Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
File:                     8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json)
Hash identifier:          S1Ty3bkvShHBI7Jej8iJ+3fX1KFJyPOvoGmXqXMcZjY=
Subject key identifier:   A1:FD:7C:9E:FD:C2:25:36:AD:2B:70:8D:C7:BB:30:8C:07:85:05:46
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Certificate issuer:       /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial:       0196AE0E4776BD018F16D86735F211BF7923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
Manifest number:          0BB8
Signing time:             Thu 08 May 2025 04:01:33 +0000
Manifest this update:     Thu 08 May 2025 04:01:33 +0000
Manifest next update:     Fri 09 May 2025 04:01:33 +0000
Files and hashes:         1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: wVPDPljitV+Gw5c3dpE5bJaVBxF+mk8dx6UUMrSb1rY=)
                          2: Nh4smUq7Nayhm_h4hcJhFSXbd98.roa (hash: 0tOyxit0JfWpS02swEQXMIpCvZrxbPbACrr2wxwWLsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:0e:47:76:bd:01:8f:16:d8:67:35:f2:11:bf:79:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
        Validity
            Not Before: May  8 04:01:33 2025 GMT
            Not After : May  9 04:01:33 2025 GMT
        Subject: CN=a1fd7c9efdc22536ad2b708dc7bb308c07850546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:76:3d:80:a2:de:3b:9d:9e:65:18:bf:f6:
                    44:b3:e6:74:46:09:cf:90:f1:9b:c4:9b:d1:df:fa:
                    76:9c:45:a3:e8:d4:a9:d9:9f:2d:6e:00:aa:7a:9e:
                    38:8e:a8:ac:23:ed:07:04:79:9b:e2:32:a1:0b:1c:
                    da:d4:be:ed:93:f9:88:dd:97:98:44:23:54:de:fd:
                    a9:f6:35:cf:f1:64:4b:c9:4c:2c:ef:ac:00:b9:d6:
                    e5:c7:47:41:6e:5e:a9:3e:4c:dd:64:71:fd:aa:56:
                    8a:ca:42:9c:b9:75:bb:60:c9:fd:5a:ea:75:b3:88:
                    2c:c6:87:13:58:3c:ad:68:89:cb:20:56:4d:2a:91:
                    76:8c:06:1b:5b:b3:f1:c2:22:96:8c:ee:5e:82:2a:
                    9d:08:00:5e:e2:f2:f0:6f:c6:c2:3d:2d:dd:14:e6:
                    54:52:03:54:f0:fc:6e:a1:23:db:e8:5d:33:c2:4b:
                    e0:b8:fc:37:a6:c4:9f:ff:a7:2c:49:cc:40:4f:4e:
                    10:1d:50:7e:c7:1d:86:d8:ff:bb:72:e1:97:21:49:
                    8b:12:b8:bc:14:92:eb:50:4f:95:ac:95:f3:a0:86:
                    74:b7:68:0e:5d:6f:aa:bb:9e:5c:28:f5:6c:3b:bc:
                    96:1d:61:77:27:4a:23:87:90:62:63:68:50:74:9c:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FD:7C:9E:FD:C2:25:36:AD:2B:70:8D:C7:BB:30:8C:07:85:05:46
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:80:b9:aa:86:c7:17:17:3b:e1:11:e1:0d:d5:eb:96:de:06:
         34:f1:70:21:e3:bb:5a:eb:fc:46:eb:ea:2c:02:fd:64:14:f7:
         4c:fd:09:70:a7:72:e1:1a:dd:be:50:6f:e1:3d:2d:8f:4b:a9:
         ec:ba:b7:1f:ff:84:dd:fd:c0:e0:80:12:58:79:e3:b0:a7:97:
         b4:2a:49:ff:2e:54:db:0b:0a:33:d0:4b:28:0a:36:ae:7c:c8:
         d3:9d:5d:fd:3b:b5:28:8c:6d:8f:a3:8e:9f:38:43:eb:16:34:
         0f:9b:1e:2e:33:04:f7:15:c8:8c:b7:d2:0d:a9:6d:ce:a4:3d:
         2f:89:ec:6a:d4:cd:50:99:1d:8c:fe:62:59:e0:fd:78:a8:01:
         93:45:9a:2d:28:a8:64:54:9b:31:59:0f:d9:89:69:12:c1:a7:
         3d:12:18:81:f5:db:f1:95:7b:e5:e1:17:1f:80:5c:dc:67:93:
         8b:59:8c:bd:55:c8:bf:96:49:27:0e:a9:a4:7c:c3:03:b2:bf:
         20:35:0d:b8:1d:5e:d1:3c:78:39:30:ab:53:a8:eb:e6:5b:4a:
         60:ca:e3:87:28:7d:95:77:2d:3c:14:e2:01:3f:e7:07:c9:2e:
         d5:e2:51:39:d2:b9:44:65:33:8e:84:65:b7:59:ca:11:7e:fe:
         70:19:33:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauDkd2vQGPFthnNfIRv3kjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmVmOGIwYzFjYTQ3ZTcxNmRhMjE5ZDMxMDI4MDI4N2Qz
NmViZTMwHhcNMjUwNTA4MDQwMTMzWhcNMjUwNTA5MDQwMTMzWjAzMTEwLwYDVQQD
EyhhMWZkN2M5ZWZkYzIyNTM2YWQyYjcwOGRjN2JiMzA4YzA3ODUwNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8Z2PYCi3judnmUYv/ZEs+Z0RgnP
kPGbxJvR3/p2nEWj6NSp2Z8tbgCqep44jqisI+0HBHmb4jKhCxza1L7tk/mI3ZeY
RCNU3v2p9jXP8WRLyUws76wAudblx0dBbl6pPkzdZHH9qlaKykKcuXW7YMn9Wup1
s4gsxocTWDytaInLIFZNKpF2jAYbW7PxwiKWjO5egiqdCABe4vLwb8bCPS3dFOZU
UgNU8PxuoSPb6F0zwkvguPw3psSf/6csScxAT04QHVB+xx2G2P+7cuGXIUmLEri8
FJLrUE+VrJXzoIZ0t2gOXW+qu55cKPVsO7yWHWF3J0ojh5BiY2hQdJw8ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKH9fJ79wiU2rStwjce7MIwHhQVGMB8GA1UdIwQY
MBaAFPP++LDBykfnFtohnTECgCh9NuvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kNWJkOTgtZmYzNC00MjYzLThkMGYt
Zjg3YzUwZGY2ZmI3LzEvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kNWJkOTgtZmYzNC00MjYzLThkMGYtZjg3YzUwZGY2ZmI3
LzEvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIC5qobH
Fxc74RHhDdXrlt4GNPFwIeO7Wuv8RuvqLAL9ZBT3TP0JcKdy4RrdvlBv4T0tj0up
7Lq3H/+E3f3A4IASWHnjsKeXtCpJ/y5U2wsKM9BLKAo2rnzI051d/Tu1KIxtj6OO
nzhD6xY0D5seLjME9xXIjLfSDaltzqQ9L4nsatTNUJkdjP5iWeD9eKgBk0WaLSio
ZFSbMVkP2YlpEsGnPRIYgfXb8ZV75eEXH4Bc3GeTi1mMvVXIv5ZJJw6ppHzDA7K/
IDUNuB1e0Tx4OTCrU6jr5ltKYMrjhyh9lXctPBTiAT/nB8ku1eJROdK5RGUzjoRl
t1nKEX7+cBkz6Q==
-----END CERTIFICATE-----
Generated at Thu May 8 09:35:06 2025 by rpki-client