Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File:                     88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier:          37nq8Zjq0sgL2af0YLZOmbessA7TAyjrc15NtQzw+sU=
Subject key identifier:   FC:8C:9D:AF:28:F8:2E:9C:FF:09:CF:57:C0:34:37:2E:95:B1:3F:B3
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer:       /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial:       0196AD68F386B6A83AF5650118ACDB7164D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number:          152B
Signing time:             Thu 08 May 2025 01:00:58 +0000
Manifest this update:     Thu 08 May 2025 01:00:58 +0000
Manifest next update:     Fri 09 May 2025 01:00:58 +0000
Files and hashes:         1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: uGYpNFRyon0JLuQ2dRfNInJ4U8Nwid6+6fIYENOTe0M=)
                          2: ic2AvQV4fn5mQGurv_9LydC-BbI.roa (hash: mD0dAfaF87izkBorR76KrAgNEqpqvPq8C6YXxT1+QYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:68:f3:86:b6:a8:3a:f5:65:01:18:ac:db:71:64:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
        Validity
            Not Before: May  8 01:00:58 2025 GMT
            Not After : May  9 01:00:58 2025 GMT
        Subject: CN=fc8c9daf28f82e9cff09cf57c034372e95b13fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:77:3a:80:1a:90:85:4c:52:5a:fc:a1:a2:
                    5b:9b:8d:b3:5f:d2:fb:79:40:21:40:fd:1c:92:10:
                    63:24:92:ed:8a:11:ee:d9:f0:93:a0:56:3e:a1:8a:
                    93:1c:46:24:f3:83:58:ce:4f:4a:82:47:fd:11:00:
                    4e:73:ea:6a:03:24:d5:40:e2:ad:bf:e7:83:84:e1:
                    89:4f:f7:5f:f5:d0:a3:c6:c5:53:ab:4b:0e:56:05:
                    27:ec:cf:4f:cd:d0:92:2f:b6:89:41:95:95:32:ed:
                    23:60:ce:f6:b8:74:2a:2e:49:7b:1b:23:e0:cc:7e:
                    78:b1:f9:fe:51:92:aa:93:d1:96:b8:06:1c:5c:eb:
                    76:e6:f0:1f:1d:d6:7c:bb:e0:3f:3f:b4:b8:36:0d:
                    28:38:7c:45:3f:45:e5:7b:70:de:f0:d8:73:e0:75:
                    b2:6a:14:9d:d3:98:7d:b9:be:ab:4e:de:89:16:aa:
                    fb:3b:1e:d6:ec:7a:fc:bc:67:1a:23:0c:10:9e:60:
                    3b:37:66:79:4d:70:5a:b7:d0:fa:4b:fd:54:3a:d1:
                    d4:9c:be:81:3d:8e:1d:c2:dd:bc:14:9a:1d:12:e5:
                    6e:5d:7a:e0:67:df:f0:c8:bf:42:3f:28:9b:5e:c6:
                    e7:64:75:08:fc:aa:73:01:11:15:46:1a:5e:3a:5b:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8C:9D:AF:28:F8:2E:9C:FF:09:CF:57:C0:34:37:2E:95:B1:3F:B3
            X509v3 Authority Key Identifier:
                keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:32:05:cf:24:c6:87:63:5c:9f:71:27:1f:cc:48:20:2a:bc:
         12:e2:65:a8:6f:3c:a8:0c:59:e9:db:2c:35:5c:8c:f2:6a:73:
         f5:e2:42:6e:fb:ee:1b:42:97:d8:5c:8e:b9:df:6d:c2:eb:84:
         bc:dc:e3:c7:25:15:af:81:69:16:49:48:8b:52:5a:41:30:53:
         47:0e:15:99:80:ee:1b:e9:40:91:b8:f1:6b:e3:ff:56:5a:ca:
         56:ee:97:c4:88:dd:a0:ef:64:8c:af:ac:ea:89:e3:5d:8b:12:
         77:f2:d6:90:b1:3a:fa:ea:95:0c:76:3b:6b:39:0a:dc:03:7b:
         23:a0:aa:c0:f0:0e:a8:95:fb:4d:ac:b1:20:40:13:a1:4f:5e:
         29:24:fd:96:b3:bb:5c:d7:b9:b4:40:35:f0:1f:d8:89:d0:d9:
         7c:8e:00:97:a4:18:f9:78:c0:a3:28:7d:d2:7d:aa:0d:68:9e:
         09:e8:22:29:ba:80:5c:7b:6a:36:b6:4d:f2:ca:ee:ff:ef:67:
         99:a1:bf:4d:e6:3c:7a:4e:c0:83:30:83:40:3e:7d:b8:d0:77:
         a5:6d:b0:c7:3f:ce:ea:89:ae:1b:47:b4:56:39:eb:8f:af:50:
         f3:0d:96:ce:c9:4f:b0:0f:97:11:62:a4:e8:a9:f6:d9:30:51:
         47:82:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:59:28 2025 by rpki-client