Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File:                     iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier:          70cPvLmIkmcUNVb5G0cRo3I8ePqX0ZXayvxEqEzUQRE=
Subject key identifier:   4F:80:46:67:C1:2C:00:E0:93:4C:20:EC:5F:73:D9:93:FC:F7:05:B1
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer:       /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial:       0196C502E61698F8EB259E11F56961E423B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number:          12B4
Signing time:             Mon 12 May 2025 15:00:23 +0000
Manifest this update:     Mon 12 May 2025 15:00:23 +0000
Manifest next update:     Tue 13 May 2025 15:00:23 +0000
Files and hashes:         1: FVISxrqgKm1jzuVDA1W7GgFPx7A.roa (hash: vGtytU+11DFVtQgoaWrwrm8B3AMwfHF+sCYR/tFEDO8=)
                          2: McPECbWiOZZptuHIWFrOcEgtdOI.roa (hash: xHYw+KJVEhQFDVEUioGvFwcLa2C5OgHkMSM0z9hHgHY=)
                          3: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: hiIeTZtlZC9ze6mouTwSWfgSI6NE/4DbJBxdQ3tTyGg=)
                          4: vvI0g8BdWOjRPV00wNm8r2tdp4I.roa (hash: mTpdkbaV6/+O1nfMWFer4UtqR769YxVmqPMQSeiPoZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:02:e6:16:98:f8:eb:25:9e:11:f5:69:61:e4:23:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
        Validity
            Not Before: May 12 15:00:23 2025 GMT
            Not After : May 13 15:00:23 2025 GMT
        Subject: CN=4f804667c12c00e0934c20ec5f73d993fcf705b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:c1:f0:aa:d1:89:4f:00:9b:ee:0f:56:41:
                    62:67:bd:4e:01:84:50:33:d6:73:eb:72:a5:6f:d4:
                    11:f7:03:b8:cb:36:9f:81:32:c5:e6:38:43:b0:19:
                    1b:b0:c2:1f:8c:b2:4e:09:45:17:ac:17:9b:4b:d1:
                    4c:fb:de:16:bf:34:42:70:a2:a9:6e:10:66:56:91:
                    88:82:75:3e:2e:23:a3:41:84:f0:d7:8d:e4:40:f4:
                    c7:14:1e:b5:e1:18:5d:36:c0:84:3e:1a:dc:90:c1:
                    cf:66:1b:a1:96:95:95:c2:08:5c:ec:27:d1:c9:62:
                    10:44:33:0a:3e:c4:b2:74:37:e7:7b:06:f3:b5:49:
                    70:8d:f1:f5:de:54:9b:78:76:68:19:72:4a:79:1c:
                    d8:57:34:93:6e:bf:c4:d9:18:2e:8b:5e:f7:3d:ea:
                    3c:b6:02:14:f4:db:a2:d4:29:ab:d4:c6:44:bc:04:
                    02:81:90:9a:d1:c5:86:2f:d3:b3:20:3c:10:f8:03:
                    8c:f4:78:35:e1:29:01:fe:f0:4c:b4:c2:b4:20:83:
                    05:0d:cc:77:61:df:b3:cf:6d:47:14:a5:1d:3a:d2:
                    da:57:84:23:20:35:a7:d7:b1:30:64:f1:59:3c:19:
                    e9:02:76:5c:09:28:68:3f:d1:60:01:77:2b:6b:08:
                    0f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:80:46:67:C1:2C:00:E0:93:4C:20:EC:5F:73:D9:93:FC:F7:05:B1
            X509v3 Authority Key Identifier:
                keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:36:ce:85:9d:8d:d6:5e:84:59:d7:a8:67:a3:d2:2f:0a:ea:
         f4:39:97:03:b1:72:30:1b:a9:a4:0d:11:97:44:3c:6c:08:f9:
         a1:40:24:c7:dd:b9:6a:7f:13:9e:c9:9b:cf:79:f8:ab:35:e2:
         d9:38:ad:5c:ff:c8:7e:ac:a1:72:92:cb:92:42:f5:94:6a:ea:
         86:4c:4a:64:7b:47:f1:fb:0f:5a:c6:45:cb:d1:46:4b:11:a9:
         d9:d7:3a:e0:7e:14:15:3f:b0:fe:65:22:18:26:9b:23:3f:26:
         00:a6:7b:b4:8f:ff:bf:09:08:d0:75:e0:3b:b9:c5:ca:da:45:
         36:13:70:a4:3b:57:42:0b:f4:83:c8:91:9b:b9:3a:56:15:14:
         cc:98:ab:8b:85:0a:6b:dc:d2:79:dd:73:02:39:ac:87:49:bc:
         da:49:3b:07:0e:32:60:4c:05:9f:8a:9b:d3:73:7e:7f:25:eb:
         85:11:39:5a:3e:db:9c:c4:4d:ae:8a:f2:30:dc:64:41:37:f3:
         17:3f:44:07:37:86:74:73:d0:33:7c:be:fc:87:e3:b9:97:3c:
         2c:47:2e:2b:4d:94:17:d2:38:3e:28:0d:34:a4:84:94:dd:99:
         bf:cb:dd:3b:29:3d:bd:c1:ba:64:33:5e:5a:ba:68:a6:e9:3c:
         83:a3:79:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:12:44 2025 by rpki-client