Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          JmSwweVUyRabMR9l2iDEbfpsikAM/1Qj7+KCDM5TvWI=
Subject key identifier:   A6:B8:A3:0C:19:BF:8D:75:BF:F4:3D:CF:4B:D8:91:1D:4E:AC:21:E8
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       0197B70F13319AB7ED2F127D946BD2942366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          10E8
Signing time:             Sat 28 Jun 2025 15:01:47 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:47 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:47 +0000
Files and hashes:         1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
                          2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: ZdRcUSqgNX/Nn8ysR/CawG80LjA2EIHhJxY2WdM+FKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:13:31:9a:b7:ed:2f:12:7d:94:6b:d2:94:23:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Jun 28 15:01:47 2025 GMT
            Not After : Jun 29 15:01:47 2025 GMT
        Subject: CN=a6b8a30c19bf8d75bff43dcf4bd8911d4eac21e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:22:53:52:9b:2a:46:8d:cf:49:f0:0d:f4:
                    47:0c:cc:d6:e1:de:ab:0b:7e:08:ff:02:58:e6:27:
                    d1:3c:60:b2:92:86:43:d9:4e:01:bf:7c:e3:1e:fb:
                    50:8c:11:41:36:33:95:8c:ca:35:af:4e:52:a3:cc:
                    ff:0d:e2:c1:f6:ba:5f:f1:a7:b3:55:81:c0:7c:9b:
                    3b:4c:cf:c7:bf:18:a0:7b:2f:25:1e:b0:11:12:ea:
                    44:a9:a8:1c:27:3a:16:3d:16:d8:7c:7e:33:6a:2a:
                    bf:9a:e5:4e:09:8e:59:db:03:c6:7c:47:9d:47:46:
                    7e:61:ec:10:9f:ef:9d:38:68:5a:a2:26:f0:60:12:
                    3e:fa:67:6a:60:66:19:fd:50:d3:5c:bd:07:f9:e1:
                    3c:ce:98:4f:32:32:30:69:7c:cc:5f:3b:65:79:b8:
                    6a:52:2c:07:03:ea:4f:6c:d2:73:11:7d:cf:c9:a3:
                    cc:45:9d:72:58:43:bb:e4:1a:5d:eb:04:4c:1d:33:
                    30:69:24:f2:c1:2f:9a:04:08:3f:2c:01:e3:4b:a8:
                    d6:77:39:71:ed:4c:23:91:c4:17:b0:05:7f:b6:0b:
                    00:fa:8d:c4:df:3d:4c:68:de:79:f7:f9:67:a9:a9:
                    aa:2c:c3:b4:0e:26:41:f7:be:12:45:d4:d8:b7:bb:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B8:A3:0C:19:BF:8D:75:BF:F4:3D:CF:4B:D8:91:1D:4E:AC:21:E8
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:db:06:4d:63:01:c0:c8:ed:a8:8c:39:d0:e0:ec:9b:a8:
         b7:c8:5f:81:67:72:f5:68:64:a6:ca:63:a5:3a:11:aa:f0:22:
         bb:ee:40:ab:de:e2:ce:fb:1a:19:30:52:55:c4:07:26:1b:66:
         2a:99:2f:07:6b:69:54:c2:50:3b:80:0f:0e:86:73:cf:5a:59:
         ac:1a:86:07:8a:0f:e3:6c:22:8a:f2:58:20:92:26:c9:3f:4e:
         17:a4:38:6b:41:19:85:fe:5d:5b:c8:03:d7:20:6e:32:94:3c:
         2f:8e:70:b2:7a:a4:58:fb:4a:d5:02:00:43:a1:7c:c8:de:c4:
         2e:55:6c:87:99:b2:d6:4d:7d:58:4e:f6:b5:ca:b5:ae:f6:43:
         89:15:f1:ec:69:2e:68:b2:f8:0e:89:ec:a9:30:30:f3:ee:bd:
         35:1f:49:e1:ef:cd:c7:0f:1a:31:40:25:62:eb:ac:a5:db:ef:
         74:06:90:bc:8d:8d:d4:7f:5e:a3:db:69:fa:f1:36:2a:e7:ba:
         62:a1:95:5f:07:5a:f4:47:11:38:3c:ce:71:66:b4:43:a1:60:
         83:c8:c6:24:f6:1c:48:bc:09:f8:5d:48:fc:ec:0b:e6:3b:36:
         b4:cf:7f:b9:5c:49:8c:16:0f:00:ac:c0:00:9b:4d:a4:c7:50:
         19:32:e8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:25 2025 by rpki-client