Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
File:                     8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft (raw, json)
Hash identifier:          OwgqZt/dzw8zH75EaZxxvdNGPgLxyf/jTBfiAdedLXg=
Subject key identifier:   24:1B:57:5A:28:8A:7A:35:D1:A7:7E:21:51:37:AD:18:B9:52:BE:02
Authority key identifier: F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
Certificate issuer:       /CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Certificate serial:       01975046364F5878BDCDFF191BD7F95634AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 16:01:08 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:08 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:08 +0000
Files and hashes:         1: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl (hash: 0ELO78h0a6raGUfP+M0umyLdu/KdG6+Y3b0MSPUX1Tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:36:4f:58:78:bd:cd:ff:19:1b:d7:f9:56:34:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
        Validity
            Not Before: Jun  8 16:01:08 2025 GMT
            Not After : Jun  9 16:01:08 2025 GMT
        Subject: CN=241b575a288a7a35d1a77e215137ad18b952be02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:f3:0e:8c:d8:1e:1c:c9:9d:d6:1e:88:21:
                    7f:b1:12:cf:36:0b:41:fd:7f:cf:fb:96:12:b3:1d:
                    61:6d:8b:84:7a:0a:55:39:85:82:00:79:a3:a3:75:
                    8c:72:db:b9:bf:c5:45:ff:08:40:1b:cc:64:8f:a0:
                    ce:5c:7e:70:f0:51:14:62:85:f7:7c:fe:c4:fe:50:
                    26:a1:79:87:ac:1e:04:01:fe:85:85:47:68:7b:24:
                    4a:60:32:71:63:91:fa:c6:e0:a7:fa:0d:ca:28:6a:
                    8c:cf:8b:20:0f:02:b6:57:52:68:1b:29:9c:5b:47:
                    fd:43:16:dd:e0:9d:07:b6:12:57:88:99:03:e2:26:
                    d5:5e:ca:b9:e6:b8:31:98:40:3f:b9:7c:44:c0:b1:
                    9c:1a:89:e7:ad:dc:f9:88:1b:67:20:89:a8:67:c6:
                    d2:a2:8d:cb:7a:a3:53:8d:a8:84:8e:a3:7e:cf:02:
                    66:33:1f:14:52:b4:e6:ae:7d:06:9b:68:54:6c:99:
                    c6:45:53:d7:ab:e3:6e:66:ed:fe:02:aa:16:d5:4d:
                    82:06:79:16:5a:3f:39:17:82:84:12:be:a4:a3:98:
                    a4:19:a3:98:20:e7:ae:f5:77:37:64:3d:a3:02:bb:
                    0c:fd:63:be:a4:63:ce:67:86:fc:6d:99:20:71:5f:
                    fa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1B:57:5A:28:8A:7A:35:D1:A7:7E:21:51:37:AD:18:B9:52:BE:02
            X509v3 Authority Key Identifier:
                keyid:F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ef:e3:85:0f:85:7f:47:91:84:c2:f9:d4:22:0e:6c:4c:da:
         ef:c1:f4:27:c4:22:86:8d:19:9d:ce:01:e9:ce:fc:62:2a:82:
         c3:79:7e:a4:82:68:11:93:d7:43:63:76:70:e5:cd:de:09:c8:
         98:a2:59:bc:19:4b:ef:d0:9f:e6:88:ee:d1:13:77:8a:37:67:
         e8:a6:28:53:c3:f4:e1:4f:ff:0d:45:74:77:88:10:4f:23:f5:
         05:2b:50:76:db:4d:99:06:97:bc:4a:97:e2:2c:44:61:0c:e3:
         1e:af:6d:1e:98:6d:2d:8b:6e:f0:31:8b:82:7f:21:6c:6e:e4:
         ac:b3:cd:79:fc:40:8d:db:76:2e:5b:62:f2:04:52:0f:cf:38:
         47:98:2f:2c:1f:d8:2d:31:00:a6:88:72:c3:9e:60:4a:00:0e:
         16:5b:dc:26:58:89:1b:21:32:20:b6:a3:83:62:76:34:40:2b:
         fd:95:9d:e6:92:27:73:c0:4c:42:9c:95:8c:1d:75:23:9a:e5:
         69:98:5e:1d:ae:8f:6f:d0:d7:6d:cb:7f:c2:d6:55:39:3c:81:
         56:d0:9e:b6:eb:3b:06:1c:3e:3b:04:55:29:01:53:d6:40:0e:
         88:e7:74:a8:18:6f:8b:3d:ef:8b:1a:93:82:68:ef:2f:f9:33:
         df:42:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:41:06 2025 by rpki-client