Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File:                     a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier:          2DLrd805RpHkK/F7dCoHOfdTr+CHgJk7fzr9sMV/FyE=
Subject key identifier:   66:DB:5E:1D:53:EA:97:E0:99:5E:59:54:4A:C3:6E:79:FD:91:54:7E
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer:       /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial:       0197B74555AA80790F4F0C16307719670CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number:          14B0
Signing time:             Sat 28 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:03 +0000
Files and hashes:         1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: OMakqWCw/pv82CAWTO3lD3wT8FgYu5nFSo5gtXPlcQg=)
                          2: cHx9sYkuiAFAjOWcBOb5TDvNls8.roa (hash: ShwHq89MA2jwo160RZTKkKFkHAW0OiQLJH4eT6G+deQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:55:aa:80:79:0f:4f:0c:16:30:77:19:67:0c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
        Validity
            Not Before: Jun 28 16:01:03 2025 GMT
            Not After : Jun 29 16:01:03 2025 GMT
        Subject: CN=66db5e1d53ea97e0995e59544ac36e79fd91547e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:01:4b:a8:a7:07:b1:83:41:f7:6a:65:b2:
                    cd:74:82:bd:82:32:56:b1:fd:f2:aa:e9:c4:f9:e2:
                    15:87:dd:1e:11:71:22:ad:bd:01:da:58:0e:d5:79:
                    f2:e8:a9:23:e9:49:23:39:6b:b7:32:fc:34:b5:0c:
                    fb:41:a2:ca:d3:c6:ff:6c:14:e4:96:46:a7:b0:8a:
                    c0:1d:7f:f4:f2:28:3d:be:9a:7b:93:4e:e8:8e:38:
                    d4:24:7d:37:1d:c0:83:cc:8d:13:62:02:10:1d:2d:
                    02:ef:51:65:5a:25:c3:3b:05:ec:f7:bd:38:66:53:
                    07:44:b4:1a:e4:98:c1:34:e4:85:b5:b8:2d:cf:40:
                    9c:ad:22:2f:c3:0f:ae:fb:f5:ae:91:f4:5e:61:97:
                    01:2b:b2:79:37:a3:3e:2a:e6:cd:13:48:bb:a6:b9:
                    e3:e3:3e:67:58:53:58:fb:cf:b8:8d:10:89:54:8a:
                    8e:8a:64:cd:55:b3:6d:f0:5d:3e:ea:8e:5f:cb:0f:
                    ff:a7:71:06:51:ba:bc:af:3d:bf:f6:12:f8:fd:43:
                    0f:0b:b3:20:6b:8f:f8:94:b7:4e:b9:72:e9:3c:e9:
                    8e:84:00:1e:5c:50:8f:cf:5c:4c:77:44:9e:50:14:
                    c2:9e:8c:a8:04:df:46:bc:15:18:9a:1e:ae:b6:44:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DB:5E:1D:53:EA:97:E0:99:5E:59:54:4A:C3:6E:79:FD:91:54:7E
            X509v3 Authority Key Identifier:
                keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c3:1b:73:c6:0d:72:89:20:47:3c:f0:2d:7c:ac:0e:86:1c:
         80:91:f0:63:82:f3:fe:92:a9:0a:29:a0:1f:71:ae:43:4b:b0:
         37:bc:6d:94:b6:ef:93:35:27:eb:f6:df:3c:fc:1d:b1:aa:ce:
         f8:f1:7f:24:5b:38:0f:0f:07:ae:8a:47:65:a9:fe:ba:c6:10:
         0b:cb:e4:03:29:d4:78:1a:ad:67:3f:03:00:cb:a8:bf:49:74:
         07:bd:3d:1b:9e:02:b1:d3:e5:b6:3d:6c:38:80:8b:45:3c:ce:
         32:55:84:a1:d9:e1:ed:20:26:e0:0f:0e:1b:f1:37:32:5f:e9:
         ea:cb:3b:15:08:cf:50:f4:a3:47:21:f7:b4:09:79:27:f2:fa:
         9c:4c:66:9c:b0:9e:32:c8:df:f8:5e:16:82:bf:cb:51:0e:be:
         79:a6:96:71:bd:ce:ce:b4:06:dc:dd:9a:a1:a8:20:71:93:34:
         32:85:ff:15:76:84:75:88:5c:32:dd:5c:2e:be:3c:c7:1f:ee:
         43:ba:73:7c:14:c5:3e:25:ce:d6:ad:94:f1:39:62:52:53:c7:
         ef:cc:26:99:4a:17:f4:95:27:3b:a0:81:19:bc:b0:f2:12:07:
         1d:52:69:de:ee:64:1f:49:d4:f0:32:d0:18:19:13:6f:1f:e2:
         ec:da:46:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:49 2025 by rpki-client