Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File:                     8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier:          UhhrBi1FjBFWQFBag/83JklbDD6G1h/6UxEn58H8lFU=
Subject key identifier:   3E:0C:63:00:26:FF:43:BE:15:30:5B:7C:BF:47:70:0F:7A:25:1A:32
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer:       /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial:       0197B70EB1C0E7C855A8F43608826FB60C00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number:          06A0
Signing time:             Sat 28 Jun 2025 15:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:22 +0000
Files and hashes:         1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: 8hosRAMy4thOqG0uK47Gp7mbjCt9qNP61YzCyWYyb1g=)
                          2: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
                          3: tFuBusypscfP0op8t0fbvhVLTp0.roa (hash: pms99WF44PQkWw+lLwCckChT1mv5Etpr0MeX5NnHJWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:b1:c0:e7:c8:55:a8:f4:36:08:82:6f:b6:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
        Validity
            Not Before: Jun 28 15:01:22 2025 GMT
            Not After : Jun 29 15:01:22 2025 GMT
        Subject: CN=3e0c630026ff43be15305b7cbf47700f7a251a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:0f:c9:30:6c:01:52:94:88:c5:a9:8e:cf:
                    0d:7f:63:0d:29:59:ad:39:b3:9c:9e:f5:66:fb:7e:
                    18:fd:6e:59:fb:af:7c:1b:c1:fc:81:d2:e2:36:c3:
                    32:f1:93:66:11:5c:77:f6:3d:c9:a6:83:6d:a0:0c:
                    7c:34:10:2a:05:7e:e9:35:5b:0b:78:d1:ec:70:fb:
                    97:96:82:a8:69:f5:0b:44:a9:6a:8f:e8:9d:fd:e2:
                    b7:23:0c:50:e4:30:03:43:75:d7:b6:9a:3c:e3:3a:
                    cc:75:ac:03:1d:b8:91:33:d8:62:02:1d:25:29:26:
                    e2:70:28:bd:04:d4:78:d4:07:1d:3a:24:ea:13:d6:
                    1c:8f:f2:ae:3d:96:47:a2:f3:db:b9:e7:31:10:23:
                    73:90:33:e1:cf:34:a5:9d:27:dc:f0:84:53:c3:9b:
                    e7:d4:b5:a2:76:82:ce:0b:37:d8:91:2a:1e:61:19:
                    c0:44:e9:4a:99:5c:74:7e:4b:19:b2:8d:86:ff:07:
                    52:27:4f:42:b0:09:55:57:a1:85:b8:04:5d:96:59:
                    18:be:81:50:8d:79:6c:b0:ff:a4:2b:24:64:da:1e:
                    b2:10:85:d7:4c:49:be:c0:ba:c7:30:db:4e:ac:71:
                    af:44:eb:ab:8a:5f:b0:f9:73:ca:a5:91:31:69:55:
                    98:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0C:63:00:26:FF:43:BE:15:30:5B:7C:BF:47:70:0F:7A:25:1A:32
            X509v3 Authority Key Identifier:
                keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:07:9b:21:26:61:61:7d:01:f6:4a:c9:05:5a:be:fe:94:99:
         27:75:e7:68:f6:34:c3:d3:e5:01:af:59:c4:a7:15:fb:20:a8:
         25:49:5e:1c:aa:d7:2c:10:49:5e:21:42:62:37:43:8f:4f:22:
         3d:d8:9b:55:98:77:09:d7:0e:8c:c3:5a:c2:48:13:b3:21:06:
         8f:13:ad:a7:b0:8c:9c:e4:7b:1d:2e:f5:14:ae:6f:3c:59:cb:
         98:7d:b3:0b:66:fa:e0:9c:c3:d2:8b:11:1f:28:bd:41:34:ac:
         04:a4:2c:22:fb:24:3c:7f:e0:40:e4:7d:6c:2c:91:83:d7:75:
         81:10:c9:b7:45:b2:4a:61:3d:a3:94:e0:d5:f7:d4:5e:74:8b:
         3f:88:8a:20:99:9d:58:e5:33:81:2a:90:47:ee:0d:0d:e0:26:
         93:a0:cc:7e:78:09:ed:11:ce:96:e3:58:7d:3d:68:87:b1:19:
         6f:e6:b9:8a:45:81:77:bb:03:e0:46:bf:e8:d0:77:de:77:60:
         65:6c:49:5b:2a:f6:74:3a:62:e4:d0:2e:8e:db:2b:08:9b:e4:
         b4:36:35:93:1c:4a:20:dd:48:0a:3e:12:06:18:15:12:f8:a6:
         92:7a:1d:bb:e3:66:35:15:62:80:e2:65:39:bd:5c:98:14:0c:
         38:b9:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:40 2025 by rpki-client