Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File:                     8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier:          r+oHHXQWy3x6maSO2K71pVUPs6GbM9qR0FRkjC/UmuM=
Subject key identifier:   E5:1A:E3:1F:25:41:9B:CC:4D:E8:67:47:B2:B8:94:79:BF:95:39:62
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer:       /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial:       0196A68A8F0E7DEF1C0D5150BE55F25E3A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number:          0303
Signing time:             Tue 06 May 2025 17:00:20 +0000
Manifest this update:     Tue 06 May 2025 17:00:20 +0000
Manifest next update:     Wed 07 May 2025 17:00:20 +0000
Files and hashes:         1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: 5NoiNn1QDXmzEtBlp3EFKhql+MO8BTaTPrWQ94zQ2uk=)
                          2: ZEIkHOpAjx_99PsiN5R21UlMSKc.roa (hash: vTffovFaT4NCjWWk8Fwv+MgUP11pdffCPeTnPWoxFwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:8a:8f:0e:7d:ef:1c:0d:51:50:be:55:f2:5e:3a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
        Validity
            Not Before: May  6 17:00:20 2025 GMT
            Not After : May  7 17:00:20 2025 GMT
        Subject: CN=e51ae31f25419bcc4de86747b2b89479bf953962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:e8:9a:ef:e0:e2:f7:d1:e3:23:80:5d:f1:
                    1c:7c:99:ad:e9:13:fc:21:5f:bc:cb:d6:e9:4b:d0:
                    cb:00:48:38:4b:ec:37:f0:e7:4b:51:38:74:70:a3:
                    23:ec:ef:de:be:9e:67:c0:d1:55:01:f5:ac:ac:90:
                    50:46:b5:b9:56:f3:6f:4a:e6:7b:f4:56:fe:e8:0a:
                    58:6a:2e:d5:2e:6a:b1:e6:3e:65:62:eb:1b:b1:22:
                    07:ff:58:f6:af:10:13:87:69:77:df:3c:22:db:3b:
                    e2:4f:f8:6c:f6:9f:1f:2f:29:dd:4c:05:6d:27:e5:
                    3f:15:83:a8:14:6e:12:01:ae:52:a2:df:31:06:3a:
                    f1:ff:56:04:2e:25:55:6c:3f:c6:6b:8a:25:24:70:
                    e2:19:14:d2:55:cc:36:56:86:56:4f:e9:93:af:d5:
                    ee:16:25:58:18:09:28:e7:76:0b:c8:a1:a3:38:84:
                    ff:25:ed:17:04:b6:d1:49:54:27:60:1f:ca:76:a5:
                    74:1b:ef:2a:c4:b6:fc:b8:aa:39:74:c4:05:0d:04:
                    fd:1a:f1:ff:dc:02:48:68:ee:02:64:e7:0c:a2:b0:
                    f3:a9:76:24:45:57:d3:ec:dd:70:fa:ec:e3:a3:26:
                    35:be:20:57:e1:4e:92:f1:bc:a5:4e:19:e1:17:8b:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1A:E3:1F:25:41:9B:CC:4D:E8:67:47:B2:B8:94:79:BF:95:39:62
            X509v3 Authority Key Identifier:
                keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:78:fe:9d:27:b5:74:ca:e5:0e:e3:95:88:2c:8b:5f:dc:
         de:95:c2:81:a0:72:40:8d:ef:5b:78:16:45:2c:72:89:4f:8e:
         8c:f4:99:30:01:d3:1c:e8:f7:c4:bc:9a:e0:4c:19:72:3e:d6:
         42:e6:04:0a:9a:ad:1f:6d:5f:55:85:ec:4f:00:b6:8d:7a:42:
         76:59:e5:a3:18:49:1c:28:c4:44:b7:d4:b5:9c:6d:e5:2b:c1:
         d6:d6:44:0b:c8:e2:3f:80:27:08:91:20:8e:ab:f7:47:20:ad:
         4f:dc:6a:ec:c3:75:de:25:72:08:83:35:1e:fe:33:de:83:00:
         bb:7d:cb:7f:6b:fb:50:0a:28:24:f0:08:d7:8f:8a:8f:c2:4d:
         52:7a:76:49:d2:4e:d3:7e:ec:be:18:56:de:76:7d:ca:5b:4c:
         bf:68:38:e3:24:3b:05:2e:6c:0f:5f:4e:25:fb:bd:b4:13:86:
         f8:0f:b1:92:b0:af:47:a2:02:4f:26:94:f2:bd:c7:b0:15:b7:
         a3:3a:4d:08:0b:6b:18:a3:d6:50:e3:8c:c8:9d:90:1b:6e:88:
         2a:8c:c8:ec:95:e2:49:25:e3:40:3a:cf:cd:42:f1:79:20:69:
         67:cf:65:ff:bb:ee:e6:18:7c:21:f4:ed:11:3e:62:d1:0c:74:
         f3:b3:9e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:28:20 2025 by rpki-client