Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File:                     z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier:          jGYAWX9l9HEf3lUqrGRjte05AKpJdpWd2OQAH77F/YE=
Subject key identifier:   50:8D:50:7F:C4:10:D9:AD:93:D6:56:74:00:7F:10:18:83:0F:8D:1E
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer:       /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial:       01958F9841E7DC8A07513B20056428993256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number:          1498
Signing time:             Thu 13 Mar 2025 13:01:14 +0000
Manifest this update:     Thu 13 Mar 2025 13:01:14 +0000
Manifest next update:     Fri 14 Mar 2025 13:01:14 +0000
Files and hashes:         1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
                          2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
                          3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
                          4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
                          5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: at/U2uRxtXWfbroFk9j1QF4+1Bkmb9zT2xyw1pU9QMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:98:41:e7:dc:8a:07:51:3b:20:05:64:28:99:32:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
        Validity
            Not Before: Mar 13 13:01:14 2025 GMT
            Not After : Mar 14 13:01:14 2025 GMT
        Subject: CN=508d507fc410d9ad93d65674007f1018830f8d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:32:60:20:36:75:e7:ec:2d:09:05:4e:b4:
                    5a:f0:be:c2:fe:f9:f9:e6:37:fd:b5:5c:53:fb:fe:
                    1c:90:89:ac:a1:67:28:bb:ea:2a:df:be:2f:c4:67:
                    21:4f:21:4d:f9:d8:10:0a:c8:c7:66:fd:11:54:99:
                    34:86:ed:13:90:16:28:77:e3:6f:7e:32:6b:12:c7:
                    38:37:10:b8:0e:8a:42:a6:fa:8e:50:0a:85:f5:aa:
                    f4:7a:82:50:3c:37:e8:5d:5c:a9:6a:e0:d9:1f:e0:
                    6d:3f:e6:ab:14:61:e0:02:bd:14:4a:4d:8c:d0:53:
                    18:65:3c:15:47:fa:5b:7a:95:73:2a:51:5e:dd:2a:
                    16:54:12:ca:da:d4:16:ca:1f:65:7d:17:f3:e7:cb:
                    fb:d0:52:ee:4f:8c:90:ef:e7:eb:3a:eb:bb:57:f0:
                    0b:97:7a:ee:61:fa:4e:3a:fa:2c:75:8f:7e:18:0a:
                    f1:4d:b1:2e:ed:e7:7a:5d:43:2b:42:3c:4e:e0:63:
                    13:df:2f:76:b1:13:7a:a7:5c:76:12:04:35:e7:72:
                    d0:10:6b:f8:56:b1:de:3c:bb:21:29:87:78:e7:b3:
                    a2:ac:3d:8f:6a:20:ab:13:33:ea:ad:06:1d:fb:bb:
                    bd:4e:86:fe:af:c3:d7:1a:d2:f4:e7:20:1a:ad:e7:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8D:50:7F:C4:10:D9:AD:93:D6:56:74:00:7F:10:18:83:0F:8D:1E
            X509v3 Authority Key Identifier:
                keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:9d:4c:a3:0a:7d:da:2d:b7:0d:92:10:d7:c8:2e:c1:07:
         fb:70:df:66:99:5b:b0:e1:db:ef:bb:7a:98:0f:26:51:64:77:
         a6:ee:22:1f:a2:29:db:ac:a5:86:2a:ba:44:70:c6:24:4b:5f:
         b8:71:05:48:69:a4:de:03:e2:d5:81:47:88:14:15:18:4d:a3:
         d5:9d:80:01:27:74:e5:40:92:e8:0c:bd:fc:63:ac:19:db:e4:
         8f:37:55:66:3a:84:64:74:6b:a8:38:7f:35:b6:5e:db:60:67:
         c7:58:00:2d:a1:1a:c6:43:fd:9c:93:c6:a8:ec:9c:25:e0:f3:
         ff:27:46:66:06:53:a1:f2:10:4a:6e:10:23:49:6c:2a:6a:67:
         76:cb:c2:9a:fa:a7:b9:1f:54:ef:58:3a:8d:e2:8a:8d:0e:d1:
         43:f3:b6:06:5f:98:ab:a0:ec:7e:cc:23:3c:d8:7e:2f:99:2d:
         13:15:2d:ad:c3:04:c6:9a:54:24:95:79:ed:5d:28:5c:70:4c:
         a8:0b:c2:f7:c9:1a:dc:bc:9d:5a:22:8a:ea:d8:53:85:81:d7:
         d7:f5:8d:ae:63:bc:af:e1:44:5b:57:22:c9:09:6d:3b:42:78:
         6c:e1:0e:d7:cf:7e:48:92:d0:aa:b4:36:a1:d6:70:47:95:87:
         d6:68:b9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:34 2025 by rpki-client