Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File:                     87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier:          wAX0k6ZJf2q62lqjoB/wpbwQXptVBQjB07DikKiHfOc=
Subject key identifier:   B0:90:FA:59:A8:A0:F8:51:0A:9C:7A:A7:3D:E5:A2:E0:E8:E8:7D:83
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer:       /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial:       0197B70EAD100BB7D2C2B3BE751DEA9DDFD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number:          0EE9
Signing time:             Sat 28 Jun 2025 15:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:21 +0000
Files and hashes:         1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: 0KwsyjqewTXsRv6m1Lnl1Nq5o9qBwt9sWhTqbftkD40=)
                          2: 8LQo-NmzGy5l2r5NZYIeKNdXs14.roa (hash: ilvAF3/ySzxVBGtuDQdjN+a1IHb253ip3G4kBn3IpkA=)
                          3: 8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa (hash: fgNyBR69p7xJvQXl06eoPq2tjnGBemgh7E+PjbLx9mo=)
                          4: Lq77aAwST8RILyM-oL6rNeFnjCE.roa (hash: Loe+ahaVydEMf0Ago+iaNs6AzxcPRts/E2zKD5WoQYs=)
                          5: ZoIewHefhjHP2Vd9cNeP-TAR-vM.roa (hash: IG+hitjDPUIZMjcFs/DHXrxqndBqaN9wlOddbrMn1eM=)
                          6: ft2dBL2dxWtdVnnU4dlHVTXL4C0.roa (hash: HQtGMREFODQOAzloACeTixd5hA5RT+3n/TffbecMmN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ad:10:0b:b7:d2:c2:b3:be:75:1d:ea:9d:df:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
        Validity
            Not Before: Jun 28 15:01:21 2025 GMT
            Not After : Jun 29 15:01:21 2025 GMT
        Subject: CN=b090fa59a8a0f8510a9c7aa73de5a2e0e8e87d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:e0:72:1e:a0:22:5d:f1:ef:68:14:c2:03:
                    50:7a:37:80:46:74:b8:c6:88:26:e5:44:47:9e:92:
                    22:26:f4:e5:ed:64:d0:50:70:0b:41:88:7e:f6:a8:
                    23:c0:47:8c:85:3e:5d:cf:00:b0:81:ba:18:69:eb:
                    23:49:66:02:b0:6d:3b:7d:cc:d6:ac:2e:26:67:8e:
                    44:7d:3e:35:48:22:3c:2a:3d:e2:f1:4c:2c:70:e7:
                    5c:24:14:76:07:cf:dc:ab:c7:49:b8:5a:ec:bf:e5:
                    e5:4f:1e:75:f6:2e:45:50:cc:1b:cd:3c:c1:55:cf:
                    7b:c3:4d:1e:f7:aa:c9:15:82:f0:e0:c5:aa:d7:a1:
                    52:cd:9f:03:c7:a5:b1:60:76:d3:f2:be:39:76:6d:
                    4e:e9:8c:8f:de:6c:f5:06:d6:21:4a:a2:96:c9:3e:
                    10:c1:a0:bd:d6:d0:84:fe:bb:39:94:4c:65:5f:3b:
                    09:79:bd:d8:96:93:a3:4b:3e:38:36:f1:29:e1:a1:
                    ba:db:09:4d:f8:ee:4a:aa:96:48:50:8c:09:57:68:
                    e5:84:c5:ef:d9:1e:bd:e4:57:c0:f1:80:c7:74:ab:
                    36:f5:ee:42:76:c9:a3:29:bf:ee:17:87:9f:c8:f1:
                    dc:b4:a0:83:17:b9:20:b9:93:b0:81:8c:90:95:88:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:90:FA:59:A8:A0:F8:51:0A:9C:7A:A7:3D:E5:A2:E0:E8:E8:7D:83
            X509v3 Authority Key Identifier:
                keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c3:24:a6:3a:6b:4c:a7:33:cc:de:b7:d4:2d:33:55:68:aa:
         79:15:30:9d:a9:19:54:9f:38:ff:eb:e3:45:be:61:38:ac:44:
         03:13:81:cf:e1:b0:1d:d3:70:30:81:72:85:09:5a:0c:e0:cb:
         56:6e:5e:2d:c3:cb:e7:78:f0:49:2f:5a:f4:4a:89:b6:cf:39:
         ac:81:9c:af:da:f2:89:58:5b:fd:87:81:11:8a:1b:63:92:ec:
         4b:b7:ba:d1:1e:9c:37:7b:bf:76:4d:3c:1f:17:a8:9d:ec:c4:
         ed:fa:29:1f:58:a6:0e:c6:ba:71:5f:b0:c1:60:3a:39:7e:9e:
         19:1a:ff:71:00:a7:d3:35:9c:a4:9d:52:b6:7a:0e:43:2c:05:
         a6:05:3c:5c:ca:c0:db:07:aa:74:a0:8b:7b:f2:dd:01:a0:79:
         21:e0:4c:ee:da:b5:34:53:33:23:38:58:ef:bb:26:1b:ae:94:
         aa:d1:da:a7:76:7e:30:0b:e0:82:2c:1c:02:c6:32:9e:1b:4c:
         cc:e2:ab:54:4f:92:b8:06:58:2a:c9:57:8b:5c:07:5c:e1:c9:
         fb:2d:69:09:8e:02:5e:cd:ed:49:c7:88:7a:d1:f2:2c:11:18:
         8a:e0:b5:b9:eb:16:d5:16:de:9a:d0:04:ff:66:d5:2a:57:7b:
         ac:a5:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:59 2025 by rpki-client