Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File:                     8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier:          I+UqIym4R0m+CiZdwbnbQ6ZCEq5pWIudRJrSc6B+WjQ=
Subject key identifier:   56:59:FB:C3:4B:5E:86:B8:95:8D:FA:F0:F4:18:B4:65:B4:28:67:F1
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer:       /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial:       01964FDB0B91B8DDF415D6DBA4D0BA6537E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number:          08FB
Signing time:             Sat 19 Apr 2025 21:01:17 +0000
Manifest this update:     Sat 19 Apr 2025 21:01:17 +0000
Manifest next update:     Sun 20 Apr 2025 21:01:17 +0000
Files and hashes:         1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: Cw4eDIrfiyXXD3z0U+L5GUnNjUufF/67Uk4q4vmwQAI=)
                          2: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (hash: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 21:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:db:0b:91:b8:dd:f4:15:d6:db:a4:d0:ba:65:37:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
        Validity
            Not Before: Apr 19 21:01:17 2025 GMT
            Not After : Apr 20 21:01:17 2025 GMT
        Subject: CN=5659fbc34b5e86b8958dfaf0f418b465b42867f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:5a:50:26:e3:b2:c2:3b:7d:0c:85:74:04:
                    17:94:e2:ce:7f:97:50:03:4f:23:c3:69:f1:30:7f:
                    2c:3e:83:87:1b:8e:9e:65:1c:d2:22:c8:cd:2a:ed:
                    0d:ff:90:bf:d5:a8:6f:1c:02:4b:86:ef:22:e1:af:
                    fd:0d:7e:e3:15:c3:03:80:ad:90:f6:cf:11:e7:df:
                    04:e1:63:05:9d:7a:1e:64:6a:02:57:95:55:a4:af:
                    d8:b3:8e:04:ed:0b:b8:f4:41:6a:4d:76:53:1b:d9:
                    69:2e:fb:ab:b4:60:36:43:f7:ec:1f:f3:b2:2b:f5:
                    46:68:2d:dd:77:36:7e:6a:a2:24:f1:8b:ec:bd:15:
                    4f:2b:6e:32:74:3d:13:30:cc:5c:04:4d:20:55:1f:
                    e0:92:65:11:d1:f1:62:c3:3e:b6:36:b9:50:2a:f9:
                    00:00:6a:cf:22:20:1a:ed:6f:88:4e:9a:03:18:40:
                    ed:04:80:dd:67:2b:10:e6:bf:fc:84:34:d5:53:e1:
                    77:5c:ce:aa:2a:5c:91:65:c1:13:17:47:35:94:95:
                    f1:38:73:5a:d8:de:e2:e5:bc:cc:f1:e5:92:b9:ba:
                    2a:83:56:82:f3:67:62:2d:11:78:d2:d8:f8:3f:86:
                    34:b3:ee:bb:3b:f8:b5:c0:bc:15:3d:e8:05:f0:1f:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:59:FB:C3:4B:5E:86:B8:95:8D:FA:F0:F4:18:B4:65:B4:28:67:F1
            X509v3 Authority Key Identifier:
                keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:bf:20:5c:5f:11:d1:d2:25:e2:cb:0a:10:7d:a2:d7:9e:
         0c:d4:0c:c3:71:2b:c2:ce:fb:ac:ea:6b:88:42:60:6e:10:e4:
         d4:62:72:df:83:72:60:14:19:64:e7:c5:26:5c:f8:5e:a0:f7:
         37:9d:00:09:61:9f:ec:1f:a6:9a:c1:27:ff:f7:61:52:a4:66:
         c0:4b:dc:e4:77:b4:b9:c4:6c:23:b5:81:11:5b:5b:89:91:68:
         2e:a9:ad:58:73:67:83:d7:e7:a6:d2:b5:a5:6d:5c:4c:d4:c0:
         18:93:71:4a:a7:1f:dd:f8:cb:9a:55:f6:4b:1a:4d:6d:ab:54:
         8f:16:13:0d:0e:56:bd:2e:5b:be:d4:9b:b2:85:49:c3:59:4f:
         ec:4c:47:1a:be:6a:96:78:c1:63:c5:fc:99:be:02:de:9e:d6:
         16:1a:db:78:c7:9c:a5:3f:4a:b1:0d:94:f8:1f:c0:e8:54:82:
         50:64:74:03:22:c6:61:2b:c9:b7:12:3c:79:75:96:0e:7e:1c:
         ed:aa:7f:c1:88:2d:3b:73:0b:eb:41:59:00:80:d5:7d:df:ef:
         cb:c6:72:09:fb:31:a9:56:68:7f:b9:5a:05:bb:af:f5:8e:5b:
         d1:5b:61:11:47:1e:d3:ff:83:93:0f:dd:d3:f2:95:af:17:a3:
         96:20:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:17:03 2025 by rpki-client