Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File:                     Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier:          0W6hbxfpxBYgd9CXBbLfkMa/1AkLGKhC8nRgoiQPbz8=
Subject key identifier:   00:18:75:1E:96:50:59:02:40:41:F7:86:8F:86:59:E8:26:BD:8E:D2
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer:       /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial:       0196BAED61DF21089D1FC333AE293B2E0084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number:          04B3
Signing time:             Sat 10 May 2025 16:00:41 +0000
Manifest this update:     Sat 10 May 2025 16:00:41 +0000
Manifest next update:     Sun 11 May 2025 16:00:41 +0000
Files and hashes:         1: 41Kf3SCwnWPoeI3gwt6SuiM3U8E.roa (hash: u7Hgq9t6aNSvvpN1ap2hOUlss087XACBIUhudiFtYGg=)
                          2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: NJjVbUTgZ7uMXqVuKyV5sHZkv/DKhANEQB7ogNVWx+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ed:61:df:21:08:9d:1f:c3:33:ae:29:3b:2e:00:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
        Validity
            Not Before: May 10 16:00:41 2025 GMT
            Not After : May 11 16:00:41 2025 GMT
        Subject: CN=0018751e965059024041f7868f8659e826bd8ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:00:ce:53:b5:34:de:ec:96:d9:c1:c0:72:30:
                    09:56:2b:cf:8e:4b:d7:26:3b:b9:dd:05:e4:1e:bc:
                    26:2d:20:e7:e9:ad:0d:23:e5:84:18:bf:93:0c:01:
                    90:00:70:8c:67:39:4d:c6:9c:b3:9c:7d:c9:01:44:
                    8f:46:b8:73:94:71:cb:5f:b7:4a:2b:f5:40:52:14:
                    b6:b1:16:4f:81:d0:1a:69:d2:3c:3c:62:01:bd:85:
                    be:5d:70:f4:f1:fe:f1:5f:dd:58:8e:35:25:db:5e:
                    b1:de:17:ec:a4:75:64:75:5d:b8:67:cb:fd:e3:5d:
                    f0:7a:46:70:49:91:35:53:c1:18:65:5b:2d:37:18:
                    be:b0:88:3f:11:ca:23:77:9d:6a:03:a3:bf:44:24:
                    1c:16:7f:5a:b6:fe:67:ba:af:ba:b3:fe:5b:5a:9f:
                    bd:80:2c:4b:30:c3:71:8b:47:3e:65:1d:ac:7f:20:
                    39:ee:f9:38:33:db:51:35:e9:f5:a6:23:a4:45:ea:
                    ab:67:7e:49:83:72:90:6e:0e:56:38:31:57:22:9d:
                    48:93:a8:80:9d:66:8b:87:ea:71:0a:89:5a:56:67:
                    00:bb:82:a7:99:7c:e3:c6:3d:67:c1:65:9b:d7:79:
                    a5:9c:f3:36:3a:c7:84:bc:8d:bc:69:4d:6c:72:92:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:18:75:1E:96:50:59:02:40:41:F7:86:8F:86:59:E8:26:BD:8E:D2
            X509v3 Authority Key Identifier:
                keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:53:db:04:1c:8f:8b:99:77:47:8c:ef:34:f9:1d:61:b9:
         75:4f:f7:cb:0f:e5:f5:b3:39:06:6c:d0:e3:50:93:f7:ea:95:
         45:1d:e6:82:90:61:51:10:d6:7d:7a:e5:12:5b:d6:c4:29:c8:
         da:5f:83:e0:f1:dd:37:26:be:d6:14:7d:ad:30:c2:6a:e7:07:
         93:ab:db:e7:c5:ec:27:6e:e5:fb:ab:27:d9:a6:4d:83:70:41:
         db:8d:d9:cf:a9:20:bd:e0:b7:55:b5:e4:57:84:91:6c:1e:08:
         05:86:45:ef:bb:48:48:9f:50:86:a8:6d:f3:24:40:94:a8:16:
         d1:6b:55:c0:e0:fa:b8:8f:51:79:ec:88:66:7e:e6:c5:3a:19:
         23:2b:5c:c1:04:28:63:91:5d:e3:7e:bb:8a:cc:40:10:73:d9:
         89:c8:95:68:59:d4:1f:dc:dd:20:c0:00:84:c8:c8:bf:4d:2b:
         d0:c0:aa:55:3f:3a:79:ca:6e:f1:7f:55:64:ea:99:36:be:7f:
         da:d7:eb:60:7d:c5:93:2f:2e:8b:07:fb:42:44:4f:a8:14:31:
         18:48:73:d6:29:b5:64:7a:57:2b:8e:6c:c8:5d:75:b4:46:0f:
         8d:dd:af:64:e7:23:03:cb:5d:40:30:74:00:36:4c:6d:9d:3a:
         ad:75:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:21:02 2025 by rpki-client