Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File:                     8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier:          pvcGo1nYMFE0dmH2lieAgWFVM5AFoM7exgGFwLLy+Ns=
Subject key identifier:   D0:C8:9F:41:A6:E1:5C:69:B4:93:02:1F:5B:2C:FA:79:32:2E:78:EA
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer:       /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial:       0197B8FCD7E311C30A63286C069DAE1C43E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 00:01:07 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:07 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:07 +0000
Files and hashes:         1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: xDIjS6tj5XqdgkU6QYPj4mWiSpGEH2rUhbXC6D6GIXA=)
                          2: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (hash: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fc:d7:e3:11:c3:0a:63:28:6c:06:9d:ae:1c:43:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
        Validity
            Not Before: Jun 29 00:01:07 2025 GMT
            Not After : Jun 30 00:01:07 2025 GMT
        Subject: CN=d0c89f41a6e15c69b493021f5b2cfa79322e78ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:33:2d:49:65:c3:5d:69:07:78:04:e8:3c:
                    90:eb:e0:11:76:d2:8a:9d:39:7c:72:ee:1c:4c:f0:
                    c1:57:ce:f2:87:b5:1e:8a:08:0f:a8:7f:88:3b:11:
                    b9:6d:66:65:62:bb:bd:f6:5e:fe:1a:bf:ac:ca:6d:
                    4a:d8:c2:cc:7a:13:12:21:31:b4:8a:dc:89:d6:91:
                    7e:99:ba:b6:f8:f9:5b:4a:2c:d9:e2:b2:a8:f4:fc:
                    81:12:4f:00:1e:0a:d7:20:41:0b:81:d0:ee:63:93:
                    13:13:84:09:05:5e:4b:ea:9d:5f:88:5f:14:66:a2:
                    5e:73:7c:1d:c3:47:89:15:75:3a:37:38:64:87:ff:
                    21:f3:75:8a:05:d2:82:63:5a:3a:82:84:47:2e:62:
                    15:54:f8:f5:39:14:d6:39:93:2a:76:f0:2f:56:5b:
                    61:51:7e:67:8e:85:57:4f:fe:b5:f9:47:fe:c6:36:
                    22:73:31:6f:13:57:6a:a8:0e:ed:3e:22:f2:55:bc:
                    40:63:1c:be:64:21:e9:19:23:71:d8:d3:6c:1c:f7:
                    d8:0e:9b:b5:27:b7:5a:d9:f5:8e:ab:01:41:bb:3d:
                    05:7c:f9:fc:5b:66:9e:d0:4c:87:e5:f4:cb:3c:2e:
                    cd:0f:63:20:cb:ed:a9:a0:a0:47:26:5d:59:47:bf:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C8:9F:41:A6:E1:5C:69:B4:93:02:1F:5B:2C:FA:79:32:2E:78:EA
            X509v3 Authority Key Identifier:
                keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e5:5e:62:ee:7f:5e:70:72:87:b8:9b:7a:cb:9e:84:63:6d:
         b2:b3:91:4e:cb:b5:87:87:f5:f3:dd:21:92:2f:68:52:fb:0e:
         07:85:c0:8b:bc:c6:a7:bb:f0:d4:b4:b2:32:ab:f9:f8:22:2f:
         a0:c3:41:22:98:f4:74:38:b6:59:e4:dd:0a:11:c7:55:79:3f:
         80:2b:c5:19:95:1a:4e:2d:26:e8:e8:6f:61:bb:31:68:16:d3:
         f5:85:cd:fd:42:ca:4a:5a:3e:6c:5c:0e:81:e2:08:b7:96:53:
         e6:59:e0:af:77:e3:f6:a6:72:a5:04:0a:24:db:5d:dd:52:bb:
         dc:fd:4c:f1:6b:b5:5d:56:ac:45:3e:e4:30:5b:52:0e:57:19:
         a8:6d:2f:b4:c8:b5:35:f1:08:a4:94:b1:19:53:5c:42:81:fe:
         97:f7:1c:68:46:f9:7c:88:8b:60:f4:4a:dd:fd:74:7a:9d:99:
         bf:4e:0f:22:b9:e1:8d:7e:a2:33:5b:f1:c1:f6:d3:b3:4c:7c:
         f1:4d:11:cc:16:17:20:a7:74:23:27:64:74:83:e4:49:ed:0a:
         96:84:d8:94:8e:2b:35:82:8f:aa:d4:4e:bf:d6:a3:2d:bf:01:
         37:8c:e2:ca:ee:82:a6:1c:40:e5:c4:a9:fe:94:a1:38:88:d5:
         79:24:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:30 2025 by rpki-client