Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File:                     8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier:          jwCpPUZGoA96zj84H6mtY2cou4nUxpTcF2YYLQhoDGE=
Subject key identifier:   4B:8A:0D:F0:63:A8:4E:1C:38:58:66:9A:F1:00:88:D5:01:F5:48:93
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer:       /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial:       0196B96CB4722C88BBB0C86926E708852531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number:          1534
Signing time:             Sat 10 May 2025 09:00:31 +0000
Manifest this update:     Sat 10 May 2025 09:00:31 +0000
Manifest next update:     Sun 11 May 2025 09:00:31 +0000
Files and hashes:         1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: Id5qVyP+x8+goUDsVWKwmC9i9IMH+DmsFjRmDFaBHiA=)
                          2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:6c:b4:72:2c:88:bb:b0:c8:69:26:e7:08:85:25:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
        Validity
            Not Before: May 10 09:00:31 2025 GMT
            Not After : May 11 09:00:31 2025 GMT
        Subject: CN=4b8a0df063a84e1c3858669af10088d501f54893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:b2:58:c2:e1:24:e7:ba:0c:98:11:34:50:
                    71:02:c6:23:aa:b0:b9:a7:6d:bb:67:55:51:60:5d:
                    5f:96:48:0c:ce:47:d6:d4:b0:0d:e7:53:94:11:58:
                    d0:e9:a0:0b:23:37:e6:a2:50:8d:c4:2d:b1:26:e7:
                    83:af:d7:ea:7c:fc:a2:0f:3a:3a:a5:aa:62:a1:04:
                    e0:7b:8b:99:c2:88:19:d7:26:ee:7b:3a:a2:46:af:
                    6c:28:c7:3f:13:d8:88:e4:97:a3:20:44:04:ef:6a:
                    14:81:57:7e:03:51:73:0f:b7:da:24:04:13:b8:8a:
                    ba:6d:a6:a4:e0:3b:40:9d:bd:89:f7:bf:91:e9:19:
                    fd:01:37:3e:21:1f:49:23:e5:67:6d:61:bb:3e:62:
                    fe:cf:26:2e:77:83:03:9d:82:34:95:0e:b4:8d:3f:
                    0c:40:e5:ec:12:fc:73:e1:e6:63:74:29:b5:6b:0b:
                    2f:5c:37:2e:83:aa:b3:f2:20:2a:aa:48:f0:70:27:
                    60:9f:0b:86:f2:04:c7:ea:ed:74:6b:64:cd:08:cc:
                    bf:4f:b9:bd:b0:2e:66:1e:c5:d2:4e:0c:e9:7b:2a:
                    b4:31:f9:8d:c8:8b:43:57:1e:d6:43:06:1f:44:a5:
                    41:29:18:4c:f3:75:2b:af:1a:3b:60:61:fa:25:40:
                    57:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8A:0D:F0:63:A8:4E:1C:38:58:66:9A:F1:00:88:D5:01:F5:48:93
            X509v3 Authority Key Identifier:
                keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:f9:3d:9d:8c:77:9f:ad:96:eb:e4:36:18:4d:8a:32:53:e5:
         5d:ee:0c:52:5e:2c:f8:50:96:fc:df:67:6a:0d:e9:98:af:ff:
         19:f1:46:5a:9c:50:24:54:ce:ef:95:8e:d3:24:2e:bf:f4:00:
         f8:a4:09:b0:e0:21:0c:4b:19:00:15:25:b9:8a:ae:13:ee:7e:
         2f:49:e2:28:06:e9:43:8f:3b:b7:0c:fd:eb:70:1e:93:44:91:
         f2:79:ba:0f:fd:c0:38:74:ba:3c:17:b3:ac:b0:a0:d6:7a:04:
         92:e9:61:c4:fa:c1:0a:e5:e0:0f:30:32:59:3a:a3:6b:84:57:
         5d:0a:23:8a:aa:c7:8a:16:f4:32:71:25:e3:e5:da:21:f5:5c:
         3b:24:1e:7f:fb:24:b6:2e:35:e4:97:83:fe:a0:cb:9e:d1:c6:
         d6:df:e2:9d:01:3e:a2:9c:d5:ea:93:92:b8:ce:2d:b3:9c:62:
         06:17:bb:62:e8:86:f6:b0:82:83:24:83:19:88:35:3a:c8:2a:
         01:bd:5c:d1:6e:1f:1b:fb:cb:88:53:84:60:95:90:dd:47:04:
         f3:b6:30:13:ea:13:57:bd:41:9a:b5:ad:f2:c5:e8:a4:80:30:
         3a:e7:e5:f9:c1:29:60:72:e2:64:1a:73:99:31:1a:e5:46:4c:
         f7:20:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:45:19 2025 by rpki-client