Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File:                     g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier:          RdEq6l+AOf9FuV14MUH4N4uZjFfCdMxnuPnEO10b3ts=
Subject key identifier:   66:DF:D2:DE:ED:8B:F2:CB:BF:65:04:59:02:2A:A8:3A:A6:53:1F:D5
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer:       /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial:       0196C8DFE599B419580A4E25E42FCC2680AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number:          0A34
Signing time:             Tue 13 May 2025 09:00:38 +0000
Manifest this update:     Tue 13 May 2025 09:00:38 +0000
Manifest next update:     Wed 14 May 2025 09:00:38 +0000
Files and hashes:         1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=)
                          2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: yMZECsL6lsKdJhpJUbL+fTJLtXEnFPeMQ5DiS+kKQR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:df:e5:99:b4:19:58:0a:4e:25:e4:2f:cc:26:80:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
        Validity
            Not Before: May 13 09:00:38 2025 GMT
            Not After : May 14 09:00:38 2025 GMT
        Subject: CN=66dfd2deed8bf2cbbf650459022aa83aa6531fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:38:3b:78:cf:f7:38:03:90:29:26:7b:bf:
                    b8:81:ef:6d:49:2e:b9:6a:ef:fd:53:e6:7d:29:39:
                    4e:58:74:ac:31:b5:28:76:67:ea:d5:86:a7:38:20:
                    0e:ea:7a:6f:8d:0a:99:d1:7c:db:ad:31:3c:dd:5f:
                    a6:93:8e:cd:ad:71:19:43:ab:94:c3:0f:bb:24:c5:
                    f8:0e:af:11:21:f2:e1:59:fc:fe:23:67:4d:1f:5f:
                    da:33:ec:94:85:dd:48:f1:06:13:46:80:7d:10:36:
                    fc:f8:3d:87:7c:3f:b2:c7:6e:b0:90:63:4e:f8:60:
                    f5:6f:69:1e:19:b1:6e:47:4e:88:6d:b8:06:12:41:
                    70:be:0f:2d:42:ad:3e:97:c9:06:62:3f:74:47:d6:
                    51:31:b0:ef:27:42:7d:32:c9:96:01:25:5a:37:38:
                    ab:68:27:83:80:b0:5e:71:91:83:82:da:ba:b7:9f:
                    d9:45:07:d9:35:96:75:c8:04:0e:f0:74:2d:1f:95:
                    49:8c:c4:23:23:97:11:73:83:2d:3d:02:1a:87:b7:
                    ec:70:d0:f8:a1:cb:54:bd:c4:87:a4:9f:4d:bf:1f:
                    42:55:b3:ee:8f:da:23:5b:fa:3b:f7:f0:be:4a:f7:
                    85:df:16:aa:be:5f:39:13:00:8e:d7:17:74:2a:13:
                    ef:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DF:D2:DE:ED:8B:F2:CB:BF:65:04:59:02:2A:A8:3A:A6:53:1F:D5
            X509v3 Authority Key Identifier:
                keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ff:6a:cc:25:e2:ca:6b:18:27:11:e8:88:93:ac:9a:bc:ba:
         28:c3:ed:47:d5:43:0f:92:b4:a9:e5:62:8a:6f:80:7d:50:b3:
         2d:f5:2d:9f:13:8f:a5:b6:b2:0b:f6:cc:35:43:a7:b2:c6:c4:
         80:e0:46:d6:9c:9a:4e:06:9a:bb:86:8c:ed:aa:0a:b3:d1:83:
         c5:4e:62:26:52:cc:d8:29:ed:2c:95:21:ef:67:f5:08:06:19:
         5e:ee:65:11:75:46:c3:99:4b:7f:7c:a6:6e:f4:3f:4b:3f:d7:
         69:8c:6c:e2:88:55:b6:fe:b4:16:31:ba:68:68:e8:47:33:95:
         db:68:a3:93:25:83:ce:a2:75:d5:a4:32:cd:31:ab:47:35:7d:
         7e:b5:64:59:cf:94:3e:49:b2:78:83:e3:68:8e:43:53:39:02:
         67:87:dd:77:af:6c:42:ed:13:4b:c2:9e:42:53:e1:ff:0e:11:
         5d:ef:f4:ab:7d:ae:53:e0:2e:ff:8b:af:15:ea:19:da:5b:00:
         cc:07:88:bb:e3:c9:c3:58:b9:f6:c1:38:02:b3:f9:f8:bd:fc:
         b3:da:41:6f:67:03:4a:37:8c:47:bd:c5:d4:52:67:ab:46:d1:
         2d:5f:44:a1:33:db:d8:1e:5a:3a:2c:60:c4:64:4d:72:53:53:
         76:d5:35:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:31:33 2025 by rpki-client