Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
File:                     SAtOZTD1jbM45B1DTlwkjri0nrU.mft (raw, json)
Hash identifier:          uATeiiOAde7PjbabOFQIL2b55Q+J6xGPkV1dmCVhQnk=
Subject key identifier:   15:A9:69:41:F0:82:26:B4:40:31:32:7F:83:3C:53:F4:4F:F7:0D:F5
Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
Certificate issuer:       /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Certificate serial:       0196B710579ADF99D18A53B9967F15F951F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
Manifest number:          0C8E
Signing time:             Fri 09 May 2025 22:00:23 +0000
Manifest this update:     Fri 09 May 2025 22:00:23 +0000
Manifest next update:     Sat 10 May 2025 22:00:23 +0000
Files and hashes:         1: 7uSiA8HXWA8UBPDhlbJf6OPrStI.roa (hash: FkBj3YOFMPVe1t2rUxjgfIEksgfiFnto6OU3DC0lCyA=)
                          2: SAtOZTD1jbM45B1DTlwkjri0nrU.crl (hash: GYWBK4i8TOsQScanckmN8rkAvIsPggaPELJvYzLru0M=)
                          3: USDR-3S3Ht8uHMQ4E3_c_aswiFo.roa (hash: V2Oob57cuCUs4jtdyHi3fUFQvcz8PYQW8jqX4krUZXU=)
                          4: gNRsmV0XFCKJkgH1T9VLPl0qkP8.roa (hash: 7DieLwMe7vSj5T5/A8Tf5cCcPLC+4LWTW8IbIDeyX70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:10:57:9a:df:99:d1:8a:53:b9:96:7f:15:f9:51:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
        Validity
            Not Before: May  9 22:00:23 2025 GMT
            Not After : May 10 22:00:23 2025 GMT
        Subject: CN=15a96941f08226b44031327f833c53f44ff70df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e6:0c:49:7a:5e:8f:e4:64:71:52:bd:13:bd:
                    5f:1a:04:41:99:c4:54:c1:4e:df:ab:2d:0a:08:7f:
                    f7:e4:86:0d:b4:e0:5d:f4:44:cc:29:1a:9a:f4:94:
                    e2:a3:01:c9:18:87:ab:6f:f4:ec:38:c6:9f:92:c4:
                    17:5c:60:5c:cc:50:3e:e5:59:63:a7:89:ce:e8:94:
                    75:71:35:56:c0:66:d4:c4:c1:d9:af:74:17:d4:83:
                    f4:d5:27:55:76:72:c0:34:94:88:c6:1e:4d:de:5d:
                    40:d7:45:a6:25:ba:92:2f:47:0b:52:62:d3:db:25:
                    46:40:a2:e6:5a:74:b8:6d:79:c2:ac:95:9c:ad:01:
                    ba:bf:1a:80:e9:27:3d:0c:68:ea:db:03:c0:4e:ce:
                    25:0b:c9:d1:e9:a4:68:52:73:d5:7b:87:15:15:c2:
                    0f:1e:72:76:ed:f2:80:b3:28:07:cf:af:b3:84:dc:
                    be:a3:ec:43:3d:42:d3:1d:60:98:a0:c7:79:ef:52:
                    74:ab:02:e3:37:f2:c4:82:af:55:c3:be:1d:5c:47:
                    62:bb:66:7b:16:a1:a0:50:aa:d2:5f:fe:6e:0c:85:
                    2d:8e:95:7a:6e:b4:42:87:f8:91:52:ce:fd:89:15:
                    93:e6:85:ac:42:9a:f1:35:1f:b6:12:c0:8a:14:d2:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A9:69:41:F0:82:26:B4:40:31:32:7F:83:3C:53:F4:4F:F7:0D:F5
            X509v3 Authority Key Identifier:
                keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:81:83:1b:85:09:a8:3c:ba:38:85:78:39:fd:a7:db:55:c2:
         88:6e:23:85:4b:00:46:cf:8b:04:3d:c0:6b:28:17:14:9b:3a:
         92:08:d1:9e:e4:df:ec:bf:73:d6:47:71:a9:7e:ff:f3:24:1a:
         d5:73:c2:f1:d4:58:79:67:12:1b:4b:52:ca:01:41:9a:8e:03:
         c8:11:44:ca:04:c5:90:34:49:8d:d4:10:cd:ee:49:27:38:2f:
         19:0c:71:9a:a0:c6:f3:3b:cf:c5:f4:c9:c5:1c:17:4b:53:5c:
         71:bc:66:c5:d9:ed:37:5b:3a:75:d8:3a:1e:fb:61:52:c8:05:
         c0:a9:ae:56:65:b5:55:37:1f:ff:4e:6f:6c:7d:6c:03:9e:4e:
         ae:0f:9d:b1:63:66:95:cd:5a:56:6d:f0:d6:89:55:ab:09:1a:
         d8:97:94:48:ce:21:4e:3c:af:fa:a2:cb:8f:4e:5b:b6:58:3b:
         a4:3d:10:10:7f:2c:cd:7b:af:27:95:b6:41:75:53:82:34:e0:
         16:57:7f:7a:eb:cd:c0:77:4d:a1:d3:7b:ec:14:bd:ee:f1:0d:
         b7:fe:12:11:fe:9c:bc:cb:64:e6:dc:03:9a:c3:32:fc:7c:ba:
         cc:89:19:59:52:84:6a:d8:4e:e1:4a:31:3a:f4:08:9e:1d:42:
         46:3d:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:31:25 2025 by rpki-client