Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
File:                     8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft (raw, json)
Hash identifier:          YgH49pE4usuzh5KhNjeQ6SJhXr1l8XEUUa4S9qsao1g=
Subject key identifier:   4D:FD:F2:5D:97:B2:68:35:FE:B8:09:3E:82:79:D9:C0:06:3A:EB:97
Authority key identifier: F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
Certificate issuer:       /CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Certificate serial:       019647B374F61EDB62B2C89112738BC706D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
Manifest number:          14F5
Signing time:             Fri 18 Apr 2025 07:01:05 +0000
Manifest this update:     Fri 18 Apr 2025 07:01:05 +0000
Manifest next update:     Sat 19 Apr 2025 07:01:05 +0000
Files and hashes:         1: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl (hash: noSHXyXUHUAuw7ohfMb5eypIm5pt8AHJeL4apx5YxZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:b3:74:f6:1e:db:62:b2:c8:91:12:73:8b:c7:06:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
        Validity
            Not Before: Apr 18 07:01:05 2025 GMT
            Not After : Apr 19 07:01:05 2025 GMT
        Subject: CN=4dfdf25d97b26835feb8093e8279d9c0063aeb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:44:67:f2:05:95:45:8b:e0:c2:10:b4:f1:ed:
                    37:fe:e6:cf:31:6a:bf:98:4f:a4:15:a2:6f:5e:8a:
                    f9:0c:ab:f6:04:b2:24:eb:42:c4:ab:ac:af:19:2e:
                    27:6b:fa:e0:e5:24:e3:35:4c:d9:0c:74:b2:bf:ab:
                    bb:e1:0d:a9:d6:93:e0:74:84:ab:65:cb:10:88:c8:
                    9b:8e:b2:c3:9e:2f:0e:5b:f7:89:d8:df:89:96:8f:
                    61:dd:f9:42:a8:68:91:70:be:51:3f:95:14:8e:d7:
                    fe:0e:30:3e:0a:fc:10:93:6c:59:8f:18:be:76:b8:
                    02:29:e9:a1:44:8f:2a:58:37:3c:87:b2:83:65:1a:
                    5c:c7:ef:31:57:c6:6c:b1:a5:8b:95:7a:1c:a6:97:
                    d7:58:a5:aa:ec:c4:c4:06:93:32:93:4a:33:63:d8:
                    17:87:e3:4e:1b:cd:7a:86:10:2a:68:59:4f:95:0f:
                    8f:3b:87:c8:6b:97:97:17:0f:81:76:a2:1b:25:19:
                    99:a7:06:b0:64:e3:d5:57:ba:f2:43:e3:23:16:83:
                    30:75:87:43:c2:47:d5:92:7e:69:e9:34:d8:6e:b2:
                    21:0c:c7:38:92:e0:94:f1:8f:ef:0c:b4:0f:65:6c:
                    7e:db:02:47:0a:e7:2b:d9:d4:81:fb:af:19:f3:28:
                    f1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FD:F2:5D:97:B2:68:35:FE:B8:09:3E:82:79:D9:C0:06:3A:EB:97
            X509v3 Authority Key Identifier:
                keyid:F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:bf:34:43:92:4d:c6:34:34:fc:94:6c:41:71:35:30:54:
         1d:43:89:ff:9f:9a:bd:d4:6d:48:eb:40:f0:9b:30:f9:dc:6b:
         97:5f:b3:d3:44:7d:34:4f:a9:65:3b:7d:6a:f0:47:92:06:b1:
         a1:25:0a:0c:88:01:fd:5d:e0:b4:cc:90:f9:6f:38:b2:70:c4:
         de:be:da:42:66:24:5d:4a:95:62:8d:dd:aa:44:0b:b5:f1:78:
         72:c1:b6:ab:cd:13:20:4b:b8:d1:d7:4f:d4:c8:04:cd:29:1f:
         e5:24:c1:d0:7b:13:46:21:88:c6:fc:22:63:bc:fe:f9:09:0c:
         13:38:4e:ad:6a:7d:62:27:45:61:dd:bb:be:c8:48:fc:80:e3:
         dc:98:a9:28:57:db:90:0e:34:00:1e:c5:77:8a:68:df:8e:a9:
         b2:8a:e0:44:07:ef:77:d1:1e:79:d3:ee:a7:a2:d2:69:e9:5d:
         15:e8:11:55:58:5e:f8:7a:3f:be:a7:fa:bf:7a:69:ab:2f:ef:
         53:58:38:93:67:11:ec:0f:f2:88:76:f4:01:0a:c7:1b:e4:a5:
         6a:1c:13:f7:a0:30:34:0d:0b:fe:f2:5e:6d:98:15:35:46:2f:
         8d:fc:05:17:81:5d:58:3b:93:68:ba:e9:f3:0b:5b:ec:2a:b3:
         70:7a:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:46:45 2025 by rpki-client