Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File:                     rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier:          OWDuAZR87iWufjS0lufp+uBGcZvds1Ux5996fwL1TkM=
Subject key identifier:   64:19:CF:70:7D:F5:42:E6:2C:5E:C9:43:B8:74:D5:9A:50:9D:71:10
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer:       /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial:       0196A0BFB27ADA315CA1BED61475FB956498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number:          1062
Signing time:             Mon 05 May 2025 14:00:39 +0000
Manifest this update:     Mon 05 May 2025 14:00:39 +0000
Manifest next update:     Tue 06 May 2025 14:00:39 +0000
Files and hashes:         1: cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa (hash: N1QdoGGRESzbdDo8ibNStMhsdyaZ5jyu5P6HBd0ZTZU=)
                          2: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: Wyp2wJpBhtf4V6X4d16JH0PxaB7ECIPTkueJnOEqrgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:bf:b2:7a:da:31:5c:a1:be:d6:14:75:fb:95:64:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
        Validity
            Not Before: May  5 14:00:39 2025 GMT
            Not After : May  6 14:00:39 2025 GMT
        Subject: CN=6419cf707df542e62c5ec943b874d59a509d7110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:18:fb:28:aa:74:5a:73:f3:bd:ab:a3:83:
                    53:b4:a7:3d:14:5b:17:08:da:a4:9d:b3:e6:b1:94:
                    29:8b:ff:b2:9b:c6:49:6e:dc:b1:d5:72:8c:43:ef:
                    54:84:2e:91:02:e0:de:55:56:d8:7b:c3:ad:29:d5:
                    e4:47:3e:19:7e:ff:6c:50:d5:fe:3d:10:a6:39:b8:
                    e5:d1:a7:da:11:e2:43:11:85:19:95:23:fd:50:a7:
                    0d:ac:69:78:b8:cf:9f:3d:2a:f8:48:90:33:21:2b:
                    c8:49:6b:98:f3:3c:b3:30:36:d0:0f:2f:8b:90:b6:
                    03:8e:5b:82:d6:c9:86:d1:af:c3:ee:17:5a:f3:50:
                    7e:a5:c1:e7:c8:cb:f9:1b:a0:41:4a:34:8f:83:08:
                    e7:92:b0:50:a7:29:70:2a:7d:5c:bd:a9:d4:68:88:
                    fd:f4:2c:96:0d:d0:40:32:13:4e:34:e9:80:b8:c2:
                    83:c5:89:5f:4e:42:7b:a8:73:96:bc:e9:98:01:9c:
                    ea:21:af:ba:3e:ab:c4:e8:eb:f0:37:bf:6f:8a:81:
                    bb:3d:2d:2c:de:2c:dd:11:84:e8:16:84:7b:15:69:
                    12:2d:35:ca:9d:9f:ba:b8:92:15:2b:2b:b4:81:fa:
                    8e:2f:1a:be:93:df:c3:d6:70:13:f1:6e:2c:4c:3f:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:19:CF:70:7D:F5:42:E6:2C:5E:C9:43:B8:74:D5:9A:50:9D:71:10
            X509v3 Authority Key Identifier:
                keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9a:ae:6d:18:83:60:06:61:85:78:ca:38:3c:28:0c:29:eb:
         3d:94:75:0c:45:d3:31:ac:1e:2a:c2:4b:45:0e:1c:bc:03:69:
         3a:72:f9:67:c4:ca:b7:d1:6e:20:75:c0:be:10:5d:9e:ee:88:
         7e:17:a3:87:21:25:75:1f:99:af:91:9e:06:ba:88:88:af:41:
         64:95:11:2c:61:87:82:ce:e6:67:be:47:9f:f8:b3:65:03:6c:
         ff:91:84:e8:8d:b3:e2:90:1f:ff:15:37:d0:77:d8:10:90:07:
         f5:2e:15:f8:26:c7:1f:bc:48:d5:6e:31:4d:0e:26:2e:09:82:
         e3:2b:bb:a6:23:91:f6:43:74:f8:a2:fd:cb:a5:b0:1b:6f:72:
         d0:ec:6a:9b:86:0f:93:97:4b:2e:6b:80:4c:bf:70:8f:ad:90:
         17:1b:c1:ed:ca:f1:45:7d:33:9b:08:50:c3:24:b1:fb:f2:e3:
         27:eb:15:0f:08:06:0a:79:b2:3a:68:d6:f1:ba:4c:e1:11:99:
         2b:9c:27:bf:3c:da:e7:47:6a:d1:4f:8a:cd:ec:3c:99:63:c7:
         56:c8:8d:f6:c8:f0:cb:72:f9:a4:b9:85:48:0a:12:ac:4c:72:
         0d:df:b3:98:16:2f:d1:d6:99:4a:d6:87:03:63:02:12:86:28:
         26:45:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:23:49 2025 by rpki-client