Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File:                     8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier:          Q2ZszJpgG8hWH351jzvonLGD3sM6tz1ZXm+7sOaMRU0=
Subject key identifier:   88:39:62:4F:EC:FD:AD:54:92:0B:28:F9:6A:EE:AB:66:96:74:1B:A2
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer:       /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial:       0196CB05417BEF3BA454199BAF0BDD1E8690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number:          0B11
Signing time:             Tue 13 May 2025 19:00:41 +0000
Manifest this update:     Tue 13 May 2025 19:00:41 +0000
Manifest next update:     Wed 14 May 2025 19:00:41 +0000
Files and hashes:         1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: lScCJ2COiAo6pS0GMjS8FqNhwSlkk2I1YxolD6xiE+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:05:41:7b:ef:3b:a4:54:19:9b:af:0b:dd:1e:86:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
        Validity
            Not Before: May 13 19:00:41 2025 GMT
            Not After : May 14 19:00:41 2025 GMT
        Subject: CN=8839624fecfdad54920b28f96aeeab6696741ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:02:b0:3e:25:7d:33:18:48:f8:99:4d:a1:
                    68:5f:ab:43:0e:fc:93:32:26:14:b2:1a:30:2e:0e:
                    d1:5c:45:eb:a1:a5:29:7d:9b:88:16:4b:6a:a8:22:
                    92:ff:b1:83:a3:fa:fe:a4:ab:ad:8c:7b:3e:f5:2a:
                    55:70:68:80:19:bc:69:7e:3e:8e:4b:2c:81:e2:98:
                    8a:35:6c:dc:f5:e1:39:9c:1d:44:95:be:b2:6c:34:
                    81:61:ea:8d:d8:06:0e:0a:00:48:67:34:52:16:71:
                    0b:f9:18:6b:ba:3b:f1:ab:9e:6e:df:75:41:cd:cd:
                    c8:f3:53:62:04:df:85:a9:74:79:35:d3:8b:37:d0:
                    e7:2a:3d:b8:8c:48:0a:ec:26:4e:d8:34:32:14:f5:
                    8d:b5:e6:ed:32:a9:58:ec:8d:36:a7:64:5e:39:65:
                    dc:37:4a:07:c2:7f:b4:ce:7e:eb:0d:14:b7:fe:c2:
                    35:6f:f2:ca:18:87:49:c9:ab:5c:3e:34:c6:3e:8d:
                    a5:50:c3:23:46:71:29:29:dd:f0:c3:1e:97:41:a6:
                    37:95:53:f0:6b:a7:b1:27:e1:4b:20:66:9f:04:54:
                    6a:b4:d5:c0:ea:fd:7d:64:d2:71:24:d5:51:82:6d:
                    48:82:33:d1:5c:4f:bc:80:32:fe:a4:f8:51:24:ad:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:39:62:4F:EC:FD:AD:54:92:0B:28:F9:6A:EE:AB:66:96:74:1B:A2
            X509v3 Authority Key Identifier:
                keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4e:b1:c4:00:ce:a6:49:8d:15:bb:ea:7b:b6:fd:6e:8b:bd:
         8a:2d:cb:42:11:96:f9:a9:9a:52:f9:03:ff:22:47:bd:55:6f:
         9e:ea:61:45:4c:79:90:3f:aa:5e:a7:f9:b8:85:55:93:c4:24:
         fd:8b:5c:75:c6:97:43:79:58:b6:f6:80:fb:8b:6f:40:3b:0d:
         c5:95:13:81:bd:0b:f0:41:e4:0f:77:1b:ba:fc:1e:c5:c4:fa:
         40:c3:2a:cb:1f:cf:74:ad:4d:f7:24:60:92:c9:6e:fd:cf:80:
         eb:0f:50:a6:09:21:a5:d9:bb:ea:84:7d:1f:15:1b:de:8c:dc:
         60:53:d0:56:a3:e4:14:bf:b0:8b:ef:75:44:81:2e:46:ca:df:
         0a:d0:59:b5:fa:0b:54:10:08:8e:77:fe:24:67:48:a4:f8:c3:
         c8:ce:04:a2:4a:d5:e1:ba:ce:b9:81:ba:23:28:f7:ef:7b:c7:
         10:a7:84:a3:3e:b3:e8:77:ff:b9:bc:ce:df:14:4b:92:b9:ff:
         6b:c2:ab:47:32:08:90:92:43:81:50:73:ee:3f:5d:ff:05:d1:
         8c:99:d1:d1:df:15:ed:dc:a7:d0:10:ac:18:bc:93:85:c7:58:
         1f:57:f7:94:3a:18:02:64:ae:28:5c:c1:4d:24:eb:35:53:83:
         4e:6f:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:12:24 2025 by rpki-client