Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File:                     ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier:          J8rsskXbsjTBobKAbWmZpgSalZ6y4gwEDoYGCsBGty4=
Subject key identifier:   F8:DE:E6:C0:4A:E4:C4:8C:5B:7E:19:D9:1C:59:94:F9:BD:1F:1A:7D
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer:       /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial:       0197B70ECAE5AD89AA04654F73A45DDF7CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number:          06F9
Signing time:             Sat 28 Jun 2025 15:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:29 +0000
Files and hashes:         1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=)
                          2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: TQf/UIqE52WCnsN18jRGoDsDPkFPtA3cFHsbJmGZbV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ca:e5:ad:89:aa:04:65:4f:73:a4:5d:df:7c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
        Validity
            Not Before: Jun 28 15:01:29 2025 GMT
            Not After : Jun 29 15:01:29 2025 GMT
        Subject: CN=f8dee6c04ae4c48c5b7e19d91c5994f9bd1f1a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:e1:a4:94:5a:4b:03:b7:80:94:d1:bf:f7:
                    43:53:0c:15:5d:8f:b0:9e:0c:d7:c1:1a:9c:54:bd:
                    18:ce:77:f6:83:ac:49:10:f1:51:e9:a9:67:d4:43:
                    32:6e:74:f9:b1:ea:97:9e:d0:4d:7a:72:20:3a:5e:
                    0b:ae:67:2a:7d:df:a9:59:1f:bb:fd:62:48:6e:07:
                    7f:02:f0:7c:af:7d:3a:c9:d7:a9:bc:ac:75:79:4a:
                    17:80:28:2c:1f:a6:24:cb:72:de:c1:11:bb:fe:c5:
                    00:da:2f:2a:37:3a:0a:05:f3:2d:71:8a:a5:a7:c6:
                    a7:f8:5d:fa:91:d5:e5:37:be:40:09:6f:bf:12:74:
                    05:28:e0:c7:e4:9c:14:22:c4:d9:c4:7b:99:02:b3:
                    b7:18:28:18:f4:61:99:83:39:4d:19:ec:aa:1e:b8:
                    76:d2:86:58:60:52:5a:2a:42:b7:a7:90:ec:36:a9:
                    d4:6c:05:70:92:d0:23:d7:94:62:b4:2d:7b:e0:05:
                    c4:13:4f:e1:0e:84:2d:4b:40:76:d6:03:7d:66:e1:
                    bc:f7:bc:cb:63:cb:f4:d7:b7:6e:a3:79:db:a2:f8:
                    c1:d0:86:0e:75:ae:98:88:1e:70:dd:17:8f:c5:d4:
                    c9:21:16:c6:aa:d5:68:64:17:79:af:41:1f:57:28:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DE:E6:C0:4A:E4:C4:8C:5B:7E:19:D9:1C:59:94:F9:BD:1F:1A:7D
            X509v3 Authority Key Identifier:
                keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c2:8c:b8:67:4f:9b:b7:dc:59:8f:34:1c:ca:88:d7:c1:bc:
         e8:95:f4:77:bc:89:74:72:23:cc:ad:86:9f:f7:2a:56:4b:3f:
         dd:7c:28:8a:3f:48:91:ba:85:60:aa:a3:cc:ce:35:08:e8:f4:
         82:5c:88:db:0f:0b:1e:ea:9b:5b:2f:82:a5:cb:5d:59:57:e7:
         7d:90:aa:78:ab:89:44:18:42:3a:b4:0b:a6:56:3a:9a:c0:46:
         b0:eb:ac:df:55:91:ed:2a:3a:87:62:c3:1c:15:77:29:a8:c6:
         c2:68:39:b3:3f:1a:b8:0c:b0:a7:9a:9f:a0:80:5d:56:94:d1:
         28:3d:c9:53:07:18:df:dc:51:db:40:81:16:38:d7:9c:8f:46:
         b6:71:33:f6:6f:12:67:b8:33:b7:1a:ce:9d:8b:97:c2:4e:0c:
         88:3d:41:d8:32:10:97:6e:4b:37:18:6d:dd:39:dc:94:b1:5e:
         2a:a5:42:2e:35:7a:47:2b:4a:93:d3:4d:1d:16:86:b0:49:43:
         62:33:2f:a4:d5:96:63:fc:18:94:d9:52:f9:03:9c:09:f3:c4:
         b6:06:49:94:f1:07:bd:8a:2d:fd:47:b4:a2:48:71:06:c4:a3:
         70:1b:03:99:3b:dc:b7:ee:21:2c:fa:b9:2e:83:ad:97:ae:cd:
         d2:1f:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:06 2025 by rpki-client