Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File:                     t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier:          pCSBHE8ZL3lqHLxlxZ6RKMMsRGxe9Kt7465dbZb0KC8=
Subject key identifier:   D4:9D:50:A0:A5:2C:C6:1A:2F:1F:C8:2E:EC:2B:91:B6:FF:51:0C:EB
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer:       /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial:       0197B70EA05CC2865327814973021144A702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number:          05E8
Signing time:             Sat 28 Jun 2025 15:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:18 +0000
Files and hashes:         1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=)
                          2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: gltL0MA5+wvhxWsS5gNmYlI2YDzl715Ij3PsNwKS5X4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:a0:5c:c2:86:53:27:81:49:73:02:11:44:a7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
        Validity
            Not Before: Jun 28 15:01:18 2025 GMT
            Not After : Jun 29 15:01:18 2025 GMT
        Subject: CN=d49d50a0a52cc61a2f1fc82eec2b91b6ff510ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c3:0a:36:fc:0a:c0:3e:fb:21:f8:f3:d8:4c:
                    39:21:ad:40:4f:c0:0f:4d:cf:47:3b:19:4e:c2:34:
                    5a:a0:4a:71:ca:cd:cc:1b:80:fc:c1:4a:3a:60:e4:
                    63:85:60:fe:6b:64:53:bd:83:e5:c9:77:94:97:05:
                    b0:0e:e4:90:ab:e7:9d:3a:48:56:93:f1:a4:c7:d4:
                    29:03:3f:cb:b1:87:12:bc:30:f0:b8:06:37:51:1c:
                    c1:94:a4:93:47:68:f0:4b:fd:1d:a0:60:bd:e8:4d:
                    13:00:9f:5b:a3:b5:8a:39:7b:79:85:e0:4d:6e:34:
                    bd:7e:60:33:e6:85:70:c2:b9:ad:a7:4f:16:62:68:
                    c7:d1:be:e7:a1:7e:4b:05:5b:39:a1:da:52:74:ab:
                    7d:98:3b:b4:2b:93:c3:5e:be:04:e0:7b:9e:b1:63:
                    94:ac:b9:0e:b5:76:e4:48:8c:09:b6:1a:17:96:ea:
                    f4:27:81:c6:54:c9:00:61:75:de:2f:48:db:f8:fb:
                    92:d5:4c:58:86:e5:6e:01:08:7a:0c:5c:2a:c0:88:
                    86:bb:ee:5d:0a:1f:94:6e:59:15:b8:cc:e1:ca:6b:
                    c6:8a:24:36:c9:2c:60:c4:66:06:6f:50:16:cd:79:
                    0e:41:2e:2c:51:56:31:09:c9:d5:3d:74:26:29:19:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9D:50:A0:A5:2C:C6:1A:2F:1F:C8:2E:EC:2B:91:B6:FF:51:0C:EB
            X509v3 Authority Key Identifier:
                keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:05:15:20:05:80:5c:13:3d:d7:94:cb:6f:8a:91:40:3c:
         f4:3b:b8:88:4c:0e:27:a5:74:ba:21:0a:b7:3e:98:95:8e:3e:
         ea:ef:38:f6:ab:03:e4:83:cd:09:79:ab:78:b8:d6:c5:8d:28:
         59:61:5f:45:58:02:b6:ed:45:dc:40:4f:cc:c3:d3:27:a3:1b:
         18:e3:6b:d6:8b:35:1e:90:f6:85:3b:43:35:9e:56:6d:16:e6:
         cb:36:df:57:92:93:a3:49:51:04:c1:3a:83:5e:9d:ee:2b:fb:
         19:81:9f:f3:88:8a:48:5f:0f:92:91:5f:88:16:89:86:71:de:
         48:96:d1:15:6d:03:13:dc:a9:b7:39:8e:62:09:58:d0:a8:87:
         2b:f8:9a:2b:fb:84:3c:fe:c0:c1:20:2a:fc:84:14:0f:d3:70:
         a2:11:d1:43:2d:7d:e7:e2:04:62:6f:cc:ed:28:1f:c7:f3:47:
         15:be:47:bd:96:bc:5b:33:eb:26:79:11:35:c4:27:0d:2e:96:
         14:a6:21:b8:32:11:c8:fb:ab:d1:e9:d7:40:4e:e8:43:01:1a:
         a2:ce:c0:2d:f7:c2:e8:f5:99:a1:12:f0:36:a6:6c:bb:71:be:
         7e:e9:d8:da:fc:b7:b5:5b:ee:c4:9b:3f:0b:b1:8d:b0:c3:b7:
         42:3e:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:02 2025 by rpki-client