Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          cFmbpYE6MJ2JAOTS4GX9HNplPHHPqRhekjJ/WYwGIJo=
Subject key identifier:   9A:C0:AB:3D:2F:C0:D4:CC:CD:0B:AB:15:61:4D:55:29:C6:6B:86:B1
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       0196108E5D719AE79A0F4C1E998D7EB48BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          14DC
Signing time:             Mon 07 Apr 2025 14:01:27 +0000
Manifest this update:     Mon 07 Apr 2025 14:01:27 +0000
Manifest next update:     Tue 08 Apr 2025 14:01:27 +0000
Files and hashes:         1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=)
                          2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=)
                          3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=)
                          4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=)
                          5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: NRBQ46RLuvpBAOnmL/dmK1dHkbXhQUjJl4G1PbWRHvk=)
                          6: kgtXMGVq_yiG6jbCmetTa_cdZEI.roa (hash: 6jOU2wUAoyQfpjSCtb3mycfBqwA3lOt9bOnarXx4iMo=)
                          7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:8e:5d:71:9a:e7:9a:0f:4c:1e:99:8d:7e:b4:8b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: Apr  7 14:01:27 2025 GMT
            Not After : Apr  8 14:01:27 2025 GMT
        Subject: CN=9ac0ab3d2fc0d4cccd0bab15614d5529c66b86b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:a4:da:09:41:96:29:2f:b5:3d:e9:d3:65:
                    49:1d:18:e3:29:9b:10:24:1e:d1:a7:40:c9:c7:40:
                    4e:82:c0:db:54:26:af:88:54:51:3e:6a:dc:2a:74:
                    2a:26:00:95:58:3e:a1:b4:e1:77:5f:b4:6f:ce:7a:
                    f1:58:df:56:a6:c1:cf:91:fb:1f:67:e5:b9:c2:43:
                    37:ee:0c:e4:8a:e4:99:21:26:e2:fe:10:33:14:f1:
                    90:22:5b:fc:f0:fe:21:04:ae:89:ca:a8:de:fe:7e:
                    45:5d:51:ec:57:48:21:ff:7f:75:24:70:c8:79:66:
                    c1:9e:64:04:9d:47:c4:b0:e1:b1:19:ae:f6:ae:84:
                    95:2e:ca:cf:db:fe:4c:b4:3b:50:1b:34:fd:9e:ba:
                    03:b5:58:8e:61:42:f8:51:8a:1c:50:e9:9c:e8:d8:
                    21:ce:38:00:b9:b2:80:62:dc:d1:3d:62:85:90:da:
                    b6:0b:89:3a:91:12:9e:f1:ad:d6:66:61:30:0e:f8:
                    9d:13:42:be:31:7f:57:fd:51:5a:d4:3b:88:88:0c:
                    0d:52:75:d1:48:f6:97:7d:1e:35:e9:d8:de:fb:73:
                    80:95:c2:37:99:2f:93:41:d9:00:ab:95:55:eb:80:
                    be:e7:0c:85:3c:fa:40:c9:04:0b:97:4a:c3:d0:e3:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C0:AB:3D:2F:C0:D4:CC:CD:0B:AB:15:61:4D:55:29:C6:6B:86:B1
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9f:91:81:5a:90:65:e7:d5:b5:4a:0f:8a:06:05:e6:6d:fd:
         a2:54:05:ee:e1:54:3c:18:b5:b6:d2:3f:ce:a0:48:71:34:c9:
         6a:2c:6e:3b:60:28:3e:bb:35:f4:d7:00:58:d4:39:cd:c6:30:
         30:e1:fc:c2:ad:ae:9b:74:52:4d:78:81:9a:fb:e7:c2:4e:f2:
         c5:7b:13:1a:29:bb:25:ce:dd:c1:10:85:31:73:60:9e:af:24:
         61:a0:cb:cf:27:92:c7:57:e0:7c:4c:b5:48:b0:be:7d:b3:69:
         d6:87:7e:27:05:b3:7b:61:01:38:5e:5f:94:e3:8f:49:36:92:
         99:a0:36:e6:08:1e:f8:81:0d:80:e9:4f:93:2d:d4:8a:dc:22:
         c8:15:45:5a:6a:d1:55:60:68:d2:75:7c:a2:34:7d:fc:db:2f:
         4c:d8:97:7a:b3:30:ba:23:0f:20:70:3c:48:84:3b:2c:a0:6f:
         2d:ea:31:f6:4d:ba:ca:e3:18:4f:1e:03:a7:92:bc:32:a6:26:
         50:31:17:3f:7a:6c:fc:09:40:29:d3:28:cb:bb:f3:ec:52:10:
         b9:93:ca:96:ec:7c:a7:1b:75:e3:24:2b:3b:88:65:05:c6:97:
         3f:ae:ce:93:51:23:3d:a9:09:55:8e:f0:a6:8b:06:b9:af:59:
         24:b1:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:20 2025 by rpki-client