Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File:                     8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier:          xz8bOqFkWH+g36Y4066W5lkKBN3SqyTlorAxtieT4XE=
Subject key identifier:   A5:CD:C2:6D:40:95:6A:EB:3D:80:5F:56:E8:7F:B1:FE:AC:64:B5:56
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer:       /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial:       0196C081B2D0E213E95174A3823FA12B441B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number:          1537
Signing time:             Sun 11 May 2025 18:00:47 +0000
Manifest this update:     Sun 11 May 2025 18:00:47 +0000
Manifest next update:     Mon 12 May 2025 18:00:47 +0000
Files and hashes:         1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=)
                          2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: Po7CLqEsHk6Ae5Ns8Ow04mY7n8KTKk+46vczR+9B1wE=)
                          3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=)
                          4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:81:b2:d0:e2:13:e9:51:74:a3:82:3f:a1:2b:44:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
        Validity
            Not Before: May 11 18:00:47 2025 GMT
            Not After : May 12 18:00:47 2025 GMT
        Subject: CN=a5cdc26d40956aeb3d805f56e87fb1feac64b556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:d8:1b:ea:da:75:36:4e:4f:c5:1e:6e:c3:
                    a1:33:42:b3:70:21:59:25:43:57:e0:cd:2b:ef:f1:
                    89:e3:0e:c5:55:b7:26:cb:3b:5d:5e:4f:91:ff:cf:
                    37:d3:ef:21:5d:b6:ac:7a:3d:ed:6a:06:de:38:e3:
                    c1:79:94:75:4d:9b:81:f2:eb:86:04:cd:7d:6f:37:
                    34:43:51:8c:d7:6d:84:26:14:ff:28:b0:29:e4:f3:
                    5d:39:b9:49:e2:4b:80:8b:72:03:d6:59:41:e2:e6:
                    f0:5d:1d:d9:d3:fb:29:51:f4:5e:2f:bb:83:20:bd:
                    1f:fa:63:3b:5b:30:e3:a5:1e:32:f7:04:27:2a:df:
                    66:67:94:43:ec:68:99:f4:f7:a4:cb:ab:56:13:88:
                    cf:93:3a:5c:83:12:c8:44:ae:87:4b:9d:51:30:65:
                    bc:5f:05:be:5b:b3:e1:1d:40:39:63:49:0e:40:fc:
                    3b:e3:30:12:bf:a9:ab:ea:7d:dd:36:3c:09:1e:c0:
                    34:05:51:e5:01:36:a0:b9:46:7b:a3:f1:44:54:e6:
                    ea:83:43:3b:eb:7c:0b:85:75:6c:18:70:a3:56:4b:
                    92:cc:73:b9:51:a2:26:96:e3:3e:25:67:16:d1:1f:
                    21:3e:a5:a2:ac:23:04:55:7c:af:02:1f:b1:ee:83:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CD:C2:6D:40:95:6A:EB:3D:80:5F:56:E8:7F:B1:FE:AC:64:B5:56
            X509v3 Authority Key Identifier:
                keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:da:a3:2d:8c:e7:1d:63:c1:c1:7d:f2:4d:05:be:93:3a:
         ca:93:73:64:d1:ad:10:a4:f9:fd:ec:d1:9e:af:6f:a2:4d:9c:
         91:6a:02:80:8f:c8:ea:3c:0b:8c:dd:a6:d7:3d:41:08:27:f0:
         1f:0d:ea:3a:cd:2a:d9:52:c8:5f:a0:f9:1a:90:95:1f:76:97:
         1c:73:d6:5a:15:2d:b7:52:cc:33:9f:32:84:b3:89:83:3d:aa:
         df:34:34:b1:86:7c:22:39:c1:d2:24:98:e4:e0:63:0c:7d:59:
         48:1a:fb:d8:cc:f1:a8:09:d0:b6:d7:61:2d:8a:33:bc:db:46:
         d7:6d:57:e4:3b:b7:85:2f:7c:0e:cd:0c:8c:62:a7:58:c6:cf:
         be:2e:44:4b:8d:59:82:3a:cf:07:58:2c:3b:75:f4:ac:a3:13:
         5b:ae:79:a4:a5:4b:27:1a:f1:66:6e:a8:1d:a4:7b:b6:c1:72:
         b7:b1:95:43:ee:2a:e3:ff:6e:00:cc:4b:59:f6:a4:4f:20:66:
         77:43:5a:b7:79:e0:b6:4a:ad:78:d2:f3:2c:e9:81:b4:ea:63:
         72:1b:8c:96:7c:86:bc:b7:ca:c2:fe:e4:cf:63:ef:2c:4f:02:
         df:cc:3c:63:7f:4c:8a:28:e2:81:0f:52:85:91:25:1d:d5:29:
         3a:b1:59:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:18:25 2025 by rpki-client