Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
File:                     8cSYM_Q5ueBnfY078fUt-_ssYk8.mft (raw, json)
Hash identifier:          LNch1+nR1smttBnXJAzUwHDPedglmbGmXjDdSp5oPuw=
Subject key identifier:   08:15:4D:A1:DD:3B:98:71:30:C9:68:72:10:3A:63:65:96:B2:97:4F
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Certificate issuer:       /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial:       0197B745B7EB6DC7E455F641112242641174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
Manifest number:          09A0
Signing time:             Sat 28 Jun 2025 16:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:28 +0000
Files and hashes:         1: 3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa (hash: DLWTw4UKdSLOETh6kocBhjPqoC9NP+EApW6Oj+8OWfw=)
                          2: 8cSYM_Q5ueBnfY078fUt-_ssYk8.crl (hash: aDGdM3fIIqY/Mnks9NjvNVZORPTSTdBRsk8iZqqGJDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:b7:eb:6d:c7:e4:55:f6:41:11:22:42:64:11:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
        Validity
            Not Before: Jun 28 16:01:28 2025 GMT
            Not After : Jun 29 16:01:28 2025 GMT
        Subject: CN=08154da1dd3b987130c96872103a636596b2974f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:d6:19:bb:ec:2e:45:8b:91:5b:42:02:97:
                    1d:ef:88:b4:b8:19:12:54:b0:9b:d6:2b:73:0c:45:
                    67:53:4f:90:08:49:a7:49:d0:68:51:71:a5:ec:40:
                    fb:49:a1:3c:25:c6:9e:4e:8a:8f:94:71:3d:b6:13:
                    36:5a:d2:bc:13:c9:f7:91:16:d4:c1:79:a0:e8:fb:
                    11:f6:9a:65:43:f2:11:6e:d8:56:7b:4c:27:44:4f:
                    5e:9a:a2:ab:bd:2e:59:52:fe:55:95:d4:e7:5b:db:
                    5c:57:2c:f9:3b:aa:ab:3f:a3:20:c6:f9:e1:77:28:
                    d6:aa:09:c7:4c:b1:79:63:4d:08:72:50:3b:db:ba:
                    3b:40:36:2c:e4:b1:da:89:c3:63:69:13:74:22:40:
                    43:17:2f:02:a6:88:f5:8f:b6:07:9d:e6:38:73:d8:
                    c9:f0:5e:70:37:63:25:59:0b:a7:42:76:0c:4d:cc:
                    90:bf:cb:2f:97:a8:b9:f3:f0:9d:3c:d1:5e:0c:7e:
                    2f:53:d1:fa:0a:ac:3e:e3:0b:1f:01:3f:a9:f6:14:
                    e2:73:0c:bc:04:39:e9:bc:c4:d1:20:f9:46:f0:a1:
                    df:90:3d:35:1c:87:e3:19:ab:8a:a3:8e:f8:6e:d8:
                    82:61:43:96:1c:c7:77:fa:a7:72:f8:3d:05:4e:23:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:15:4D:A1:DD:3B:98:71:30:C9:68:72:10:3A:63:65:96:B2:97:4F
            X509v3 Authority Key Identifier:
                keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:88:e5:7e:b8:48:d3:d2:70:7c:46:f7:47:a2:79:a4:8c:
         88:0f:b8:3e:87:41:6e:76:b5:0d:a5:72:b2:dc:6b:d9:11:17:
         b5:f4:58:5d:52:14:6a:64:0b:e9:e4:3e:6f:82:1c:a3:6e:4f:
         67:4f:ef:5b:98:16:70:32:f7:84:88:d5:3b:91:a0:18:1a:8a:
         da:9c:0d:08:92:b3:5a:dc:8a:45:b0:99:81:f8:a9:10:f6:df:
         f4:d3:13:1a:c2:a3:9d:b1:2d:66:2d:be:73:48:c1:82:a8:d2:
         bd:97:9e:ce:e5:51:45:de:51:3c:76:e5:c0:aa:41:d2:08:83:
         c4:a4:2d:4a:ec:6b:66:7d:dd:6e:07:6f:64:17:1f:b2:4a:eb:
         60:cf:bc:96:66:23:d3:7d:05:73:02:73:bc:1d:3b:90:a4:38:
         7a:73:22:bb:6e:58:be:a8:be:12:e2:53:d1:62:31:ae:38:0d:
         0f:a9:d0:43:0e:51:6c:eb:e9:17:8e:2b:6d:41:26:cf:cf:77:
         60:72:80:60:4d:98:6b:85:d8:74:c3:d3:31:e6:50:74:e2:ba:
         5a:1c:b0:05:20:8b:d6:69:7e:10:17:51:e2:ca:4d:82:8a:43:
         7d:55:9a:82:07:98:13:14:8d:26:35:18:c1:53:a3:a1:10:ea:
         0e:66:80:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:15 2025 by rpki-client