Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
File:                     frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft (raw, json)
Hash identifier:          utoX9PFRc26UYtLHyWyuYPcY8Mne+bC+vo9bVdJ34z0=
Subject key identifier:   2C:DA:27:F3:2A:5D:7A:28:50:C9:27:90:52:69:18:E6:2B:AF:00:6A
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Certificate issuer:       /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial:       0196DB53B8139B9358EE92EF6794D0021176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
Manifest number:          08EA
Signing time:             Fri 16 May 2025 23:00:18 +0000
Manifest this update:     Fri 16 May 2025 23:00:18 +0000
Manifest next update:     Sat 17 May 2025 23:00:18 +0000
Files and hashes:         1: D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa (hash: iOwjeX+ly9me24ya3PbZf2MmDFD7bpYOFi09vEBVm6M=)
                          2: frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl (hash: zkXOKtFfN5xmiqZyUsl9vDRAmHXDufVGpH/Y/aUVJCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:53:b8:13:9b:93:58:ee:92:ef:67:94:d0:02:11:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
        Validity
            Not Before: May 16 23:00:18 2025 GMT
            Not After : May 17 23:00:18 2025 GMT
        Subject: CN=2cda27f32a5d7a2850c92790526918e62baf006a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ec:86:a7:d4:7c:41:3e:e8:70:35:06:9a:8b:
                    d8:59:7e:17:fc:e1:37:f7:fa:e5:ae:78:df:2e:eb:
                    cd:0f:22:3a:ef:ea:20:8e:e9:c9:28:5e:1e:c1:12:
                    de:eb:61:1b:79:4d:79:a1:b3:c2:51:8f:aa:9c:c4:
                    02:f8:4d:a5:10:ba:cf:9d:05:70:f4:02:22:16:2e:
                    7b:b7:1f:05:f6:82:30:ef:a6:44:a5:25:5f:fc:1b:
                    e4:0d:56:12:b8:96:7b:81:4e:a8:6d:07:8f:92:95:
                    e5:8f:26:ae:b7:2c:5c:bb:03:00:18:e2:8a:a6:d8:
                    44:2a:e4:93:cb:0a:f7:3a:6f:e1:c8:b6:a2:12:25:
                    25:05:f5:b2:3c:2f:bd:f9:b6:1b:0c:4f:a3:37:3b:
                    ec:60:59:43:61:54:7b:27:5d:a5:c5:79:7a:93:1d:
                    1a:a4:be:7e:70:bb:f6:3e:24:44:7f:5c:4c:d0:8f:
                    f5:59:d5:05:e3:1a:2e:bd:09:e8:df:52:4d:52:ec:
                    a3:40:e2:41:36:40:c6:68:9b:d2:32:43:bc:a8:5e:
                    e2:ab:16:a2:45:7f:4b:41:74:41:36:f1:f9:98:ee:
                    b4:34:d8:83:1f:69:dd:60:ca:17:28:d4:4f:8e:05:
                    ac:72:50:15:10:e7:1e:bb:32:66:8e:e2:4f:4a:41:
                    07:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DA:27:F3:2A:5D:7A:28:50:C9:27:90:52:69:18:E6:2B:AF:00:6A
            X509v3 Authority Key Identifier:
                keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:ad:eb:6f:59:10:31:30:40:1f:7d:96:38:a6:a8:19:41:
         10:9a:02:23:af:87:37:24:ad:e0:14:41:a0:e6:87:ba:11:05:
         69:d2:0e:65:6a:be:0d:09:df:3b:ca:b5:95:6e:ba:a2:6d:3e:
         51:4a:80:5c:fe:07:a8:f3:20:f0:f0:e4:f4:ae:e7:7c:d9:ad:
         c9:e5:55:0f:1c:c1:37:28:b2:65:50:8d:32:ad:85:92:c1:4b:
         18:f0:9d:82:fe:fd:d5:b4:16:d5:d8:31:9f:0e:81:77:d6:f5:
         43:f1:f2:1b:aa:4e:95:4a:4f:22:0b:7e:9f:bd:ed:7f:b1:d4:
         b9:80:f7:6f:64:0f:fe:46:d0:ac:bd:46:a7:97:4d:37:4f:0f:
         8a:cf:7f:24:d5:7d:f1:bd:da:4b:b2:77:ba:63:5c:66:34:83:
         cc:e4:5e:7d:ea:a9:64:01:49:99:9b:f6:46:de:2d:e2:9e:ab:
         e1:b1:08:6b:b3:00:03:c7:b1:d5:7a:4e:74:fa:ec:64:5b:60:
         f8:2d:0d:7c:b4:33:a8:ab:49:69:d4:26:4d:ae:e7:c8:14:6f:
         16:56:14:72:15:22:72:58:35:77:ed:6a:2f:0b:e0:f7:d0:58:
         55:7d:29:e8:94:26:39:91:cc:e1:d9:9f:9a:88:58:af:96:e6:
         2c:3f:dc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:33:50 2025 by rpki-client