Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File:                     8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier:          B/ym4k5eKSQ8GNjku8ltFxoplUkERq6Aa/+CyYkPvrs=
Subject key identifier:   89:1D:F9:17:2B:0C:C0:68:58:B5:A5:AB:08:6C:2E:48:A3:8D:1F:F8
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer:       /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial:       019649A2654CC8E4F4CF2B09BEB33E35F2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number:          0905
Signing time:             Fri 18 Apr 2025 16:01:41 +0000
Manifest this update:     Fri 18 Apr 2025 16:01:41 +0000
Manifest next update:     Sat 19 Apr 2025 16:01:41 +0000
Files and hashes:         1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: xMqTiF5UK5C9eh2aHXHYd+7w/pukBPNnhw1d35cUsm8=)
                          2: SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa (hash: KKrsIQvSnuAAjrYFyC+00nKT3QiU4KGPAaz0PYrqnb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a2:65:4c:c8:e4:f4:cf:2b:09:be:b3:3e:35:f2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
        Validity
            Not Before: Apr 18 16:01:41 2025 GMT
            Not After : Apr 19 16:01:41 2025 GMT
        Subject: CN=891df9172b0cc06858b5a5ab086c2e48a38d1ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:01:0d:c7:53:5a:30:64:20:c2:65:6d:7a:
                    b2:2d:90:2c:54:82:6d:82:d4:23:91:a9:87:2c:76:
                    1b:05:fa:c5:3a:f8:79:c7:b5:be:c6:a9:59:82:a6:
                    c7:55:17:48:3f:3f:bb:ab:bc:38:e9:f7:89:c8:38:
                    c0:50:fd:b5:1a:10:e6:8d:cb:0a:ef:00:0d:1c:8d:
                    e4:61:66:d8:14:9a:59:dc:5f:ab:22:ad:5b:2a:ad:
                    57:75:cf:6f:86:f5:3f:d6:8a:c6:0d:50:62:88:96:
                    cb:b5:c8:58:84:f4:3d:8c:0c:37:1d:2f:83:91:93:
                    d9:cd:2a:f4:21:13:f8:28:6e:b5:4e:f9:5a:03:dd:
                    4f:05:3c:90:7e:5c:ee:ec:a9:12:47:33:75:fb:6f:
                    e0:9c:67:b0:61:ef:b4:b9:20:c3:f8:ae:0c:95:23:
                    d2:91:c7:59:42:39:8a:ad:1e:4c:14:b5:ad:e9:03:
                    f4:b2:1d:16:9a:21:3f:7a:4e:8b:0f:a6:ef:40:57:
                    6e:f6:3f:b4:c8:da:0c:40:bd:70:30:53:c8:7c:93:
                    ac:3d:9a:87:61:c7:75:6a:6d:94:da:c3:87:ae:cc:
                    90:f3:19:3f:50:a0:82:84:ad:28:82:95:00:59:b5:
                    ff:54:0c:da:35:20:1d:c0:4e:40:10:77:69:72:d1:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1D:F9:17:2B:0C:C0:68:58:B5:A5:AB:08:6C:2E:48:A3:8D:1F:F8
            X509v3 Authority Key Identifier:
                keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a4:40:60:7e:c6:07:37:4c:be:83:65:ce:12:dd:3c:5d:65:
         1b:f1:05:7e:8c:93:3b:d6:59:e3:f1:f8:e7:e7:61:f0:23:7a:
         7c:22:4d:dc:88:91:70:38:5f:70:a8:38:d2:1d:62:0c:89:c5:
         05:a2:24:67:b1:8e:e5:ba:e8:62:bb:a7:1a:87:25:13:e3:9d:
         65:30:7e:2c:7b:d0:1f:cf:88:4f:04:e1:04:6e:82:7a:21:ea:
         d1:bb:a9:0e:a6:bf:cb:fc:37:08:bb:0e:88:17:62:d0:fc:d8:
         7f:e6:da:4c:4d:6d:ae:c9:7c:c6:2c:20:8a:0a:d5:bc:4d:0a:
         ae:30:ea:fd:cd:40:4f:c2:f4:1b:2c:7d:f3:f8:1a:2b:81:dd:
         e4:f0:81:ae:67:1e:52:17:3f:4a:aa:73:0e:f4:71:85:e4:b6:
         45:12:11:7f:37:60:ba:8a:6d:e0:14:82:18:94:91:18:3b:05:
         e2:b4:76:a0:fc:f6:46:36:65:7e:37:39:e3:a8:03:bb:d7:7d:
         dd:3f:bb:ad:36:0a:f1:d5:03:b4:83:5c:ff:07:73:98:ad:d7:
         47:6b:1d:83:b1:7b:fb:62:cf:e7:59:1d:9f:90:cb:40:5e:90:
         65:d0:2a:21:bd:32:31:c6:5c:4c:67:30:73:ec:38:1c:91:e1:
         68:50:28:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:13 2025 by rpki-client