Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File:                     ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier:          0DAqJw0QALf6LH/srIlD/vnYiyaA7XgN+mJqA99sboQ=
Subject key identifier:   F5:4F:5C:6B:FE:2C:E6:F5:29:98:3C:C6:22:CF:D4:EC:7A:2D:FA:92
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer:       /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial:       0196C238D708BB59746FC1E1C803B701BD8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number:          12A8
Signing time:             Mon 12 May 2025 02:00:26 +0000
Manifest this update:     Mon 12 May 2025 02:00:26 +0000
Manifest next update:     Tue 13 May 2025 02:00:26 +0000
Files and hashes:         1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: 7aV+iYC1FcCBI2aOYy2bq2Re91q4PLrgAdRH5JJOS2o=)
                          2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:38:d7:08:bb:59:74:6f:c1:e1:c8:03:b7:01:bd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
        Validity
            Not Before: May 12 02:00:26 2025 GMT
            Not After : May 13 02:00:26 2025 GMT
        Subject: CN=f54f5c6bfe2ce6f529983cc622cfd4ec7a2dfa92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e7:c4:ba:53:43:81:9a:a2:d9:3e:71:f0:45:
                    a0:4b:cd:86:99:1b:38:b4:a0:e0:6e:0a:25:0f:a9:
                    3c:19:44:17:37:ca:22:be:34:16:65:b4:83:bf:66:
                    2e:fb:07:b6:0a:08:27:83:e1:42:d1:71:0e:22:59:
                    11:5b:4f:22:fa:d6:54:b4:4b:cc:a4:85:c8:f9:c7:
                    28:2d:01:68:fa:cf:fc:7c:1d:63:38:a1:56:b3:db:
                    5e:95:a5:7e:71:77:74:65:a0:d3:e8:46:02:b3:08:
                    68:11:c1:f2:3d:b9:fa:7d:35:ac:de:dc:05:b0:91:
                    07:31:25:b6:ec:cd:af:57:79:59:cf:63:7e:9d:ae:
                    a3:92:c0:22:1d:b5:28:db:37:34:8a:ab:d2:5c:3c:
                    b5:8d:11:07:81:1a:a6:7a:fd:c9:aa:d4:c7:75:db:
                    e7:44:53:34:dc:e8:3b:1c:ee:6c:44:65:71:d3:19:
                    37:b9:4e:d6:be:5d:5e:89:97:5e:4d:46:21:c6:2e:
                    89:b3:41:1b:b1:c8:fc:90:64:74:11:72:93:a2:fb:
                    00:e3:53:1e:54:32:ae:df:56:8d:67:09:a1:97:c8:
                    5e:1b:63:7c:56:e0:8a:85:23:26:a9:49:9f:1e:31:
                    3f:2a:d5:3d:59:dc:c1:65:0a:54:4e:74:34:fb:c7:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4F:5C:6B:FE:2C:E6:F5:29:98:3C:C6:22:CF:D4:EC:7A:2D:FA:92
            X509v3 Authority Key Identifier:
                keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:1a:bc:5c:70:e7:30:8f:49:da:f9:68:2a:3a:bb:b9:1c:
         96:2f:8c:e4:ed:18:08:70:7a:06:46:00:e2:e9:74:77:33:ed:
         3d:b8:54:dd:13:e6:05:55:a4:1f:e7:9c:73:be:b0:50:6a:f5:
         8d:80:69:6a:b4:fc:63:2f:67:b1:6b:0d:5e:d8:9e:51:68:ae:
         b0:f2:d7:5a:d6:a8:c8:54:4b:f5:8f:7f:1c:eb:80:3e:0c:97:
         b8:f3:ee:12:78:ae:c3:e9:49:60:a6:61:dd:34:7a:03:84:06:
         da:95:21:5a:b8:0f:23:a8:7c:39:22:00:09:43:b9:45:cb:d0:
         2f:29:2b:fc:ff:ba:3d:84:fb:ef:ae:18:1e:6b:cb:81:b9:5c:
         48:f5:f3:aa:f5:33:4e:4e:d5:d0:e9:30:08:d3:9a:a8:5f:c0:
         50:82:da:ae:6e:c2:99:de:54:8a:86:89:49:f6:c7:09:53:d2:
         93:99:da:c5:84:e2:9d:32:0c:3a:50:e8:e4:d1:0f:a8:ad:d8:
         20:29:ae:37:e4:86:cb:2e:0b:1e:d2:37:ac:a4:8d:83:39:af:
         d0:6b:51:db:68:5b:23:a9:f4:cd:08:32:c5:bb:38:9e:46:8f:
         3f:f3:c8:db:51:ce:1e:55:fa:08:71:14:b1:61:4d:57:4f:fd:
         8e:c9:ff:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:14:57 2025 by rpki-client