Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File:                     hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier:          J6FNUa18Sn4Q4v40hxxwvxBPfDpppItvgnx4HWD434k=
Subject key identifier:   EC:63:CA:43:FE:1A:59:32:02:6A:62:78:30:DC:64:C9:E6:C4:93:3E
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer:       /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial:       0196AB0BFEC924350AE2DCD215CC07B6A4F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number:          152C
Signing time:             Wed 07 May 2025 14:00:12 +0000
Manifest this update:     Wed 07 May 2025 14:00:12 +0000
Manifest next update:     Thu 08 May 2025 14:00:12 +0000
Files and hashes:         1: 0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa (hash: Iz51+DSbV7Tr3oZnznfPb0ztDkoHj3CGvdnh39JEVfU=)
                          2: Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa (hash: XwxfewChyQGnh/6DJxz8pIZg+xrexkVvjsVCqgpoH3U=)
                          3: ZovzMlbHa6h-Fl7gDQG_Zq7WfR4.roa (hash: H/iI+5AR6wdmCN1X+mmy0vutxGeF8cVAtih493U1ycg=)
                          4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: mYL5UkzG5QvlV4lNQNOMOjtwyEpC9NMeT3i7Npau8JE=)
                          5: l73B-rq6PzNDiKoxaYkXjLCugtw.roa (hash: 3VSqbyAVKfkVsGJFnzfZhKO8PUH5YDBnP4CFYJUZ7hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:0b:fe:c9:24:35:0a:e2:dc:d2:15:cc:07:b6:a4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
        Validity
            Not Before: May  7 14:00:12 2025 GMT
            Not After : May  8 14:00:12 2025 GMT
        Subject: CN=ec63ca43fe1a5932026a627830dc64c9e6c4933e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:f3:24:35:0f:c8:dc:0a:ad:1d:ff:89:5d:
                    57:6b:1f:30:0d:8d:bc:38:04:41:62:42:e3:a3:30:
                    f2:07:63:49:2d:00:44:52:cf:81:0a:13:97:b9:4b:
                    9f:fd:3d:2e:89:de:90:2e:4b:12:bd:e4:74:09:57:
                    23:14:90:1f:9d:39:91:dd:ff:b6:0b:d2:c6:cf:fe:
                    24:1b:f5:f4:0b:fb:b7:39:8e:be:c8:fe:23:e3:58:
                    73:6f:c8:3a:f4:ce:2f:a8:06:52:33:c6:f9:32:a8:
                    83:d9:01:47:53:6a:ca:4c:fd:a3:13:27:a1:4a:8c:
                    04:c3:2d:66:3a:0c:cc:f6:d2:44:31:41:99:9a:18:
                    46:f0:3d:ba:28:4d:0d:41:dc:7e:7a:0a:67:31:f9:
                    86:74:e8:e5:d9:d0:0f:e8:5f:99:33:9e:7a:55:02:
                    8c:5e:e6:36:e4:4f:b9:82:a2:a4:89:08:d2:19:f4:
                    d1:4d:17:27:36:5e:21:7e:2f:7a:15:37:30:22:62:
                    c2:fd:09:07:61:6c:d3:57:98:cf:57:72:a8:f0:f6:
                    e0:99:34:6e:bb:40:9f:d4:67:47:b2:6f:b3:d5:a2:
                    37:9f:78:df:45:1b:5c:0d:de:f3:77:02:a6:1b:54:
                    b9:7f:58:09:a2:48:4a:30:c3:c5:a9:15:05:be:ca:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:63:CA:43:FE:1A:59:32:02:6A:62:78:30:DC:64:C9:E6:C4:93:3E
            X509v3 Authority Key Identifier:
                keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:57:43:26:25:69:c9:d0:9c:d4:79:59:3d:cf:34:19:f7:60:
         8f:d3:ce:b5:fd:c8:12:86:3d:d6:df:c1:00:57:7d:28:6d:36:
         07:57:6f:65:b9:bd:59:0f:4f:ab:f0:31:0e:27:b3:a6:c2:22:
         fb:15:d6:d5:18:8f:91:eb:34:3f:cc:eb:43:d4:b7:01:a7:58:
         50:38:7c:10:d9:b3:14:2f:77:e9:63:c6:c5:c7:26:9a:58:1f:
         8d:e3:9b:cd:d0:09:67:54:69:f0:79:9f:02:71:0c:79:87:d0:
         da:02:b9:65:8d:10:61:21:d8:c8:33:1f:b8:cb:bb:e3:24:c1:
         b3:16:3c:e9:b6:4a:64:70:60:15:11:ea:25:2f:e1:c4:9a:2b:
         3d:f1:2b:4b:3a:73:04:7c:bb:44:44:c4:01:0d:f2:5d:34:a0:
         77:7d:74:0d:88:6e:74:ad:4d:73:de:10:fc:80:e5:03:b1:17:
         11:ca:83:38:0e:d9:9b:b8:62:36:40:53:7f:b0:b4:d2:1c:97:
         2f:30:7e:3c:cb:6c:6f:58:5b:51:23:20:a4:35:8e:7b:89:42:
         57:c6:95:a7:41:eb:9e:ce:b8:4c:63:af:00:b8:9b:46:d4:ea:
         d2:cb:c6:5f:f4:ea:0f:6e:66:b8:cc:75:a4:55:33:7f:79:dc:
         76:04:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:08:03 2025 by rpki-client