Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File:                     i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier:          yajkpbLsEftqgHsnlUJw7MntrYh9SD4Uhn2YVDK48QE=
Subject key identifier:   45:9A:74:79:C1:CD:EB:58:BA:42:BF:2B:15:96:0E:06:DB:E3:DC:7F
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer:       /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial:       0196C94D7373E02D9ACFD400F9CEC1D4F631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number:          0842
Signing time:             Tue 13 May 2025 11:00:18 +0000
Manifest this update:     Tue 13 May 2025 11:00:18 +0000
Manifest next update:     Wed 14 May 2025 11:00:18 +0000
Files and hashes:         1: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: a/HGZ8m++J42+/uw4AP0oeUxJg48qrxEICkhhRzDAR8=)
                          2: stIrfyQj0_eTZw5LKQkMNxuFxgI.roa (hash: eqwBV8CXGai5haR4OF0T1dC++87tM0y7pi8XDxr8OrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:4d:73:73:e0:2d:9a:cf:d4:00:f9:ce:c1:d4:f6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
        Validity
            Not Before: May 13 11:00:18 2025 GMT
            Not After : May 14 11:00:18 2025 GMT
        Subject: CN=459a7479c1cdeb58ba42bf2b15960e06dbe3dc7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:80:fa:f1:04:b6:88:4c:23:96:ec:6f:e0:
                    f8:79:ef:b9:42:16:84:7a:a0:5b:3d:58:c6:3d:f4:
                    21:34:37:b1:68:14:43:59:f7:f1:41:0a:57:ca:b2:
                    f4:40:e9:97:22:5d:08:f6:08:60:9c:43:39:c6:d1:
                    51:a1:be:f9:89:7f:37:6f:e9:41:1f:18:8e:4d:b6:
                    58:b2:42:5e:58:76:ac:fa:7a:84:cf:47:da:8a:18:
                    44:e4:77:0d:13:f6:99:b1:96:4b:8a:99:d2:12:91:
                    8d:23:8b:e4:f6:d4:b4:15:cd:be:a7:cb:be:b2:ec:
                    ec:23:aa:7b:65:da:0a:c9:61:bd:d4:62:9f:21:84:
                    f3:12:26:24:a7:76:06:7f:0d:26:08:20:1c:c9:4f:
                    3a:1d:3c:07:73:5b:2f:f6:ae:78:d9:24:12:7d:8e:
                    6f:0c:9a:b7:26:8e:fa:6c:23:bd:4f:3a:0b:47:65:
                    54:dd:7e:54:2b:3e:01:ec:59:da:3e:17:fb:fb:f6:
                    83:c8:6a:17:35:b3:25:cf:75:89:e0:f1:46:18:79:
                    8a:89:f6:f4:bc:54:4d:e5:73:4b:d7:c1:4e:76:c5:
                    c0:b6:e0:f5:b5:5c:c5:34:56:61:55:f7:14:f0:e2:
                    80:aa:9c:05:b5:b6:8b:97:c6:d9:27:28:6a:b1:f8:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9A:74:79:C1:CD:EB:58:BA:42:BF:2B:15:96:0E:06:DB:E3:DC:7F
            X509v3 Authority Key Identifier:
                keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:76:b0:7c:9c:40:df:8a:64:8c:29:6a:fc:cd:ea:4a:26:d3:
         b9:99:cb:1f:0a:e8:96:b5:ca:d3:bd:b7:f3:92:72:df:40:28:
         f7:6e:92:f7:a1:1b:c9:8a:4e:ce:49:78:7e:97:f7:fc:e7:29:
         74:92:82:c0:f0:fd:22:83:2f:91:c1:9c:a2:f5:ba:43:7e:cd:
         95:ee:8e:15:2d:60:88:18:ab:18:b5:9e:71:c3:95:a5:c1:07:
         21:01:bb:f3:07:a7:4a:d4:4f:ee:ab:60:74:3f:75:0e:77:d0:
         a4:29:13:ee:6e:f3:f6:1b:21:9b:9f:4d:7c:d8:9a:14:54:b5:
         9f:ea:33:e3:d2:77:1d:18:b8:f7:ef:f1:27:33:68:86:06:b1:
         80:1d:dd:48:8e:d6:63:8c:c9:66:e2:ae:51:4b:62:2a:9c:03:
         48:0b:ff:13:c4:fb:e8:10:c6:1b:83:96:ab:05:41:9c:63:b8:
         ee:0b:bd:d0:b7:bb:6b:3d:26:c7:89:f3:a6:02:2b:22:68:9c:
         88:a0:89:ab:37:10:e8:38:c5:e1:01:e1:b7:26:cb:6a:bf:be:
         6c:c1:7f:c8:40:1b:13:89:4b:a4:7f:57:41:84:63:c2:3b:e8:
         b6:cb:a0:db:21:f4:45:70:32:c4:9c:d3:39:89:c9:ae:04:03:
         9d:ed:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:22:30 2025 by rpki-client