Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File:                     8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier:          5VQzao1BlOjJYm3O00BnIgzFE03i2y2PWhHEy1bjLpY=
Subject key identifier:   62:B3:5B:7C:F1:06:30:0F:40:13:A0:C9:CC:F6:99:86:22:FE:56:40
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer:       /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial:       0196409E9CA45FD7D67B90CE287A8E28FDF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number:          0A3E
Signing time:             Wed 16 Apr 2025 22:00:58 +0000
Manifest this update:     Wed 16 Apr 2025 22:00:58 +0000
Manifest next update:     Thu 17 Apr 2025 22:00:58 +0000
Files and hashes:         1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: rowyAPavUrNlQna/HamOJ6/udTIFKJeptICKm1g6RW0=)
                          2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:9e:9c:a4:5f:d7:d6:7b:90:ce:28:7a:8e:28:fd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
        Validity
            Not Before: Apr 16 22:00:58 2025 GMT
            Not After : Apr 17 22:00:58 2025 GMT
        Subject: CN=62b35b7cf106300f4013a0c9ccf6998622fe5640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4d:eb:3b:e0:11:4e:fe:cd:31:8e:18:8e:12:
                    bc:d5:4e:aa:d5:ae:1d:16:32:27:20:8f:fe:6c:5d:
                    5d:38:1c:2d:f7:a6:54:8b:a9:1d:8c:59:c3:64:fc:
                    94:d8:42:71:e4:c6:7b:d5:96:00:d4:c2:b7:33:2f:
                    b4:41:97:c5:12:d0:20:c9:4d:77:97:4b:69:c9:a9:
                    c5:64:9d:b9:a1:65:74:cc:4d:ee:7e:ae:c3:7b:95:
                    33:b5:82:3a:30:f8:73:ad:ef:af:7a:a6:36:2c:bc:
                    41:62:27:02:9c:04:95:82:4f:4b:f9:bd:6a:a9:98:
                    8c:c9:e5:ff:2e:3c:8e:0d:4e:b2:5b:5d:70:98:76:
                    6f:e5:e3:0d:71:9a:6a:c9:f8:c7:41:43:f4:98:d3:
                    0c:01:7c:b5:30:20:b3:66:50:f0:c9:49:de:64:18:
                    82:87:f8:fa:02:66:30:9f:79:7d:6f:97:5f:b3:26:
                    c8:40:ad:c7:9e:5b:db:75:d9:22:d2:96:b5:4d:81:
                    6d:92:90:b7:e3:0b:af:b9:32:00:60:df:d0:b4:90:
                    48:02:9a:e0:f9:0b:3d:50:23:df:55:bc:2a:95:f3:
                    b8:06:51:db:33:15:c1:7f:df:67:32:95:b6:62:93:
                    82:c3:a7:5f:ab:e0:c2:78:50:ca:9c:65:97:10:d2:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B3:5B:7C:F1:06:30:0F:40:13:A0:C9:CC:F6:99:86:22:FE:56:40
            X509v3 Authority Key Identifier:
                keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:da:f4:df:f5:3a:72:6c:55:dc:b3:bf:a1:cb:d1:a3:dd:0a:
         e2:80:d8:0f:f9:57:d1:89:5f:fe:de:23:21:79:e0:a4:5d:b1:
         b8:c4:ac:83:4a:2f:69:95:0e:74:6c:be:6e:b9:2f:2b:e0:ff:
         c6:15:cf:f7:25:cf:32:62:4c:50:80:1e:79:bd:99:80:a2:c1:
         8f:66:78:4e:c4:26:a9:fb:c5:27:88:c3:83:92:f7:7a:2d:e2:
         a0:ba:f2:45:92:e9:07:9a:ce:1c:f3:ff:33:a7:25:37:57:85:
         a1:39:57:c7:b7:ed:60:a9:1f:78:18:34:e3:97:ca:af:21:17:
         f7:ee:71:a9:b8:34:5a:48:3c:84:c7:ff:06:06:a8:86:93:e3:
         c3:93:a6:4d:87:f0:c4:74:6b:48:9d:3f:d1:e8:b3:72:fa:c7:
         e7:bd:c8:16:08:01:a8:3a:81:8f:b9:1f:7c:63:2a:00:05:f1:
         cb:1d:3c:50:73:e9:5a:2a:69:f3:1d:a1:2e:04:68:b1:9e:e9:
         e2:e0:05:ab:9a:bb:30:e2:76:9b:a4:88:81:26:34:06:20:a6:
         b4:e2:a2:29:48:26:de:6a:13:d5:bd:e3:b2:16:74:ba:1b:8d:
         7b:10:22:74:24:8f:73:1b:cd:4f:3c:a7:3a:8e:26:3e:56:2e:
         16:42:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:16:43 2025 by rpki-client