Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
File:                     AIsoBYgFTtjERuJ7ScrEVYip6YA.mft (raw, json)
Hash identifier:          jkU+o2z85ICvkMyhz2R45rVV+ojAfMNFGgji5QeCA+w=
Subject key identifier:   88:F4:79:BF:25:D3:34:BB:E5:C0:3B:C5:C8:4F:D7:99:4D:8C:7E:A1
Authority key identifier: 00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80
Certificate issuer:       /CN=008b280588054ed8c446e27b49cac45588a9e980
Certificate serial:       019649A24ED2DA7D594BC6851C7317893B3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
Manifest number:          0FB4
Signing time:             Fri 18 Apr 2025 16:01:35 +0000
Manifest this update:     Fri 18 Apr 2025 16:01:35 +0000
Manifest next update:     Sat 19 Apr 2025 16:01:35 +0000
Files and hashes:         1: AIsoBYgFTtjERuJ7ScrEVYip6YA.crl (hash: hiYyQdEDtJE6AgMZL2RQa6LPNJiPXO1ylCZ0CM32Ht4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a2:4e:d2:da:7d:59:4b:c6:85:1c:73:17:89:3b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008b280588054ed8c446e27b49cac45588a9e980
        Validity
            Not Before: Apr 18 16:01:35 2025 GMT
            Not After : Apr 19 16:01:35 2025 GMT
        Subject: CN=88f479bf25d334bbe5c03bc5c84fd7994d8c7ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:d7:c7:af:3f:ab:55:b5:39:e9:12:8d:33:
                    6e:e3:38:75:9d:e4:2e:56:46:d0:f2:d2:3a:b3:66:
                    09:b8:b2:0e:25:a2:cb:f4:a3:06:7b:f4:a7:af:50:
                    b1:0d:4e:0e:ce:16:0d:2a:e0:15:83:c9:2d:96:ef:
                    83:be:10:fa:fe:11:c7:b0:fb:41:8a:75:ea:f4:9f:
                    c5:09:c3:41:9e:13:d2:63:c7:c7:f5:fc:92:9e:c9:
                    b4:47:e4:70:e5:81:b7:00:25:0b:20:5b:30:60:6d:
                    27:91:2e:c8:bf:32:92:2c:9f:6f:eb:3a:71:0c:e6:
                    2a:e6:5e:b5:0d:c6:c0:b4:92:bf:73:f6:56:6c:65:
                    c5:21:0f:c1:85:ad:18:2b:aa:e0:9d:93:0b:aa:2d:
                    85:0a:ff:1d:9f:12:c2:81:71:2b:cf:3d:32:8f:33:
                    2e:1a:24:03:12:cc:8a:0e:9a:ef:35:f1:7a:fb:c2:
                    9c:e7:9d:d8:e4:d9:d7:02:a7:cc:89:2e:49:6b:b8:
                    3b:45:fb:42:98:a1:4f:16:3a:ec:78:74:11:5c:10:
                    ce:bc:8d:70:5a:69:a7:05:c9:fc:1c:de:bf:7f:9f:
                    ee:fa:9f:d3:ad:b4:cb:c8:71:ff:13:0b:03:41:42:
                    74:75:ba:25:d8:4d:1c:c6:35:31:b2:a2:c7:1c:c6:
                    90:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F4:79:BF:25:D3:34:BB:E5:C0:3B:C5:C8:4F:D7:99:4D:8C:7E:A1
            X509v3 Authority Key Identifier:
                keyid:00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f5:56:e3:d2:8f:55:22:6a:a3:17:ac:d5:fa:7a:2e:f6:c8:
         71:65:12:01:a3:d2:c6:e3:88:88:f9:ce:85:84:d5:96:e5:1d:
         dd:bb:04:92:e3:be:ab:a8:fc:2f:3a:65:7b:2f:d9:6c:c6:ee:
         4c:09:28:f3:43:eb:f3:62:91:b9:94:d0:dc:b8:84:70:d9:21:
         26:5b:d8:48:76:40:80:80:7c:85:c3:c3:00:cd:ab:30:95:e4:
         ad:ea:5c:b7:63:bf:3f:11:08:c5:e6:ee:0c:69:f5:5c:0d:d4:
         b5:6a:4c:2c:a7:11:6b:63:0c:f7:f6:79:06:ce:f3:c7:26:00:
         79:d4:70:9b:03:32:74:d2:4d:84:31:35:af:ba:91:7f:ed:b4:
         7d:86:be:45:25:c6:98:71:9b:c9:e6:72:66:80:91:7c:22:3c:
         eb:d8:e9:aa:2a:83:9f:74:21:01:a2:b7:ab:5a:de:3a:48:8f:
         99:66:1e:46:f5:40:ce:f4:b6:dc:9f:5d:71:2a:e5:98:6f:6e:
         6b:f6:6c:dd:cc:8f:04:fe:61:b2:a1:41:bf:a9:03:b5:b8:38:
         46:54:a4:30:f8:2b:b7:8a:e5:4d:60:ab:2c:b4:d6:12:db:83:
         f1:1d:ba:c5:e2:4e:e6:0b:e3:bb:9c:9d:43:17:67:d7:cd:2e:
         ea:74:47:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:38:21 2025 by rpki-client