Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          3yr+YkDSTOUszMNOGv+VKecB51h8DKv13mAAmrolsvY=
Subject key identifier:   0E:0D:E9:07:A8:A0:88:CA:7A:09:21:C8:E0:4C:29:BD:99:E9:A3:80
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       0196B6356E117AD6D64943147E8B5559C82F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          1338
Signing time:             Fri 09 May 2025 18:01:17 +0000
Manifest this update:     Fri 09 May 2025 18:01:17 +0000
Manifest next update:     Sat 10 May 2025 18:01:17 +0000
Files and hashes:         1: 9dLAFBA3yZtxQ3Sz-i3bboY76i8.roa (hash: XKwu2dm5EiilAMiU6vQWAsMs3u94DmEeOaG3OlX3RRc=)
                          2: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=)
                          3: mLzt7xGUveLWBI5KBd3nPnlkK34.roa (hash: gBHkMYqm2CFNHYl0R32/z6OsqeoYFanglt5qYzw7wHQ=)
                          4: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=)
                          5: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: i1inIbVYJjHFVZCTBbur5orCoF02yjnf/cvSFC8ctBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:35:6e:11:7a:d6:d6:49:43:14:7e:8b:55:59:c8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: May  9 18:01:17 2025 GMT
            Not After : May 10 18:01:17 2025 GMT
        Subject: CN=0e0de907a8a088ca7a0921c8e04c29bd99e9a380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:7f:57:02:85:4f:d5:82:29:05:79:63:99:
                    ba:7e:28:69:2d:db:ac:28:f6:14:a9:5e:88:70:02:
                    14:82:9d:1a:dc:b8:7e:b1:59:42:b5:e4:67:5c:ce:
                    83:24:43:22:9a:19:8d:7a:b6:3b:17:bf:e9:40:33:
                    f3:47:56:db:e3:47:29:07:ba:94:6c:07:b1:4c:e5:
                    4d:ab:c3:33:35:8e:92:ff:13:ce:a3:87:86:bb:a1:
                    be:1f:97:cf:82:e8:78:dc:26:5c:e0:f0:51:ba:98:
                    15:0e:83:46:c5:8b:1c:09:53:c5:e7:d5:d9:27:22:
                    95:c6:f2:97:37:e6:ce:78:05:aa:84:5d:78:b7:ea:
                    4f:7b:4e:8a:bc:70:38:37:bc:51:60:d7:2d:fa:f3:
                    ec:89:e2:8f:f9:81:39:a9:2d:0a:28:59:52:33:65:
                    6c:27:9e:60:37:03:b4:a9:d5:67:ab:cd:9d:4e:98:
                    66:9d:67:69:7a:14:ea:4b:e1:49:e3:ad:54:1a:19:
                    3d:61:9a:d4:67:f9:b1:fd:8b:76:44:1f:9b:76:11:
                    95:d1:36:1d:3d:95:6d:5d:07:ee:9d:0d:0d:2d:17:
                    06:12:00:4c:0b:62:b1:aa:55:91:81:66:68:27:f0:
                    79:a3:dc:56:8d:bb:38:1a:94:3c:77:47:10:27:73:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0D:E9:07:A8:A0:88:CA:7A:09:21:C8:E0:4C:29:BD:99:E9:A3:80
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:6a:cc:5a:77:c1:6c:ac:7e:8d:c8:72:a5:02:73:55:ff:
         0f:50:12:1a:25:9b:5b:cd:78:fa:b0:60:03:6f:fc:4a:6b:36:
         25:9c:52:f6:02:7a:51:20:11:46:7c:9e:4b:83:56:4f:bf:93:
         79:4f:d4:56:43:92:9d:ff:25:e6:32:5f:24:60:62:e0:c5:c2:
         15:d2:d6:1c:8a:2f:63:c5:8a:f3:a3:ff:4d:32:b7:34:01:48:
         e8:7c:34:6e:0c:41:64:33:7e:2d:a2:16:b1:cd:ed:95:0b:fe:
         85:77:79:56:ba:54:f5:56:f0:22:3a:d8:b8:9d:fa:f4:d6:88:
         72:5c:c4:3e:fc:66:7f:8a:00:18:b2:e2:ac:fd:de:a1:83:ee:
         c8:7a:49:7d:49:56:92:2d:e9:49:37:cc:ef:8f:35:52:9d:dc:
         60:d2:7f:b0:89:42:a4:77:19:01:ad:60:7a:83:c9:50:b8:4c:
         4c:8a:d9:4b:73:56:c5:b0:40:71:2f:17:6f:f7:3b:f6:06:3a:
         89:8b:c5:ae:e2:51:29:4b:eb:76:48:c2:6c:a9:2f:21:b4:e1:
         1a:69:4d:54:d1:ba:3a:cd:1d:8a:1e:5b:2f:43:02:29:29:83:
         f1:b1:0d:d7:c6:d3:96:cb:8a:5e:53:d0:29:29:df:79:ed:ab:
         09:d6:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:39:43 2025 by rpki-client