Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File:                     83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier:          2IV875Xj40PBwVi4Mxxu5cy2GV8Xj/DRUcl7+o4bclo=
Subject key identifier:   FE:6D:FE:9F:95:11:4F:6F:F1:A7:1D:E8:EC:EC:70:F0:C2:4A:7E:1F
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer:       /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial:       0196B5C76232F06E869D15F47EFD9A4FA69F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number:          0800
Signing time:             Fri 09 May 2025 16:01:04 +0000
Manifest this update:     Fri 09 May 2025 16:01:04 +0000
Manifest next update:     Sat 10 May 2025 16:01:04 +0000
Files and hashes:         1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=)
                          2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: bJAkC+NpwYLsLKpjcLzkr//kJUzeQUp549bjhvLBE3k=)
                          3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=)
                          4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 16:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:c7:62:32:f0:6e:86:9d:15:f4:7e:fd:9a:4f:a6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
        Validity
            Not Before: May  9 16:01:04 2025 GMT
            Not After : May 10 16:01:04 2025 GMT
        Subject: CN=fe6dfe9f95114f6ff1a71de8ecec70f0c24a7e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:24:12:ff:e7:a5:19:99:2d:0b:d1:9c:77:
                    e4:d5:70:89:4a:b7:18:20:8a:d4:c1:e4:55:e6:bb:
                    3e:c8:96:15:87:2d:58:f9:4a:2e:05:2b:2c:bc:5e:
                    ee:74:5f:01:7f:5d:63:c9:e4:68:31:55:6f:a8:c2:
                    c5:d3:ea:40:cf:83:32:41:1c:ad:3f:8a:c7:31:97:
                    5d:51:d7:87:fc:7b:d1:e2:5b:13:1d:35:d5:90:ea:
                    f2:bf:a0:15:22:81:d6:54:02:b2:6e:af:ae:bb:c2:
                    c6:2a:5d:c0:77:6f:60:39:3e:44:ba:5d:3f:c7:a6:
                    66:18:f1:01:1a:f4:b8:fb:fc:49:f6:ad:36:87:a0:
                    0c:12:98:ff:7f:e1:39:da:7d:56:30:30:4b:d8:0f:
                    46:56:98:d5:58:5d:b3:e8:96:bf:82:33:f4:2e:58:
                    ca:07:4a:b8:7d:ee:fd:2b:97:b4:2f:cb:23:ea:71:
                    5f:97:03:3b:8e:f0:fc:cc:52:0b:a3:3f:40:6f:ce:
                    5d:13:85:8a:43:d9:d2:16:56:38:e0:6b:4e:40:d8:
                    eb:f8:09:7d:e8:73:0a:d8:58:f8:75:6b:22:ad:dd:
                    53:3d:3d:da:e6:ec:e9:73:74:6f:74:36:df:4d:9f:
                    9e:7b:4c:31:ab:f8:e2:b6:37:4a:ea:49:30:a7:36:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6D:FE:9F:95:11:4F:6F:F1:A7:1D:E8:EC:EC:70:F0:C2:4A:7E:1F
            X509v3 Authority Key Identifier:
                keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:90:df:f0:a5:10:f3:95:b1:7c:53:80:b0:51:a8:3e:91:35:
         64:35:c0:37:7c:4d:87:23:96:f6:f9:43:82:7d:19:5f:24:23:
         4e:1d:74:b7:07:55:a0:e2:15:d9:f9:f6:ae:e8:f9:aa:c1:90:
         68:c4:95:0a:49:57:d3:1e:d8:c5:76:c2:75:cd:ad:bf:76:e5:
         82:bf:f7:4f:bd:0f:b2:d5:ad:e8:a1:71:1b:35:a6:ec:74:85:
         29:b4:71:d5:e4:db:2b:23:8c:5a:dc:98:06:12:ac:5f:5f:5d:
         b1:e5:7b:3a:38:38:8b:4b:38:fc:a9:c8:7c:6f:95:db:2a:a6:
         48:0c:38:05:f3:a6:3b:60:f1:66:5c:e0:be:00:1d:31:ef:9d:
         07:a5:ee:a4:90:f2:e2:d7:2b:ef:5a:78:45:6f:51:8b:0f:b5:
         e2:db:0d:1d:09:fc:9f:de:9b:b7:3a:31:06:e3:dd:47:37:74:
         be:93:8f:48:33:1d:d7:2b:70:6c:1b:4a:ba:c4:45:63:43:ea:
         f7:c0:84:23:46:d7:6c:55:65:38:53:9b:b0:17:0e:09:db:00:
         ed:2f:3d:a4:66:08:fe:67:02:b2:3c:95:85:29:c2:2a:7f:e7:
         e8:93:35:4e:45:62:8b:66:92:46:ca:d5:b7:55:1a:9c:1c:82:
         6d:27:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:34:27 2025 by rpki-client