Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File:                     CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier:          hbEiBQxZPgjTc7HjkQ/1n3Hq0rDZAunP1sSxkzYoVyQ=
Subject key identifier:   80:19:54:00:B8:15:C9:BA:D9:51:E7:6A:6C:55:93:65:B7:A5:BD:B7
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer:       /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial:       0196409E6DB642DFCB2DEBA38BEAAF7CF895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number:          0887
Signing time:             Wed 16 Apr 2025 22:00:46 +0000
Manifest this update:     Wed 16 Apr 2025 22:00:46 +0000
Manifest next update:     Thu 17 Apr 2025 22:00:46 +0000
Files and hashes:         1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=)
                          2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: x6YMW/ECye+lON/T6ahM9NMxPxNXbBPMDdv36NMRTnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:9e:6d:b6:42:df:cb:2d:eb:a3:8b:ea:af:7c:f8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
        Validity
            Not Before: Apr 16 22:00:46 2025 GMT
            Not After : Apr 17 22:00:46 2025 GMT
        Subject: CN=80195400b815c9bad951e76a6c559365b7a5bdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:fb:0e:d1:55:b0:6f:e2:6a:de:0b:8f:a7:
                    fd:75:21:81:34:18:64:5a:36:4b:b7:0c:b7:08:38:
                    90:dc:5e:e3:1c:d4:ac:ef:1e:a5:06:59:53:a9:b5:
                    48:1e:45:e3:3b:a6:7c:c7:91:90:9a:af:76:31:a6:
                    7a:00:88:8d:01:ce:1e:1c:8d:4a:f4:13:6b:19:91:
                    d0:57:04:d5:97:36:82:63:be:25:c0:0e:91:07:ec:
                    f4:3c:9c:88:66:f5:9d:64:ab:2c:84:d5:59:8f:49:
                    ef:bb:5a:b3:57:23:56:c9:99:17:71:cf:62:ef:77:
                    56:e2:b4:fb:0f:41:f8:38:39:a0:65:fe:90:a3:e1:
                    7e:d1:90:17:e2:68:a1:f2:35:2a:c7:25:5f:67:24:
                    73:ad:fc:3a:da:11:3c:a8:dc:0b:24:96:50:85:8c:
                    2a:9a:5f:f6:0d:28:ae:c5:a7:d1:bb:47:a2:e0:27:
                    23:8a:14:3e:17:2e:55:02:f5:74:29:87:55:d2:71:
                    fd:95:8f:b5:b0:dc:8c:21:d2:62:ae:b6:f3:c9:eb:
                    8b:01:28:71:be:90:0a:32:77:72:8c:4e:f0:80:d4:
                    04:6f:87:7d:9f:67:ba:e7:a4:13:6e:d3:ae:fc:1b:
                    b8:68:5d:b0:ff:df:c8:a0:5d:31:16:4a:7a:44:8c:
                    0e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:19:54:00:B8:15:C9:BA:D9:51:E7:6A:6C:55:93:65:B7:A5:BD:B7
            X509v3 Authority Key Identifier:
                keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:df:5f:d5:c7:6f:6a:9b:bf:89:3f:af:f1:f0:c7:8d:2f:9e:
         f3:55:d4:7e:6f:74:64:24:c3:01:32:68:07:9e:02:84:bc:f6:
         74:f6:70:01:76:63:8c:f4:d3:eb:9d:c1:32:dc:53:f3:17:ee:
         3e:1d:43:be:78:4e:94:36:4f:85:ec:09:17:99:9e:09:6c:f8:
         ab:90:5d:33:5b:49:80:dd:16:d7:02:99:61:ee:7f:8a:15:63:
         10:b6:dd:59:ea:c2:85:c7:0a:5e:d8:d3:f6:c0:3b:27:50:d1:
         f8:92:b5:a6:eb:57:12:4b:21:a8:8c:4c:84:ec:8a:4f:c4:ba:
         ec:1e:8e:db:2e:6b:cf:18:45:55:65:33:68:f6:b2:da:48:6d:
         b8:41:3a:1b:b1:9a:36:d8:b4:25:3c:b2:a1:df:39:4f:7d:37:
         91:be:15:fc:81:d4:53:3b:be:ed:0e:5f:93:9b:d1:aa:64:c4:
         52:c3:72:66:7d:36:c1:09:2d:1d:93:ba:20:26:0f:13:79:ee:
         cc:d1:15:46:80:d0:c7:3e:6a:b9:87:00:a5:93:e8:8c:80:55:
         9f:f2:34:58:7e:ee:04:36:6f:27:e8:46:dd:d5:69:5c:2e:e6:
         85:eb:f2:ad:e6:37:6c:95:6d:48:47:b1:c5:bf:ff:e8:ad:0b:
         fb:35:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:58:53 2025 by rpki-client