Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File:                     8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier:          VcJv+ksM0sXpBDJHXUcqe2vUm0WhWpd0kWLSWCa7UvU=
Subject key identifier:   EE:54:4D:B7:97:39:CD:A8:13:7A:02:C7:25:A9:38:99:D9:1D:23:D7
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer:       /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial:       0197B96A88A7DB47908054EB4B70C8E575F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number:          0B7E
Signing time:             Sun 29 Jun 2025 02:00:56 +0000
Manifest this update:     Sun 29 Jun 2025 02:00:56 +0000
Manifest next update:     Mon 30 Jun 2025 02:00:56 +0000
Files and hashes:         1: 12a0ipAHl5HJyqLJLtX-LoYRrXM.roa (hash: TnK4o3d13YBRBJ8LTBq2YYzMppBqNrf4+1qoGHx92pI=)
                          2: 7__iS0PC1sPpziieUf7cPR0483I.roa (hash: WMdPgkVAgvH1xgF/iLZlNWqwQWtXShkyRu4TdlhutJM=)
                          3: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: hBRVVWDdSUUQF/95X4lRHmurEBTdURpzBWCMVTQrg2w=)
                          4: F7yuxB3rSQXv2e3QR7lP2VYZOl4.roa (hash: Hb0YQdZj2T1tpCI4BSwoqOiW5xXUYr05ZCOvDEHOELk=)
                          5: N9l24h9HyK6kAtkXD09UL27Eum0.roa (hash: Xv+8Dv2RI7WnHgqmAi/VbFX+HLMpAXUADpkW2PUX/hM=)
                          6: TACuL0mRuuSZ00EUuEDQYYgL9nY.roa (hash: EEbhhtJ6TUNmkVK+nqQofMESLsYodUnzqvKr3ODtYdA=)
                          7: f0YSDbM5Fp4SqEnB7Svlvk1Cg-M.roa (hash: 3R84lvwDdPg0KG2eSA0cCdxuOFb1Dl8Y/DbEXSQVXcw=)
                          8: gz7229OR-UwSeE8Mrmip6_lWRzM.roa (hash: HqILwLXjV1tcVlx0sNjeuEAQfPHai/C6EYXvfZ4gHY4=)
                          9: v2HXLCZWsI0s9KIXOuBOD4NKWbo.roa (hash: /mndx1AHWJXPlNn93oMmIR/duKvVFpLSwcZoOaPa0GM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:88:a7:db:47:90:80:54:eb:4b:70:c8:e5:75:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
        Validity
            Not Before: Jun 29 02:00:56 2025 GMT
            Not After : Jun 30 02:00:56 2025 GMT
        Subject: CN=ee544db79739cda8137a02c725a93899d91d23d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:c5:8e:5f:8d:9c:8c:1a:02:9e:ae:fe:62:
                    32:92:c4:9f:f6:b8:41:1c:e2:df:ed:8f:94:d3:a8:
                    ca:d5:4a:ba:a3:18:b8:e8:03:c3:4a:69:40:5c:a1:
                    3d:56:3d:aa:09:81:88:55:b8:66:60:90:ce:d6:7a:
                    7d:11:ef:c1:7a:49:5e:34:9f:3c:de:74:e9:18:7a:
                    a1:5d:d7:59:6b:b9:ec:72:cc:6f:cd:55:ac:d5:03:
                    7a:bd:a5:e8:f3:87:b4:7b:be:57:2c:83:42:d3:c2:
                    ca:be:ce:28:95:d2:da:89:66:e2:47:7b:cd:b7:4e:
                    20:82:c3:61:78:58:18:c7:e1:83:fa:93:22:98:e8:
                    b3:b7:1e:b8:99:2c:85:42:2d:9d:25:2a:5e:9e:15:
                    8d:20:89:1d:fb:3a:f0:4e:97:a6:61:48:2a:45:90:
                    7f:22:e8:12:06:47:61:32:e4:fa:bb:8b:63:c3:c5:
                    0e:33:ed:5b:2a:41:4c:33:80:86:e5:64:19:35:e5:
                    ad:0f:10:be:d8:af:ac:a8:a7:d5:7d:4a:39:35:fa:
                    86:c6:07:77:7c:cd:46:47:0f:71:8c:13:0d:71:56:
                    8f:26:14:ed:3c:c0:a1:3e:2f:d0:0c:08:73:06:f9:
                    d2:7e:95:d4:3e:f4:21:19:f3:2b:c2:cc:b9:d6:0f:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:54:4D:B7:97:39:CD:A8:13:7A:02:C7:25:A9:38:99:D9:1D:23:D7
            X509v3 Authority Key Identifier:
                keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3e:99:85:3e:27:3d:93:7e:6c:9a:91:80:15:90:47:26:7e:
         8b:94:34:15:6a:d1:db:5b:ab:9c:d1:dd:3e:cd:51:3f:1a:05:
         ea:0e:ea:7a:7f:15:49:f1:07:4a:ee:f8:2f:43:17:3d:2a:71:
         7f:2e:cb:7b:af:1d:66:80:60:25:31:be:76:30:c3:d2:51:b7:
         62:2a:1a:0a:27:08:1e:1c:c2:db:78:7f:45:21:89:2f:a6:a5:
         d8:62:8d:74:99:a1:8c:7d:50:e2:99:7e:3b:46:8a:42:d6:ec:
         aa:f4:26:cd:89:7b:68:bd:c4:f4:0a:63:a6:3f:c8:1f:96:b5:
         75:ea:5a:41:41:74:a3:8d:dd:7b:a4:7b:fe:f8:2e:9b:f4:18:
         30:fa:62:5f:e6:f4:a4:1b:7a:9f:81:58:f3:c7:9b:a0:0f:1c:
         52:54:f6:6f:0b:15:51:e2:b1:91:26:4e:63:fc:2e:8e:2d:dc:
         4b:69:2d:12:2c:e2:88:89:a5:f8:df:db:25:99:7a:47:0f:58:
         09:cf:89:2f:48:d7:36:94:e1:1b:fd:30:2f:01:14:31:af:25:
         ab:86:f2:30:35:9f:e1:c5:7f:0c:6d:fb:de:e9:aa:e5:bd:53:
         98:3b:ae:c4:14:42:ff:5b:45:51:d2:12:8b:cc:7a:5c:c3:f3:
         a1:3f:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:51:25 2025 by rpki-client