Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File:                     tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier:          F09CDB0Bem5htDxouu5xLPMit4vLdMb7S3CPTyDNyRU=
Subject key identifier:   B8:2E:25:C3:4D:7E:4F:0C:64:20:B5:10:AF:7C:88:EC:05:F4:81:49
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer:       /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial:       0196AE7B37B6A4788DACD256392A7240F1E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number:          0F8B
Signing time:             Thu 08 May 2025 06:00:32 +0000
Manifest this update:     Thu 08 May 2025 06:00:32 +0000
Manifest next update:     Fri 09 May 2025 06:00:32 +0000
Files and hashes:         1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
                          2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: 3PqlOp0r2c4v2stbsYJD3ualdAkInEwaOI/LqozXTxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:7b:37:b6:a4:78:8d:ac:d2:56:39:2a:72:40:f1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
        Validity
            Not Before: May  8 06:00:32 2025 GMT
            Not After : May  9 06:00:32 2025 GMT
        Subject: CN=b82e25c34d7e4f0c6420b510af7c88ec05f48149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:54:23:2c:52:d6:48:05:16:91:4d:21:3d:
                    03:76:5b:0f:85:04:2c:af:ba:2d:cd:e8:a9:97:f2:
                    48:2f:46:3e:02:85:70:15:68:7c:f2:20:07:69:af:
                    f6:fc:6e:08:84:0c:6b:91:13:65:77:78:23:8d:c9:
                    89:65:e8:d3:76:54:a5:92:2c:3c:97:14:42:85:8b:
                    f4:72:f3:4c:9d:7f:3c:cf:34:b9:30:46:dc:bb:54:
                    95:3b:4f:50:f2:d2:21:69:b2:51:3e:23:80:17:6a:
                    61:e9:a7:68:06:62:3d:72:72:42:bd:8b:28:38:dc:
                    bf:bc:10:40:6a:02:16:46:26:71:7b:1d:8a:4d:b5:
                    88:1e:86:88:53:12:d7:0a:84:2e:de:97:25:f6:9d:
                    a5:ff:c3:c7:de:f6:e2:05:98:ff:82:a6:26:9a:c6:
                    d3:e7:87:a1:55:68:23:5c:5f:54:ed:d2:a7:dd:a9:
                    fa:fe:2e:81:74:47:65:27:f1:16:72:47:a5:b1:0d:
                    25:ad:03:c9:65:b4:f4:35:9c:67:6f:91:02:1c:c8:
                    66:4d:8a:db:85:a6:bd:0e:9c:a1:9f:61:33:81:d3:
                    76:49:e8:8f:4b:17:c4:a8:d4:64:58:f2:54:18:24:
                    18:a8:24:ff:6a:79:38:bb:b3:32:29:07:6c:a5:98:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2E:25:C3:4D:7E:4F:0C:64:20:B5:10:AF:7C:88:EC:05:F4:81:49
            X509v3 Authority Key Identifier:
                keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:55:57:76:80:9f:e0:11:f9:31:4e:52:35:22:68:61:f8:76:
         2d:9d:88:98:84:8e:5e:f8:b6:56:d1:00:44:2c:3d:73:de:3d:
         d7:9a:4b:1a:17:a3:88:09:7f:1e:d3:79:ee:b9:f1:e9:4c:ce:
         1c:69:6b:b0:1e:d6:ef:8f:c9:6a:e2:5b:23:c0:e1:44:1d:0c:
         e4:57:9e:df:86:25:fb:6d:34:97:2f:87:36:a0:56:48:19:19:
         d4:e4:11:43:1a:a7:ba:8e:a0:4c:ef:8d:d0:20:35:d5:82:e6:
         b5:58:60:66:54:5b:ec:c2:83:35:53:02:14:2c:7a:3c:98:77:
         47:01:8a:f1:fc:f6:6f:3a:78:3e:bf:a0:da:ad:95:db:24:1e:
         62:06:9d:66:31:9d:31:a7:29:f8:75:6f:3d:d7:df:40:8c:f0:
         b6:91:d5:22:96:d0:1f:27:5a:c7:e3:3e:84:82:2c:1f:db:5f:
         38:61:28:4a:f1:ec:e3:c7:28:19:27:b7:b6:e2:a7:5c:a6:4d:
         17:da:75:2d:bb:5d:31:44:70:b8:58:bd:82:f7:95:fc:a3:2d:
         6c:e9:af:17:ba:79:7f:ce:b9:71:3e:8b:87:9f:34:14:11:d5:
         09:59:b9:94:d2:37:db:f1:50:2d:d2:90:52:da:35:e7:e9:8c:
         e3:ab:98:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:12:50 2025 by rpki-client