Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          wzQD9pj6bsuZBVJGLV0lfOU+7ui4q4sxVWFHGhquZ9M=
Subject key identifier:   3A:BB:7C:48:F7:E5:82:5C:9E:88:4F:3B:F3:14:E5:34:03:A2:5F:42
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       0197CF168D172F2628B4E8A0C0446E59CCE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          0D11
Signing time:             Thu 03 Jul 2025 07:00:50 +0000
Manifest this update:     Thu 03 Jul 2025 07:00:50 +0000
Manifest next update:     Fri 04 Jul 2025 07:00:50 +0000
Files and hashes:         1: 1Di0Xz_MpkFSCrXwieDlABcYUOY.roa (hash: e9+8w6PzwdqZ5DMc28fcl3/6JCrUHirDY/ShA9oFLww=)
                          2: Fb4Aih2t-3x0svMSkoJF-OT975k.roa (hash: 4CpcD3G4jnvkJ9iB2UM4J3ZMTh++G55QBNDvUCamA1Y=)
                          3: NXwDVZABd3p4a0yMyLVaEUu993w.roa (hash: lhUXJxfjstspXt3/27XnZ9HzN1ZpRrwcEX2KjNAybVU=)
                          4: _zmyvqhTt2oFbDnddAPtCQEEyok.roa (hash: DAvzMAds1rhf279ET0ww79hQJtAHmid5htmCA8lZZdI=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: ZLltU0ulxQTi/Na5HqwUP1MVI1T+J6rSCmxovYBkEow=)
                          6: m4nA49Lv7EMjkCcxgMafzldImD4.roa (hash: evH9NZtYuDtPls9Lqu7Vupfo95DdUFuCaTKXVG/rgrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cf:16:8d:17:2f:26:28:b4:e8:a0:c0:44:6e:59:cc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Jul  3 07:00:50 2025 GMT
            Not After : Jul  4 07:00:50 2025 GMT
        Subject: CN=3abb7c48f7e5825c9e884f3bf314e53403a25f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:f2:9d:96:96:95:08:9d:34:b9:72:ec:68:
                    02:7b:53:b9:91:00:bb:ae:6c:39:66:09:c8:80:ca:
                    c5:94:f5:70:c5:53:84:d4:e1:34:33:e4:82:fc:36:
                    01:34:cd:a2:86:7a:11:49:bc:7b:7c:a0:fb:3f:84:
                    e0:f3:de:d3:b9:f9:6c:ba:22:f2:4a:cc:6a:4f:43:
                    56:f9:a3:1e:3a:e1:e0:41:69:f1:7d:5f:f5:eb:a2:
                    42:56:3e:86:3c:6a:de:44:d5:2a:bc:38:9f:01:4a:
                    e0:3d:93:15:b3:8a:cd:16:eb:bd:7b:37:44:5d:4a:
                    3d:7c:1a:7f:06:ae:6a:cb:5f:d9:5c:75:cc:2e:8b:
                    87:b7:ad:a6:4f:9d:5a:e0:ab:08:1b:11:24:9e:fd:
                    f2:a6:23:aa:9a:6a:46:20:77:de:39:60:13:61:a1:
                    2b:7d:c6:6d:2e:62:04:c8:ac:c2:69:0b:16:37:d2:
                    0f:46:71:48:3b:c2:12:cd:34:35:cb:28:3f:fd:e6:
                    b1:ec:36:23:4c:76:fc:a7:f8:de:f4:58:23:f1:53:
                    c6:87:60:c7:26:ce:71:7e:c6:77:dd:99:cd:2c:04:
                    ab:94:57:12:ac:c5:00:e8:61:4d:1d:92:b7:29:3f:
                    4d:cf:cf:c6:9b:bb:7f:ad:8e:bd:65:ac:cd:39:52:
                    be:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BB:7C:48:F7:E5:82:5C:9E:88:4F:3B:F3:14:E5:34:03:A2:5F:42
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7b:b5:d9:ee:3f:a7:9e:96:c2:18:ce:49:49:b4:a7:5b:89:
         43:8b:01:7a:42:b9:47:73:35:86:6a:98:3f:c9:6b:c2:59:3e:
         f5:90:bb:78:a7:06:10:69:91:80:25:04:ff:8b:3c:2e:e3:62:
         45:26:b4:52:08:84:9b:f5:db:dd:7f:61:91:31:e3:32:3d:1e:
         5b:66:f7:e1:7f:b4:95:33:ae:61:a7:20:c4:bb:ef:05:4f:ef:
         f6:0d:1e:25:d4:33:9a:fe:40:6c:d1:6b:2d:e8:c5:4d:e6:70:
         24:e5:a1:08:f3:f3:4f:33:c4:1f:b6:75:2c:88:be:96:12:5d:
         e9:15:b3:af:d9:88:96:88:9c:05:77:07:8a:cf:3f:ec:e2:0a:
         a2:2a:bd:b2:ba:8e:cc:d5:c1:4a:22:fb:d2:07:90:fb:de:7a:
         e9:0b:bf:d8:33:50:10:00:fc:e4:ff:6f:c1:4b:b2:c2:09:6c:
         a7:bb:4b:b1:68:62:b5:7f:fc:07:c9:19:27:28:24:7b:85:43:
         90:22:d7:55:ac:83:9d:17:04:78:f2:5c:7a:fa:39:5d:f5:3a:
         55:bd:71:e0:69:f1:76:c2:9b:bb:2d:b6:65:9a:42:22:d0:8a:
         08:b6:47:bf:0b:02:39:fc:8b:10:1e:e7:f7:7b:f9:5e:61:05:
         c8:d7:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:09:45 2025 by rpki-client