49:4e:d0:24:c1:23:bd:
         ce:65:a0:e9:6e:a4:74:39:6a:f0:4e:0c:67:59:e4:09:e0:8b:
         e2:e0:25:58:39:d5:44:04:29:ee:7a:fd:ac:71:f6:31:c3:0d:
         f8:1e:9f:60:66:8c:65:e7:fc:0b:68:35:56:82:86:e1:ff:90:
         01:0f:2f:d3:3d:cc:1a:e8:f5:a2:7a:ed:2d:22:c2:74:00:ac:
         bc:70:46:6c:73:2c:e3:ae:4b:48:27:33:47:54:bb:c1:b8:00:
         8a:e1:93:f3:c3:65:69:3d:0a:0f:30:33:df:d3:b8:38:92:24:
         2c:f8:3c:ba:94:8d:5c:86:d6:a7:49:29:9c:6d:f1:22:34:93:
         ad:07:b2:4e:18:52:79:c2:81:9a:66:7d:d8:82:7c:83:ec:f6:
         ba:72:8d:7b:88:48:a4:24:8a:ac:af:a6:df:a5:c6:be:6f:ed:
         38:5d:85:b7:9a:62:06:b6:c3:31:00:14:da:1a:6f:64:69:51:
         ea:e2:d1:a5:99:af:4f:9a:7c:55:62:bd:b0:5a:d8:6b:19:dd:
         33:9a:0f:b4:62:c8:ef:1c:6a:b1:8c:43:0f:99:9e:b5:64:5a:
         9f:ca:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:21 2025 by rpki-client