Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File:                     dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier:          BOf4kER/ZoWtJ1uGQGJRwMDkQX3aEEO6yZQnsGqyLQ8=
Subject key identifier:   DF:82:A3:84:10:05:B4:E4:B1:E0:F9:91:B1:60:4E:69:B0:50:76:45
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer:       /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial:       01964B21ECF7E03089C89E0BC3D0C3DA3321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number:          0813
Signing time:             Fri 18 Apr 2025 23:00:36 +0000
Manifest this update:     Fri 18 Apr 2025 23:00:36 +0000
Manifest next update:     Sat 19 Apr 2025 23:00:36 +0000
Files and hashes:         1: ZsJKFxXmo7OPgqm-sYXIzxvA6qU.roa (hash: IBfv0VOpf12GHCCld3i7ENCZlrb/HEkRLIfqN7c44Ds=)
                          2: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: VOTWOYR+v4VHJu66tLSk8+dvNew5P/EdHCyH3klpj0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:21:ec:f7:e0:30:89:c8:9e:0b:c3:d0:c3:da:33:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
        Validity
            Not Before: Apr 18 23:00:36 2025 GMT
            Not After : Apr 19 23:00:36 2025 GMT
        Subject: CN=df82a3841005b4e4b1e0f991b1604e69b0507645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a6:ce:31:df:cb:ab:31:14:c0:99:39:cd:0b:
                    6f:4d:dd:2a:9a:ab:4d:a6:19:e8:40:d7:68:c8:11:
                    dc:2b:0f:33:41:e6:8b:09:0f:77:74:8c:85:47:bb:
                    89:8b:7e:70:2c:49:fa:5f:06:0c:10:e1:0d:d7:bf:
                    5f:ee:f1:a2:97:a7:eb:f9:c2:13:3d:33:cf:56:b2:
                    05:b6:1d:05:c0:1f:ac:aa:cc:a5:be:4f:06:85:73:
                    7f:09:d0:11:b1:a6:70:f9:13:ee:91:cb:87:fb:55:
                    5b:e1:3a:5a:14:3e:44:51:22:11:3b:c3:13:af:43:
                    a1:21:3e:67:7d:49:0e:06:73:e4:51:7c:21:c4:f3:
                    b5:b8:09:1d:40:7e:35:ab:dd:9f:f0:27:91:c2:5f:
                    80:ef:a6:40:2e:6b:7a:a6:26:a3:6e:e4:7e:29:99:
                    a2:93:a2:4a:a7:fa:8d:58:78:e6:26:92:65:88:da:
                    92:86:72:6f:25:db:bc:68:bf:29:ac:ec:bd:f4:1e:
                    cc:cd:31:da:e4:6d:c7:de:49:4b:da:93:8d:6e:32:
                    5f:2c:c7:20:84:6a:f3:bf:14:43:6a:d9:90:33:a1:
                    59:86:17:44:0a:eb:ff:bd:2a:58:ef:6e:98:ec:00:
                    83:1e:70:41:ad:87:d0:1b:b7:24:e7:bb:0e:b8:71:
                    4e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:82:A3:84:10:05:B4:E4:B1:E0:F9:91:B1:60:4E:69:B0:50:76:45
            X509v3 Authority Key Identifier:
                keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:a1:93:75:ae:11:df:dc:b4:f4:f1:fd:3a:ba:63:bd:e1:
         f4:b1:3d:b8:e1:52:62:ce:be:c6:00:1d:83:60:ad:c7:cb:2e:
         e6:e2:85:5c:4b:5c:29:b3:7f:6c:6c:10:8b:43:bf:e9:0e:27:
         49:5a:9b:f3:67:62:ee:e6:0a:8b:05:3a:e2:1c:1b:e2:69:63:
         06:f2:63:f8:83:64:37:8b:de:13:9b:cc:28:8d:d7:77:e3:10:
         82:7c:a4:f2:fe:02:2c:6f:f4:87:e0:74:7a:5f:c4:d4:ed:38:
         1c:58:3b:d4:7a:ee:8a:93:6b:e7:57:49:0a:64:c8:17:7d:a6:
         12:d3:3e:46:b3:06:8e:52:4a:e0:1d:b8:77:5c:0d:b8:ce:0d:
         6c:00:95:a8:8c:fb:49:36:3e:ed:ce:ec:71:56:3e:b9:cf:2e:
         93:92:41:d2:e2:5c:6a:38:3c:d8:08:05:18:54:81:49:89:93:
         b9:e9:e5:98:66:53:bf:4f:21:07:3f:4b:96:6a:ec:af:07:10:
         00:80:ee:7b:09:9f:23:6e:11:bf:d7:66:50:2b:82:4a:4a:41:
         be:46:db:a9:dd:be:d7:ae:de:f6:63:ee:ed:c4:14:8f:2c:8d:
         26:0b:07:06:e6:e3:65:22:21:97:ab:5f:d0:28:48:8a:08:07:
         b1:11:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:58 2025 by rpki-client