Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File:                     8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier:          CGAUbKFCcn0lUCeJtMfU8FRPRbJYzpaMAtGyV9YlxsQ=
Subject key identifier:   38:3B:81:36:DB:47:5B:FB:30:5A:47:27:91:F7:07:4C:E0:3D:38:50
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer:       /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial:       0196545C684ACDC9E097A325C88A76476EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number:          12B1
Signing time:             Sun 20 Apr 2025 18:01:04 +0000
Manifest this update:     Sun 20 Apr 2025 18:01:04 +0000
Manifest next update:     Mon 21 Apr 2025 18:01:04 +0000
Files and hashes:         1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: Pwbtp7I32nj9a5GzajVFNuBBc+JZS/ikRLN81oVG1+s=)
                          2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:68:4a:cd:c9:e0:97:a3:25:c8:8a:76:47:6e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
        Validity
            Not Before: Apr 20 18:01:04 2025 GMT
            Not After : Apr 21 18:01:04 2025 GMT
        Subject: CN=383b8136db475bfb305a472791f7074ce03d3850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:10:f7:3c:21:4c:66:bc:a5:4a:16:dd:f8:
                    c5:a2:9e:8d:f4:55:2b:93:bb:ed:bb:94:72:e5:0a:
                    6d:aa:4b:c4:57:92:41:42:5e:ed:53:51:2a:ce:48:
                    a3:85:ea:9e:2b:c2:d1:90:a0:f8:dc:a2:80:eb:a7:
                    56:f2:0c:68:b8:95:d8:f3:51:26:a0:e7:11:ad:ea:
                    b9:2d:59:fa:b8:89:72:dc:76:15:7b:f5:6a:7d:d5:
                    ae:d4:79:0c:72:48:fb:e9:73:db:b0:e2:ff:28:fc:
                    38:b5:ab:c1:87:2b:ca:42:35:8e:3e:ab:71:93:b4:
                    c9:f5:4c:83:42:d7:2f:eb:ee:63:6a:3f:df:96:56:
                    ed:aa:19:b7:a0:d5:27:26:54:bc:58:0e:46:a6:e8:
                    b5:bf:a1:93:d3:db:89:79:27:74:5f:f3:c1:1f:be:
                    78:35:b0:68:82:a6:a4:c3:dc:c3:53:90:29:85:b5:
                    fe:af:1c:a0:0c:d3:33:7a:54:bf:42:4b:8e:2b:ba:
                    17:2f:28:b9:f1:fc:df:fb:78:c8:83:2f:e3:71:18:
                    27:81:a2:fa:11:8e:56:7d:d7:f1:68:d0:fd:da:ab:
                    0c:9e:15:96:bc:24:4e:93:9a:2f:94:25:6d:37:1e:
                    b0:50:ce:31:c8:54:41:53:f9:64:ba:71:44:95:72:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3B:81:36:DB:47:5B:FB:30:5A:47:27:91:F7:07:4C:E0:3D:38:50
            X509v3 Authority Key Identifier:
                keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5b:26:b9:37:e9:b2:18:bc:fb:3c:21:df:e4:e2:c0:a7:d1:
         56:b4:6b:4c:ff:b2:14:72:4a:b3:2d:d3:cf:31:87:df:5d:fe:
         93:f6:05:6a:39:a5:12:88:9e:a7:c4:8d:48:8e:d6:e3:37:e6:
         03:e4:af:73:cf:bd:0e:d5:e1:bf:a3:16:2d:b8:ab:c2:42:c3:
         7e:13:ce:75:4e:0f:54:a8:21:b1:34:50:7a:b9:3f:6e:0f:84:
         5e:58:f1:69:ed:65:67:2b:82:3c:c1:9b:b4:89:b5:b3:7d:59:
         2c:f6:6a:91:a9:94:e5:24:87:c8:88:7f:a6:91:47:b7:30:da:
         9a:7f:15:ee:20:48:77:74:77:2b:28:f0:a3:2a:c2:f8:55:7e:
         45:eb:74:21:3d:ab:db:94:57:41:20:5a:0b:9b:95:6e:cb:69:
         79:39:ef:d9:cf:1d:7e:4f:63:7c:c4:3f:bc:f6:2a:0b:ec:32:
         bc:b9:f4:60:40:09:9a:b2:fb:60:dc:5a:28:e9:80:2b:8d:6d:
         ed:8c:eb:e6:e2:45:76:77:ee:90:e2:bc:8d:bd:00:ba:a6:f2:
         88:a7:3d:32:f0:b0:cc:1c:e9:82:7c:ae:2a:36:45:8d:1b:1c:
         da:ab:7b:2f:03:d3:d5:74:bd:f2:03:ca:d7:80:d5:d2:82:f5:
         ec:a9:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:22 2025 by rpki-client