Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File:                     ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier:          iYyCHpxg1desDf0nyoxA72Na+mIzSTqteHVxl3W1uiM=
Subject key identifier:   B5:DA:53:2E:12:DD:9F:B6:E7:A3:F5:ED:AF:22:C7:DC:30:3D:4E:0C
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer:       /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial:       0196A12D9466E29606B75B55E3A1F1F7C7D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number:          08B8
Signing time:             Mon 05 May 2025 16:00:40 +0000
Manifest this update:     Mon 05 May 2025 16:00:40 +0000
Manifest next update:     Tue 06 May 2025 16:00:40 +0000
Files and hashes:         1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=)
                          2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: rpLWJcTPQc/mgmDSOR430jFVhAZBmdDMUwcZvuEagsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:2d:94:66:e2:96:06:b7:5b:55:e3:a1:f1:f7:c7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
        Validity
            Not Before: May  5 16:00:40 2025 GMT
            Not After : May  6 16:00:40 2025 GMT
        Subject: CN=b5da532e12dd9fb6e7a3f5edaf22c7dc303d4e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:79:35:9f:57:23:63:98:06:40:1c:25:11:
                    05:70:81:d8:e9:fb:58:36:1f:79:d2:94:ae:59:4b:
                    cf:cb:b8:01:01:eb:5d:e0:04:d0:df:a7:31:f8:1f:
                    12:bc:2f:58:57:9c:40:03:5a:22:e8:0d:ba:ab:89:
                    1c:70:dc:e3:60:ba:cb:d4:2b:0f:fe:3a:5b:34:2d:
                    27:92:e3:0d:91:22:07:99:a3:3c:c9:a1:8c:c0:94:
                    64:15:5b:c5:01:4f:44:6e:ba:1a:96:6c:ad:ba:8c:
                    44:ef:ae:88:a7:f9:b2:32:10:57:1e:2e:a0:0c:d8:
                    fb:ea:92:22:85:20:45:fc:6a:13:3d:b1:eb:c4:06:
                    0b:46:47:ab:19:f4:3a:e1:ea:c6:44:fb:fc:fd:2d:
                    c1:03:04:cf:7d:73:b1:83:03:7b:38:38:26:3a:9c:
                    aa:12:b3:c7:74:be:82:dd:ed:76:b4:b6:33:e3:eb:
                    c8:f3:dc:12:32:34:ac:f9:3a:66:df:d1:9e:0f:5d:
                    30:a3:a8:80:54:f6:43:55:f2:7a:8a:ae:dc:8c:64:
                    f3:d6:88:62:53:45:46:03:c8:65:78:89:5b:b0:53:
                    48:4a:1d:98:d8:b8:40:ac:10:67:38:9a:6e:03:a4:
                    15:88:58:81:20:c0:c9:4a:5f:0c:07:bf:1c:69:4e:
                    ec:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DA:53:2E:12:DD:9F:B6:E7:A3:F5:ED:AF:22:C7:DC:30:3D:4E:0C
            X509v3 Authority Key Identifier:
                keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d1:90:e7:9c:b9:ef:7a:ea:d5:55:c6:fe:1d:f0:9b:93:c9:
         39:ae:f9:53:fc:f5:b2:94:94:65:40:21:79:30:ae:37:2e:51:
         d2:1c:15:c4:5d:98:28:e6:9b:6e:ec:92:68:08:12:9c:ba:6b:
         20:74:60:1a:6c:d8:4a:e8:b5:3d:c5:25:84:89:06:c5:46:4e:
         5a:3e:e7:c3:68:3d:4d:10:36:f4:9e:5e:34:f5:ac:1e:53:8a:
         48:81:fd:94:47:74:f8:24:dd:40:11:ce:18:f2:8a:4c:7d:e4:
         98:80:67:65:5d:1c:04:ac:e1:a8:95:26:eb:b3:b4:f2:29:08:
         27:70:99:ab:f7:38:1b:cb:00:e4:f5:50:20:69:33:55:6c:d6:
         1d:27:37:6c:0c:d3:dd:9f:e8:ac:01:cc:43:ab:8f:14:5b:30:
         20:74:68:c4:57:e1:32:c3:16:6e:7f:16:2b:ae:f8:57:01:45:
         af:8e:b7:c4:30:70:52:de:56:16:a4:d1:2f:34:7e:c5:16:97:
         b1:f0:d3:71:b9:7f:5c:53:52:1c:fc:dc:31:55:b2:18:37:0d:
         55:76:14:44:d3:32:84:2e:22:a1:4c:c6:a5:de:25:d1:38:31:
         49:f7:3f:7e:db:45:b4:90:05:6b:76:f1:8b:80:3a:7c:7a:8e:
         55:4e:62:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:51:34 2025 by rpki-client