Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File:                     8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier:          br7ojVJyZ+QXfY/+YpAwvGCUlPOkGJd2YuP9nT1v4j8=
Subject key identifier:   70:B6:73:B8:95:E7:81:18:1A:B8:E9:C5:D5:98:19:89:D8:1A:6C:A9
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer:       /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial:       0196AC8CDD14A65AFB0FE58C81B485121449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number:          0977
Signing time:             Wed 07 May 2025 21:00:34 +0000
Manifest this update:     Wed 07 May 2025 21:00:34 +0000
Manifest next update:     Thu 08 May 2025 21:00:34 +0000
Files and hashes:         1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: s/GxDZeij+dgcawy/VPTXHxBT9mQ220YJyCTmkQXFdI=)
                          2: TqtHjEwEgPXdT8pg7HJGWpoB6aI.roa (hash: JiojTj7/u167MnISfmEDzN29ADgR4Ig1J4bZKyBHw7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:8c:dd:14:a6:5a:fb:0f:e5:8c:81:b4:85:12:14:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
        Validity
            Not Before: May  7 21:00:34 2025 GMT
            Not After : May  8 21:00:34 2025 GMT
        Subject: CN=70b673b895e781181ab8e9c5d5981989d81a6ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:21:36:8f:fb:f7:f5:f6:46:bf:b7:fe:76:
                    9d:eb:15:e4:ed:70:b1:f1:65:76:5d:22:b0:b9:1c:
                    fa:43:98:e1:48:d8:fe:a8:56:9a:74:dc:9d:4e:3c:
                    bf:cb:1c:9e:47:d9:27:0b:f6:9e:c3:ba:76:b3:ed:
                    5f:71:65:3c:64:ec:7d:2c:eb:22:37:b2:d4:a6:2e:
                    b6:36:c8:56:53:d1:75:93:ea:e2:6b:42:68:e3:72:
                    f8:66:11:72:e5:f0:65:17:e5:a8:be:6a:79:f8:3c:
                    7a:f7:18:2a:d8:42:26:0a:0f:e7:9b:6b:16:35:a5:
                    68:1e:33:75:7e:ea:60:b6:31:39:49:35:5c:35:23:
                    a6:c4:4f:08:82:07:f2:f3:b5:c0:b3:4b:97:6c:1d:
                    c8:09:17:b9:f9:1d:bf:a6:39:1a:c2:76:1e:d8:14:
                    bf:f9:07:36:5a:dd:81:80:96:98:9d:0d:5e:0e:23:
                    f5:22:57:05:43:8b:f5:01:c7:42:ac:be:06:e4:53:
                    8f:05:bd:a9:5b:00:d4:f2:c4:19:3d:50:b0:a5:4c:
                    8e:5e:e7:06:f7:3b:1a:c8:f5:da:b4:b7:de:5d:86:
                    4e:9d:0e:52:b7:3c:6d:5e:31:11:30:0c:1f:10:de:
                    7d:97:dc:2f:0e:79:36:ac:0a:53:45:2a:3e:62:51:
                    7f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B6:73:B8:95:E7:81:18:1A:B8:E9:C5:D5:98:19:89:D8:1A:6C:A9
            X509v3 Authority Key Identifier:
                keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e0:10:17:2a:5f:20:9d:de:6e:05:56:86:b0:41:be:f5:f2:
         e8:1b:86:04:e4:21:fe:1a:25:16:f0:7d:9a:ea:2e:67:30:00:
         49:b9:9e:1c:19:1b:2e:a4:24:27:fa:72:a9:a3:f4:b2:e4:bb:
         f9:fb:fe:f0:1c:0c:4a:27:72:6e:de:71:7f:bd:45:d9:d1:2c:
         b1:d5:27:22:53:f9:54:22:ad:9a:e0:c0:cf:83:ae:ce:95:bf:
         ff:0c:22:38:69:58:f1:98:0b:54:6b:cc:cc:60:c5:31:12:19:
         2a:ca:57:f3:80:0e:47:59:b4:45:08:bf:4f:83:5a:b6:a1:07:
         13:c3:9c:90:0b:80:76:7b:f4:70:e4:f7:0c:06:b1:05:40:6c:
         65:20:72:a6:76:ed:7b:21:8e:05:61:c6:01:84:f3:9c:94:c2:
         5f:dd:5e:88:25:d7:af:de:86:bf:6c:c8:82:92:c7:fc:a7:bb:
         de:18:34:65:fd:f7:72:1c:56:ee:ac:a2:70:2b:26:27:0b:8e:
         aa:15:89:fa:7c:27:43:2f:82:ac:2b:b6:3a:9a:fe:fb:5e:3c:
         f0:36:3e:9c:8a:7f:e5:73:85:47:c3:36:00:71:51:d8:3e:51:
         a4:5e:be:74:86:46:46:e1:77:0f:74:e0:2b:47:26:9d:03:1c:
         fb:d0:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:27:07 2025 by rpki-client