Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File:                     8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier:          4mqwAwml0tY4D77TH1le7tgAk1Y5y0Hf1xHkKSm8EjU=
Subject key identifier:   49:DF:6A:CC:E0:CF:82:CB:60:8B:62:7E:1F:C8:FD:C1:8D:18:4E:32
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer:       /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial:       0197C537DE7568B7781B109C41CFB149A629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number:          15BD
Signing time:             Tue 01 Jul 2025 09:01:02 +0000
Manifest this update:     Tue 01 Jul 2025 09:01:02 +0000
Manifest next update:     Wed 02 Jul 2025 09:01:02 +0000
Files and hashes:         1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: CXPISBoHmpTiuO3IrKz6i5LXEyU+fi2pBYo70xbxFfA=)
                          2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c5:37:de:75:68:b7:78:1b:10:9c:41:cf:b1:49:a6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
        Validity
            Not Before: Jul  1 09:01:02 2025 GMT
            Not After : Jul  2 09:01:02 2025 GMT
        Subject: CN=49df6acce0cf82cb608b627e1fc8fdc18d184e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:43:d7:fa:0b:94:a5:d6:70:51:0b:2c:4b:
                    dc:1f:43:4c:f5:e2:7a:a3:9c:56:8a:60:2f:04:bf:
                    40:17:9e:37:9e:3e:2c:c7:c0:bc:ca:20:79:59:0d:
                    aa:3c:41:00:57:de:54:c0:a1:16:08:60:33:88:55:
                    e9:7e:0c:d9:36:4c:94:d6:86:6c:a2:a7:cd:e4:22:
                    24:15:0f:1e:94:71:d5:74:e1:56:d3:1e:53:bc:f6:
                    7d:89:11:29:46:57:56:47:35:29:76:0c:ca:44:41:
                    a5:fb:ab:b9:17:05:c4:f9:c1:44:b9:e8:c1:e5:69:
                    fa:eb:62:29:70:4b:ab:ae:bb:17:2c:0c:07:a5:f3:
                    77:21:2f:76:a8:97:ae:cf:9b:ed:1b:db:61:3f:b0:
                    03:03:da:52:a7:93:ba:07:33:fa:60:fe:84:2e:cd:
                    13:42:48:5b:e4:18:03:eb:d4:05:bb:c9:2d:0c:80:
                    51:c9:06:bc:65:22:42:69:90:01:f8:2f:2d:40:cd:
                    3d:79:e6:5f:44:0e:8e:ec:c7:3b:b3:fb:c2:d9:be:
                    7c:c4:20:81:8e:0f:50:41:bc:c8:5a:a6:4a:93:46:
                    0c:c4:ec:28:67:69:f1:d6:18:a8:42:d4:21:d1:75:
                    f6:d3:38:b1:d2:1c:7c:f6:87:aa:ca:00:78:63:62:
                    9b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DF:6A:CC:E0:CF:82:CB:60:8B:62:7E:1F:C8:FD:C1:8D:18:4E:32
            X509v3 Authority Key Identifier:
                keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b5:42:85:df:de:52:05:65:b0:cb:bf:f6:8c:29:17:2e:8a:
         b0:a5:94:f0:46:f4:5d:ea:d1:54:ba:c6:36:3a:f4:57:9f:6b:
         88:7e:9d:c9:4d:b3:70:a9:3e:f1:eb:74:78:91:97:c0:06:ff:
         08:ea:31:16:e7:ed:21:94:4f:5e:a7:83:fa:60:0e:c6:14:eb:
         50:70:52:3b:c2:85:34:f2:33:6f:db:62:2b:c5:91:10:ee:29:
         91:76:3b:9d:49:49:1d:45:fc:09:c0:7c:57:f1:de:73:a5:5a:
         37:5a:a1:9b:da:a3:a2:7e:38:63:a3:2e:33:d6:62:95:2a:71:
         cc:d5:ec:f0:fc:95:ac:da:bb:19:96:d7:3d:49:c6:97:62:cf:
         b5:c8:63:0c:21:af:64:f2:67:9d:ae:fa:c1:7e:27:20:b5:90:
         a2:59:4a:16:eb:3b:8b:a6:85:51:45:ce:17:51:b3:86:51:9d:
         31:0f:36:e4:32:cc:df:12:8a:7e:08:10:cf:28:41:58:e4:3b:
         02:71:55:d7:d9:e1:56:14:af:62:70:e9:a6:16:a6:68:52:0e:
         d2:53:7a:97:1b:62:7a:3a:c2:1c:f9:e1:66:bd:3d:f5:6b:85:
         55:79:38:79:f6:cd:c1:c8:44:22:23:be:0b:be:b2:b7:76:1f:
         1c:d4:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:10:36 2025 by rpki-client