Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File:                     yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier:          CO9Gu4saKiHhV4QwZUk/tejCCtkYRsJlLqcajzJnB2I=
Subject key identifier:   A0:CC:E5:B8:E9:E3:50:E4:1C:B8:D6:76:84:D0:50:0C:59:C2:8F:FA
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer:       /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial:       0196B8C81626D6393CD464455F645DDF0DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number:          0AEB
Signing time:             Sat 10 May 2025 06:00:42 +0000
Manifest this update:     Sat 10 May 2025 06:00:42 +0000
Manifest next update:     Sun 11 May 2025 06:00:42 +0000
Files and hashes:         1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=)
                          2: qQtVwx26Q11uVtNfnJzbmJUlIFc.roa (hash: Us6KZhFay/pkNMEXF/JAjIY/J6B0ztmxrmyXEzSbCqU=)
                          3: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: rTzA1wy+MUamSQv7JVGxXHL98nZhpDfncf4T307OkcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:c8:16:26:d6:39:3c:d4:64:45:5f:64:5d:df:0d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
        Validity
            Not Before: May 10 06:00:42 2025 GMT
            Not After : May 11 06:00:42 2025 GMT
        Subject: CN=a0cce5b8e9e350e41cb8d67684d0500c59c28ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:73:c8:4a:e7:94:5b:12:3b:04:95:39:d2:
                    15:96:49:2b:9a:56:82:0b:26:05:79:b5:65:61:60:
                    df:bc:44:1c:f0:05:a8:e7:da:d7:7e:ac:5d:de:08:
                    c1:9c:c1:4c:28:57:05:42:a4:b7:f5:d0:03:38:6e:
                    bd:92:ca:d3:c8:a1:8a:16:fa:1d:27:c6:41:c0:22:
                    dd:69:d1:e6:4d:f2:2a:82:88:bc:67:f1:5d:a5:ac:
                    44:ee:dd:1c:20:63:ff:f6:7b:da:df:3b:f2:85:c5:
                    7b:af:7f:df:2c:ad:e8:35:36:6e:ad:62:3a:2c:8a:
                    18:7a:34:69:40:8a:63:23:ef:ae:eb:1c:d0:f2:d5:
                    f6:a3:f0:45:6f:64:fb:04:9e:be:55:38:d4:49:2f:
                    42:0b:ca:4c:68:ab:7b:60:d8:20:b6:99:58:5e:be:
                    59:4d:b2:b8:c6:61:24:d0:47:3a:7b:b5:91:58:e0:
                    f3:01:f7:4a:d7:a8:f7:59:42:d1:4c:c0:2d:4e:1e:
                    6e:bb:55:42:0f:47:43:fb:a7:9d:fa:61:f0:28:5b:
                    a1:81:89:91:81:33:17:e8:aa:42:45:7d:92:3a:66:
                    9d:a9:6f:ce:72:a7:cf:49:8e:8a:b5:6c:ca:72:c5:
                    31:d2:be:ad:0f:3d:34:ec:99:af:b8:27:78:96:da:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CC:E5:B8:E9:E3:50:E4:1C:B8:D6:76:84:D0:50:0C:59:C2:8F:FA
            X509v3 Authority Key Identifier:
                keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:54:12:21:b0:d5:49:c4:86:a8:b9:19:31:b0:76:1b:a4:85:
         de:54:fb:f7:58:76:d2:f3:90:cf:e2:70:68:50:7c:38:d5:34:
         db:dc:6f:8f:21:4c:4f:5d:9d:ec:2c:70:88:9c:08:a5:01:f1:
         a7:9f:5e:43:aa:9a:e2:01:37:16:dc:97:85:5d:5c:00:df:e2:
         6a:94:ce:4b:b3:15:8b:6c:cd:ae:2f:d8:9f:4e:cc:20:68:29:
         10:05:d5:57:e7:0e:34:2a:87:f6:f1:50:50:d9:ec:a9:93:24:
         0c:40:22:0a:f6:87:e9:2c:3d:b7:1b:48:1a:9a:08:a7:9c:c6:
         26:fe:79:83:74:9c:58:82:0a:12:5e:ad:74:25:a2:ec:90:81:
         8e:35:90:30:42:5f:8c:5b:cb:6d:54:0d:11:95:a6:bd:a3:e0:
         a7:6b:d1:d9:39:98:16:de:29:b9:e0:83:1a:62:58:28:af:d6:
         f5:ee:6c:cf:f0:19:8c:64:76:47:90:78:8e:a9:79:57:aa:65:
         c8:47:c8:af:89:1f:85:1d:e0:9b:a4:ad:79:e5:87:55:53:a2:
         91:6b:96:a0:81:c4:8c:1a:73:16:f8:b6:1a:9b:8e:91:1e:69:
         19:57:78:0a:9d:6e:b6:2c:2c:4a:97:5f:2c:75:75:10:e9:4d:
         05:c2:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:26:19 2025 by rpki-client