Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File:                     8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier:          H/4Ei2cpPJiUTZsUQ+27RAzVz+JlIMpf7Cr3o53KFq8=
Subject key identifier:   10:7F:2F:1E:B6:07:1B:2C:59:F8:19:2A:C7:62:5A:60:E6:55:76:93
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer:       /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial:       0196A61CA6AA990AEA388DFF3F49F7507286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number:          0211
Signing time:             Tue 06 May 2025 15:00:17 +0000
Manifest this update:     Tue 06 May 2025 15:00:17 +0000
Manifest next update:     Wed 07 May 2025 15:00:17 +0000
Files and hashes:         1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: VLW9qHN3Relx3kWYU808QKl2MLzFu2QwbuTaVn/0iGs=)
                          2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:1c:a6:aa:99:0a:ea:38:8d:ff:3f:49:f7:50:72:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
        Validity
            Not Before: May  6 15:00:17 2025 GMT
            Not After : May  7 15:00:17 2025 GMT
        Subject: CN=107f2f1eb6071b2c59f8192ac7625a60e6557693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:82:78:66:8c:95:10:32:73:71:40:40:3f:
                    56:da:bb:54:31:bd:5a:e2:8b:3e:29:31:95:ce:f5:
                    9b:45:f0:a5:f6:6d:17:f9:35:f4:a4:8c:a9:19:1b:
                    15:40:53:7c:e7:08:25:f4:ab:4f:42:d5:35:2e:d0:
                    8f:12:1e:f9:ef:bc:eb:96:b5:04:30:7f:e4:f0:35:
                    6d:05:fe:18:c1:27:b0:02:10:bf:98:5b:6b:95:9d:
                    05:b9:10:6d:ac:cb:75:0c:18:e7:08:6f:8e:3f:65:
                    fe:70:84:12:48:f7:cd:80:33:24:29:a8:52:4b:74:
                    a4:27:da:ee:3c:21:c7:be:ae:c3:fe:e5:f0:23:27:
                    f3:57:e3:83:57:00:6b:5e:59:da:d9:a2:ff:6b:68:
                    15:55:2a:35:77:65:2c:3e:9b:dc:3e:f7:94:b2:06:
                    d6:f9:e5:00:e1:89:ea:4c:3f:ea:59:d9:3e:75:a5:
                    77:11:cc:68:7d:7d:e3:7f:bc:e5:7f:d7:d8:7c:89:
                    d9:df:f7:86:79:47:7c:5d:81:32:e5:0d:df:07:39:
                    78:c2:15:be:87:ef:90:00:4f:88:4a:c7:a7:14:66:
                    62:e9:9a:6c:61:28:12:57:b1:ba:06:0b:c4:53:55:
                    41:ee:85:86:87:a6:0c:74:08:6d:1c:08:a2:8b:9b:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7F:2F:1E:B6:07:1B:2C:59:F8:19:2A:C7:62:5A:60:E6:55:76:93
            X509v3 Authority Key Identifier:
                keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:86:f7:f8:24:d0:a1:60:58:8f:60:48:e4:60:7f:f4:05:46:
         65:d4:82:b8:de:19:3a:af:78:94:07:fa:94:d9:69:6d:92:a1:
         b5:b4:59:86:c8:7c:99:a7:84:f8:ca:1c:98:aa:cd:b6:71:58:
         06:c9:ef:c7:90:2f:d8:7b:fb:49:0b:34:c2:af:e9:00:06:01:
         19:f5:f1:41:37:60:9a:cc:3e:4f:12:e5:e4:4d:ac:53:21:bd:
         f1:4e:64:1d:65:1e:7f:0a:ce:41:a5:c2:1c:27:60:aa:ff:35:
         cc:ab:68:7a:25:fa:9c:b3:eb:d2:3c:f4:bd:b9:1c:28:f1:ac:
         6a:42:8d:88:4a:bf:79:bb:5a:b6:a2:66:f4:c5:73:e6:af:1d:
         f9:86:cc:1c:df:5c:87:52:c0:2e:fb:f1:12:42:eb:8d:2d:0c:
         b8:15:ab:e3:5c:d6:76:92:74:d9:8e:14:42:e6:de:03:18:94:
         79:98:99:99:37:9b:73:61:0c:34:9f:95:a0:0a:39:6e:0a:ab:
         06:76:69:f7:02:1d:44:bf:54:bf:4e:95:79:88:25:e2:30:e9:
         1d:3d:74:f1:4a:df:df:3c:d0:a8:1c:36:d5:ba:45:65:71:ed:
         e3:a5:9c:f2:57:cf:b2:08:d5:7f:08:73:e0:4b:81:3c:50:4b:
         c3:1d:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:51:25 2025 by rpki-client