Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
File:                     80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft (raw, json)
Hash identifier:          0t/+JsPphX0L0YmYVbWx/t94XCggkGwb/u7eFJX1ytY=
Subject key identifier:   B8:E6:27:B4:F8:64:BF:4D:84:BB:16:06:21:95:C4:DB:D1:AB:2D:B4
Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
Certificate issuer:       /CN=f344a9f3665084f5009921ac52d119750beed4b4
Certificate serial:       01969FE3C78193E6BD55492C019889B0A63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
Manifest number:          1527
Signing time:             Mon 05 May 2025 10:00:27 +0000
Manifest this update:     Mon 05 May 2025 10:00:27 +0000
Manifest next update:     Tue 06 May 2025 10:00:27 +0000
Files and hashes:         1: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl (hash: RdvqnuLAgxWDJjFgjD0KyjmqEGjVJmBddBnb94BKNsE=)
                          2: duO9LxBTkVs9bWkFXNzc7GNBnLM.roa (hash: qNyvixX6BJstTr21KHWMkBm39t0mtYSLiR/YYgK3594=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e3:c7:81:93:e6:bd:55:49:2c:01:98:89:b0:a6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4
        Validity
            Not Before: May  5 10:00:27 2025 GMT
            Not After : May  6 10:00:27 2025 GMT
        Subject: CN=b8e627b4f864bf4d84bb16062195c4dbd1ab2db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:2b:b7:34:6c:53:35:00:e1:4e:a8:55:03:
                    67:d7:43:94:85:8e:71:96:02:34:8f:00:c6:29:1a:
                    d2:9f:4b:b7:6e:3c:6e:fd:20:4f:8e:be:cd:f1:50:
                    90:28:af:42:60:f0:d2:0c:7d:24:1e:ff:f0:06:94:
                    56:2c:0d:06:2e:8e:69:c0:28:2d:5c:eb:9b:25:89:
                    82:fb:64:61:e3:f1:48:e3:88:8c:6b:85:36:76:0f:
                    e3:0f:7a:e7:6c:46:b4:e7:24:33:40:ce:a7:12:1a:
                    b9:e4:39:11:01:1c:0f:1c:78:b0:c7:1e:75:e8:51:
                    bb:a1:0d:6c:c2:98:45:99:7f:45:52:f5:4f:ab:43:
                    41:b8:80:2d:a4:48:77:4e:e0:61:88:7f:6b:d7:8f:
                    49:fd:e1:12:67:01:f9:84:ac:9f:18:65:6b:47:8f:
                    89:23:62:a6:64:d6:71:0d:ee:98:5d:66:42:e7:31:
                    c7:21:42:83:ca:e9:ff:c8:8e:48:45:cf:37:42:fb:
                    09:15:40:22:d6:57:84:b8:0b:38:ae:b4:68:65:2f:
                    d4:b3:ce:3a:63:8c:bd:a2:df:a2:0c:ac:0c:d7:ce:
                    5b:9f:2f:01:9e:cb:65:bc:4e:bc:d9:e3:37:08:4f:
                    25:9f:51:ed:61:81:b8:b1:59:c4:8c:c6:81:a2:81:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E6:27:B4:F8:64:BF:4D:84:BB:16:06:21:95:C4:DB:D1:AB:2D:B4
            X509v3 Authority Key Identifier:
                keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:1d:ad:b4:3b:57:7e:73:1a:72:8d:61:e6:89:21:a8:08:
         cb:13:c6:91:63:fc:32:3b:09:91:3b:bc:35:c4:15:de:68:7c:
         38:fa:f2:8f:1e:b9:af:53:b9:43:5e:62:34:94:dc:ee:ba:e8:
         5a:5a:5d:c4:39:ad:17:85:0c:a3:83:07:6c:ce:85:9d:dc:bf:
         e8:61:26:8f:eb:2c:19:83:0d:5d:5e:c3:a7:ff:1d:cc:24:ca:
         af:78:ae:b7:24:f2:6e:88:37:32:4e:8b:f9:14:03:92:20:0e:
         2b:a8:45:af:ab:9c:8c:6b:45:4a:68:8d:bf:86:e9:5a:c9:36:
         a0:00:a9:9a:31:ce:dc:44:43:26:58:3b:e4:74:c7:c0:96:54:
         4a:66:e6:2d:66:f2:e0:62:d2:24:02:68:52:da:fc:93:90:ac:
         8d:00:d4:38:83:b3:91:8a:36:ab:21:ce:89:bf:76:64:f6:23:
         b3:62:f3:df:5c:6b:84:2d:5a:6b:2b:5c:2d:17:99:3a:e4:b5:
         05:53:cf:b8:10:3e:8f:fa:ff:6c:ab:1b:83:28:47:54:70:c9:
         d6:e1:1e:17:28:6b:84:c0:69:bf:0e:02:23:02:95:6d:d7:74:
         21:f7:5f:4a:8e:99:23:43:34:c3:60:52:c0:0e:9e:92:2f:f3:
         8d:66:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:04:38 2025 by rpki-client