Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
File:                     p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json)
Hash identifier:          +05xaqq0e2BeTXjpwnsi7AVhq/XLJrj90zvClFSFJ4Y=
Subject key identifier:   D4:85:DA:27:65:19:FA:53:54:8E:1A:CF:63:5A:88:D4:33:DE:03:AA
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Certificate issuer:       /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial:       0196BB5B4436EBADC540E88B48EADA72662B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
Manifest number:          0FB5
Signing time:             Sat 10 May 2025 18:00:42 +0000
Manifest this update:     Sat 10 May 2025 18:00:42 +0000
Manifest next update:     Sun 11 May 2025 18:00:42 +0000
Files and hashes:         1: 7mKsLxZ1YUursivxbDFLaTJwj3E.roa (hash: FPzsPJGqWdwrFvseNY78lYszDWnEn2Sc/ADORiyM6K8=)
                          2: F6GbEsOwyyG8o8bV63EAhvgPv20.roa (hash: EM9ccbF4wbMzML21gfy8G7ZsIEgbEwrm+BJcQvLh9SE=)
                          3: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: AW78iRxfi555qyhmnqMDx5GSxnnEjzeglvxc692eWB8=)
                          4: zTYC0rihbvQfm9oWRaiGAXMBQqs.roa (hash: 6o0tQLujWnAnKLQhjlOk4ynnEvtZuILHNK+l2Zgw0QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5b:44:36:eb:ad:c5:40:e8:8b:48:ea:da:72:66:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
        Validity
            Not Before: May 10 18:00:42 2025 GMT
            Not After : May 11 18:00:42 2025 GMT
        Subject: CN=d485da276519fa53548e1acf635a88d433de03aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:6b:f9:a9:8c:c8:c4:6f:ce:8d:ad:5c:1e:
                    3f:09:a6:66:ca:21:cd:46:5f:44:e8:73:8d:11:9d:
                    5d:f6:4f:7d:1f:43:98:cb:80:ca:0f:d6:80:5d:da:
                    7b:f2:46:32:4a:58:ec:52:fb:5a:36:cc:f0:60:2d:
                    9e:07:63:74:09:f0:f9:56:df:da:5d:40:43:e0:a1:
                    ff:94:3d:10:9a:46:85:ee:54:55:d2:0d:de:70:0c:
                    ba:75:85:21:11:01:64:01:74:6c:91:db:e9:b7:80:
                    70:d6:92:ba:79:3c:e7:5e:ce:e2:d3:05:30:9b:3a:
                    92:44:b4:73:9a:26:cc:d8:9d:3b:8a:41:52:4e:6e:
                    58:97:d7:a0:c0:6e:73:15:04:30:bb:bc:77:59:10:
                    7e:83:de:a0:10:f4:09:c5:3f:21:b0:90:08:e1:ac:
                    03:be:3c:e5:55:c8:c5:99:3a:fd:54:94:01:de:f8:
                    d6:53:9b:cb:25:93:d3:ab:8e:dd:3c:bd:35:20:90:
                    d5:c6:d9:df:2b:74:f0:a1:c8:77:32:5a:e1:3d:ba:
                    82:f0:7e:8a:50:a3:62:49:37:15:13:be:6d:e1:e1:
                    73:f3:a5:5e:c0:cc:7d:4c:95:93:90:d7:bd:25:8d:
                    25:c1:e3:a3:4f:b7:75:3c:52:dc:75:d1:29:44:23:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:85:DA:27:65:19:FA:53:54:8E:1A:CF:63:5A:88:D4:33:DE:03:AA
            X509v3 Authority Key Identifier:
                keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c0:62:6a:50:45:57:a7:e4:e9:54:e5:26:f1:1e:5c:6c:ed:
         af:32:f7:fa:b1:ea:5f:6f:0e:71:2d:6a:97:cf:3c:f8:77:ee:
         0a:18:93:e1:0a:22:a0:82:dd:0f:b4:42:8b:db:23:69:81:b1:
         9a:34:59:1c:71:b6:35:8f:e2:2a:93:2d:44:92:b1:91:75:bc:
         65:9a:7a:95:7f:49:e7:aa:35:92:30:c4:40:cb:ec:9a:2b:83:
         2c:ec:f1:a9:b4:fc:59:4a:6b:6e:6b:eb:5b:23:21:07:80:da:
         f5:0c:6d:48:cb:9f:4b:81:20:30:e6:41:e9:a8:ea:bc:80:0a:
         40:4b:5e:f5:66:bf:04:2c:e9:a2:64:f8:db:ab:7c:26:66:35:
         36:30:d5:e8:fb:5f:bc:be:86:fc:d2:0e:c1:3a:e3:94:02:38:
         0e:56:a9:d1:f8:96:a1:42:b9:aa:72:39:d3:dc:ec:9c:fd:c5:
         3c:3e:db:82:49:13:ea:8c:d7:56:05:95:25:bb:22:a2:c4:c5:
         4e:25:cf:df:a8:0b:3b:e3:c1:94:7a:0a:69:9e:11:36:6f:ca:
         fe:87:f1:bb:a2:d2:8a:a4:23:b5:58:1a:1f:b6:c1:71:8d:1b:
         0f:78:0e:74:04:a4:c3:37:d5:d1:bc:b3:65:97:3c:dc:cc:1b:
         e4:d9:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:50:55 2025 by rpki-client