Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File:                     2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier:          UkxGkBNvF6dfwdSlM7RhZN3OEF8/bBvk4NGulD19ZDQ=
Subject key identifier:   C8:58:95:71:30:85:00:72:11:4E:B2:26:AD:8E:34:B7:AE:70:D1:E2
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer:       /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial:       0196A5AF7703574E7D560AEB22847B9C220A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 13:01:01 +0000
Manifest this update:     Tue 06 May 2025 13:01:01 +0000
Manifest next update:     Wed 07 May 2025 13:01:01 +0000
Files and hashes:         1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: fJ9YdrDVu7VlaPdHF4XABLfYmsoyiRHHnzSifGxV4vI=)
                          2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:af:77:03:57:4e:7d:56:0a:eb:22:84:7b:9c:22:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
        Validity
            Not Before: May  6 13:01:01 2025 GMT
            Not After : May  7 13:01:01 2025 GMT
        Subject: CN=c858957130850072114eb226ad8e34b7ae70d1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:51:2d:00:e6:1e:e1:08:53:2c:32:fa:ad:
                    85:ea:56:41:d8:d5:f6:34:d0:1a:64:19:cd:35:ed:
                    a8:51:03:ab:f1:eb:76:4f:38:b8:6d:a2:f5:ee:db:
                    af:9f:b8:22:f2:68:63:f4:dc:15:f2:29:ca:01:bb:
                    fb:e0:71:96:bd:3b:e2:a8:b0:d7:c6:cf:9a:6a:3a:
                    5f:9a:df:1c:1f:ee:53:dd:83:f9:a9:90:61:00:93:
                    83:d4:37:fb:1c:6a:e8:d3:63:a6:cb:a9:ee:43:be:
                    ec:df:04:ce:e2:cb:30:61:50:b1:92:76:bf:48:33:
                    27:4e:f8:08:13:a5:40:d8:d7:51:98:5d:b0:ac:9f:
                    3e:7f:41:bb:4c:1a:45:46:ed:09:a4:43:5c:7a:e1:
                    e4:e7:ab:96:d0:61:92:5c:9d:16:c2:e2:6d:44:ce:
                    af:18:a5:c7:81:b5:75:f7:35:98:f3:ec:ee:1a:1b:
                    9d:79:e9:dc:67:da:34:a1:d2:1c:72:da:4e:7a:7f:
                    f5:d4:d2:80:7e:d2:42:39:b2:44:05:81:f9:d6:db:
                    ee:98:d7:77:23:f4:7d:37:f4:1c:dd:b9:40:78:91:
                    4c:c8:cd:7b:e5:74:8f:99:ea:54:1f:3d:8a:ac:e4:
                    ce:c8:11:53:ae:3f:19:dc:07:af:4c:e8:39:43:05:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:58:95:71:30:85:00:72:11:4E:B2:26:AD:8E:34:B7:AE:70:D1:E2
            X509v3 Authority Key Identifier:
                keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d2:7d:7b:84:77:a0:6d:dc:3b:20:b7:d3:f6:69:cc:63:4c:
         bb:07:88:00:be:e7:fb:20:25:8d:b2:10:3d:d8:1c:4d:82:22:
         20:64:a8:f2:e1:9c:da:0e:64:87:18:8f:10:3e:ef:54:1f:ae:
         fc:19:20:14:6e:07:14:6a:f1:b5:63:00:2c:de:1b:3c:17:b9:
         e5:9e:99:ba:2c:aa:0f:98:31:ad:c6:a0:73:be:47:2e:5e:e4:
         b0:ea:47:36:b2:21:6e:5b:c8:9e:5b:d3:59:e9:cb:25:e7:1b:
         7d:d1:89:ef:ac:e0:3f:51:e9:ac:c5:a1:dd:2f:1a:92:30:84:
         2a:4c:98:9e:78:fe:3d:4d:b8:c4:f0:a2:5f:1c:94:77:68:93:
         98:3a:17:9d:37:fc:a4:d5:ea:7d:25:b6:b6:7c:59:a9:aa:af:
         8f:02:94:a0:41:bd:a2:51:c7:f0:db:ef:c8:81:a3:0c:82:f3:
         f2:a1:40:a7:ca:6e:17:b6:50:fb:ba:07:2e:15:79:49:08:82:
         82:6e:4c:63:42:af:62:60:37:ec:83:ef:70:a9:9d:5d:66:fd:
         79:50:56:32:2f:5c:9d:5e:e1:13:7a:1f:92:54:5d:13:92:13:
         c7:bd:ec:fb:6d:56:5f:5d:6b:7f:14:36:07:d8:53:d2:cb:2d:
         23:94:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:19:28 2025 by rpki-client