Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
File:                     8cSYM_Q5ueBnfY078fUt-_ssYk8.mft (raw, json)
Hash identifier:          c6IMAvRoaqOww/NTe47EKAWHD+M4p99XetjT7IIftjE=
Subject key identifier:   24:11:31:51:E7:6A:13:78:C4:FD:AB:76:5D:89:EB:FD:A2:3D:28:44
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Certificate issuer:       /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial:       0196BAB689FE64B117411FA3A2C72FFA8E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
Manifest number:          091C
Signing time:             Sat 10 May 2025 15:00:47 +0000
Manifest this update:     Sat 10 May 2025 15:00:47 +0000
Manifest next update:     Sun 11 May 2025 15:00:47 +0000
Files and hashes:         1: 3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa (hash: DLWTw4UKdSLOETh6kocBhjPqoC9NP+EApW6Oj+8OWfw=)
                          2: 8cSYM_Q5ueBnfY078fUt-_ssYk8.crl (hash: nh0+aBQbx59mS4cSXbEWVciT+dfpMP8G0DmnsAFvfQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:b6:89:fe:64:b1:17:41:1f:a3:a2:c7:2f:fa:8e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
        Validity
            Not Before: May 10 15:00:47 2025 GMT
            Not After : May 11 15:00:47 2025 GMT
        Subject: CN=24113151e76a1378c4fdab765d89ebfda23d2844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:31:8b:05:b9:9d:41:6c:89:d0:64:ff:b6:
                    9e:36:85:de:aa:bd:ba:a4:ee:ca:e5:d4:54:c4:cd:
                    b6:2c:5f:78:73:d5:bd:4f:92:a6:fa:4a:91:4a:82:
                    a7:c0:14:90:23:0e:9d:c1:30:b0:78:15:8c:6a:a7:
                    f4:b5:ee:26:c8:bd:f6:79:8a:fe:44:22:86:4a:c4:
                    93:cb:ce:d8:eb:9e:8a:c5:3c:fb:07:3d:3e:a7:cf:
                    c9:90:e5:22:8a:bb:b3:75:5e:95:bf:e2:71:56:c8:
                    01:9e:9a:8b:f6:a4:0f:fd:02:ee:70:d4:fc:38:94:
                    1b:a9:5c:f6:ff:fa:a0:7c:6d:e8:d8:04:a0:d9:54:
                    b8:db:f7:7e:f4:a0:8c:82:68:b9:e1:69:e9:54:d1:
                    95:81:9a:b5:24:da:0e:37:5d:10:06:28:f2:c3:ba:
                    84:91:1e:2e:88:3f:49:83:3d:a6:88:d9:6e:d1:5f:
                    01:e4:5b:ca:c7:b9:20:80:d0:62:27:de:eb:5a:d0:
                    0b:8a:ef:81:59:3e:85:d8:23:16:11:70:0e:d1:30:
                    6c:e6:20:16:e1:27:9b:bd:d3:37:ea:1f:b7:f4:29:
                    d7:b1:fa:86:ff:e8:ea:b4:d1:a1:8c:8a:b8:a0:84:
                    4d:27:35:ee:f1:e8:0a:da:71:d1:3a:96:ac:84:c6:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:11:31:51:E7:6A:13:78:C4:FD:AB:76:5D:89:EB:FD:A2:3D:28:44
            X509v3 Authority Key Identifier:
                keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:30:71:b8:1c:8b:45:b0:b9:3f:e6:95:6d:87:93:81:30:cc:
         cc:4f:46:60:b2:2d:5b:ec:5d:53:ae:22:09:50:8b:8c:ec:0c:
         bd:1f:73:12:ea:bc:1d:14:89:e6:7e:f9:9b:4f:91:69:02:ef:
         85:1a:39:5c:f8:38:dd:0d:8e:d4:73:67:75:04:93:73:ed:95:
         a6:80:1f:84:05:4a:ff:7a:09:42:9b:ed:14:fd:61:44:26:fe:
         b5:62:64:fb:08:c4:56:56:58:13:a1:13:19:e7:0d:42:b7:d5:
         e7:78:46:7e:49:61:ce:e4:fc:fc:51:4b:45:53:19:4b:c4:fb:
         cf:ed:a7:88:24:76:eb:4c:d5:40:c1:c4:ef:ac:4c:84:f8:52:
         25:58:9a:76:87:c4:51:b6:b8:3d:a6:9f:cc:58:45:e4:73:c6:
         4e:06:6c:ef:a1:87:57:d3:be:0c:4d:57:bc:c1:ad:86:2b:5e:
         5d:95:b8:de:ce:ec:50:62:c7:e3:45:6a:64:58:15:89:eb:a5:
         01:e4:76:35:8e:f9:21:cf:2f:88:95:66:fc:b4:3c:03:2b:ec:
         f9:fc:f6:18:11:6e:e7:a6:3d:a9:16:1e:0d:ce:93:1e:c7:b0:
         a4:18:73:c6:d9:40:f3:01:b7:56:05:0f:62:ab:de:fd:79:41:
         69:cb:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:31:46 2025 by rpki-client