Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
File:                     L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft (raw, json)
Hash identifier:          ho2ew+CTsU5bx2CaoB+I5Ht87didz4CrzO9OvItpaXY=
Subject key identifier:   95:85:2F:CA:F9:D2:1C:9E:5C:B2:24:15:A7:DF:EC:4B:25:A7:AB:48
Authority key identifier: 2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
Certificate issuer:       /CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Certificate serial:       0196B032752D032289EC48226BDABFA894D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
Manifest number:          0F42
Signing time:             Thu 08 May 2025 14:00:18 +0000
Manifest this update:     Thu 08 May 2025 14:00:18 +0000
Manifest next update:     Fri 09 May 2025 14:00:18 +0000
Files and hashes:         1: DLJprIPgvCAnO7QSJdl3zR0anWU.roa (hash: G99IKFXpxSMbCkWEKl23+BBs+CPi7iUKXtQNR3AhKak=)
                          2: L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl (hash: VAuObP9io6BpCL4rydaBejZITnqLPx6Od+cZVVaHW7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:32:75:2d:03:22:89:ec:48:22:6b:da:bf:a8:94:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
        Validity
            Not Before: May  8 14:00:18 2025 GMT
            Not After : May  9 14:00:18 2025 GMT
        Subject: CN=95852fcaf9d21c9e5cb22415a7dfec4b25a7ab48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:05:a6:d2:8f:45:11:6c:01:31:87:7e:c8:
                    2b:e3:ae:20:89:ee:f1:f3:cd:a6:fc:5b:24:94:0f:
                    10:d4:c8:f9:af:55:6f:3a:44:1e:da:a4:56:4c:74:
                    cb:91:52:c4:07:3c:1c:cd:20:0b:6e:b2:50:d1:9b:
                    3d:fd:0e:c4:1a:69:45:b6:00:8d:07:44:b1:22:21:
                    28:e9:1f:4e:97:18:9b:03:3f:bb:f6:b7:a5:5e:4c:
                    5d:51:c6:4f:f9:07:d7:08:6c:3e:40:bc:a7:17:86:
                    07:39:c8:6e:1e:40:3b:60:d6:45:58:ce:25:2f:ac:
                    2d:bc:0b:2b:9e:87:93:b9:a0:34:8b:69:13:85:06:
                    7a:d2:93:b1:80:23:d0:e3:c1:cc:c5:86:f0:39:22:
                    1a:74:c4:0f:61:97:a6:65:b7:82:3b:dd:91:32:f9:
                    b6:29:f9:86:00:60:dc:2a:b3:78:f2:3f:78:b0:fd:
                    3b:37:77:a4:09:0f:da:02:25:18:09:53:6a:17:4a:
                    63:55:99:e3:c9:79:34:87:4c:3f:f6:c6:1b:57:1d:
                    b5:15:63:ed:50:24:97:02:52:2d:b5:54:ac:6c:c7:
                    ca:4e:23:e3:9f:76:49:71:be:b6:bc:73:e4:23:76:
                    24:a1:83:d9:6f:33:25:49:bc:5e:be:e2:64:99:05:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:85:2F:CA:F9:D2:1C:9E:5C:B2:24:15:A7:DF:EC:4B:25:A7:AB:48
            X509v3 Authority Key Identifier:
                keyid:2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5f:46:ca:c7:ae:1e:43:be:6e:3b:8e:60:1a:28:0e:2a:72:
         69:89:a8:7a:ac:ff:d7:c0:e8:6f:5d:1b:6c:0d:82:df:87:09:
         eb:7b:54:ae:dc:91:04:6c:22:a5:97:23:8a:eb:a2:92:56:c7:
         ff:95:36:65:51:75:18:0b:67:79:d4:46:42:59:39:2e:f0:91:
         c8:39:4d:f5:8c:89:a6:22:af:97:4a:db:ad:e3:7e:86:71:41:
         24:1a:65:3e:5c:43:db:94:32:46:9d:ca:6f:7c:b3:7f:79:57:
         14:1e:53:4a:27:36:c6:bd:3b:bb:f4:00:7c:0c:ee:4f:7f:9e:
         bc:f4:f4:a7:9c:6d:3c:be:e4:ef:a4:9a:c7:df:6a:4f:92:41:
         3e:81:d3:86:4c:6c:fe:d2:4b:57:f3:3b:2f:7e:8a:48:ab:50:
         22:74:dc:b3:d7:52:2b:be:a5:a4:29:e2:48:77:27:86:f1:c5:
         e4:6d:c0:4c:f9:df:6e:2b:8b:26:44:64:c3:ec:2b:a6:39:c2:
         c8:32:c4:43:8d:f0:b7:72:7d:75:82:d6:db:e7:c2:73:4e:ce:
         c1:32:dd:27:f4:ca:8d:ef:99:4f:bb:5b:c5:93:1f:67:1b:b1:
         e2:2c:15:48:f6:e1:a8:25:4a:b4:41:61:99:54:aa:fb:c7:a4:
         68:9c:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:15:21 2025 by rpki-client