Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
File:                     RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft (raw, json)
Hash identifier:          p+IGe+E7HokBQLG+Sr519E/mriEyt8ZI4c0tnbt/CNY=
Subject key identifier:   9C:75:85:1A:91:78:B1:1D:6C:93:84:68:BB:6F:0A:D2:DD:B2:52:57
Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
Certificate issuer:       /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Certificate serial:       0196C1263382E0F41793806457AA94890FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
Manifest number:          1539
Signing time:             Sun 11 May 2025 21:00:28 +0000
Manifest this update:     Sun 11 May 2025 21:00:28 +0000
Manifest next update:     Mon 12 May 2025 21:00:28 +0000
Files and hashes:         1: RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl (hash: 5DQSGXMgHIpKsTVP9BsRHNgEmKgU6FBjGmywyikltRA=)
                          2: eIPu-oRSt6i1dIgnDCklFRUAlSQ.roa (hash: Sgde8KLLocp16u9bpO8WIWMRQrBpRylsfdhGYkOvJ1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:26:33:82:e0:f4:17:93:80:64:57:aa:94:89:0f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
        Validity
            Not Before: May 11 21:00:28 2025 GMT
            Not After : May 12 21:00:28 2025 GMT
        Subject: CN=9c75851a9178b11d6c938468bb6f0ad2ddb25257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:87:65:e1:ac:d0:fd:6f:30:68:b9:d5:22:
                    3a:b5:92:fd:e8:aa:68:aa:1c:04:f5:03:21:92:09:
                    a5:0d:24:ec:8a:18:a9:be:8f:95:30:f7:ca:7d:cd:
                    0a:47:24:73:36:d2:25:ba:b5:a5:b9:bf:71:79:e6:
                    8c:dc:96:50:11:f8:e4:7e:32:89:0f:df:c9:94:15:
                    3f:e7:d2:51:b4:34:b3:44:8d:a7:02:66:f5:7f:b4:
                    de:d3:ec:8f:af:f1:e6:18:d8:f5:3f:4e:d6:24:c9:
                    85:2f:c2:b3:4c:0e:8b:a8:b3:d1:59:7d:22:91:b5:
                    31:d1:8d:86:d8:15:36:11:25:f0:80:13:86:fe:59:
                    fd:60:ba:84:47:a7:bf:c0:06:ba:69:cf:3d:04:10:
                    d8:ae:eb:3f:84:f9:ea:b2:19:51:1a:06:28:ff:77:
                    2b:1d:8e:86:8e:b0:2b:17:49:f2:2d:54:ec:07:35:
                    9f:87:74:42:8d:2a:49:6b:84:41:e7:d0:51:d6:b0:
                    c4:2e:ab:e6:95:87:54:e2:66:c1:da:46:5e:00:c5:
                    7d:67:ca:99:37:7d:25:10:b7:27:a0:e5:0b:df:06:
                    06:37:8e:1e:f7:74:40:53:33:1c:81:bb:1d:91:89:
                    26:08:ab:26:e5:95:14:c8:1c:01:af:58:ae:34:32:
                    c3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:75:85:1A:91:78:B1:1D:6C:93:84:68:BB:6F:0A:D2:DD:B2:52:57
            X509v3 Authority Key Identifier:
                keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:8e:c7:51:a3:9c:bb:75:3a:fd:67:28:f6:6d:82:18:98:ab:
         34:81:a1:08:87:84:85:eb:d8:6d:04:37:cc:24:28:25:6a:84:
         ad:4f:1a:75:e8:6a:1f:8e:c0:0e:8e:f3:67:f6:61:65:6d:fb:
         f6:bd:ee:36:c5:a6:da:a5:c6:9c:b5:64:5d:bd:24:5d:37:03:
         39:35:70:36:db:9b:09:23:87:15:bf:1d:0f:be:b4:35:7e:07:
         e9:42:69:7a:12:cb:3f:77:d2:c2:d2:50:c8:93:3c:c3:70:55:
         aa:78:ca:a1:47:ba:ff:73:85:6c:2f:07:ae:2b:04:df:ce:0c:
         fd:da:85:f2:9f:81:83:25:3b:00:2f:1e:d7:81:81:fc:ec:87:
         79:6c:eb:fd:4b:bc:07:6f:2e:f9:1e:d4:91:9d:56:d2:a0:2b:
         30:cc:79:30:70:59:fa:c1:6e:dc:6f:59:18:56:e9:59:ef:67:
         79:38:cf:ad:db:26:13:29:bd:4e:93:06:8c:0d:90:f5:13:80:
         41:6e:35:ac:0d:b9:3b:31:e8:d5:82:61:e8:9f:93:aa:9a:c6:
         be:e8:01:40:4f:72:22:b0:fd:eb:1e:1c:1e:dc:64:eb:83:18:
         47:af:ae:7e:34:ef:11:84:79:18:90:d1:60:f5:cd:18:93:9d:
         fd:21:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:10:51 2025 by rpki-client