Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File:                     Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier:          Vkfo7MA35jSCmLtgn573o8JJYkj71Yva3mXpMMA0IB0=
Subject key identifier:   58:6F:D4:DB:38:DC:70:63:45:64:46:53:50:0A:0B:1A:83:C0:88:B5
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       0196B10E8710E8E8ABD8B5CE6A275D1176A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number:          11E8
Signing time:             Thu 08 May 2025 18:00:41 +0000
Manifest this update:     Thu 08 May 2025 18:00:41 +0000
Manifest next update:     Fri 09 May 2025 18:00:41 +0000
Files and hashes:         1: M9VOPO1QfWRnU4hQ9QVXASg96jA.roa (hash: irJVQjaxHBdQQuBZR03utwnIZQAJVfzNYFhhJleKRbg=)
                          2: MZ_QBnViUEyC8ZRFkedX8Rv5Crs.roa (hash: XyD021GY+KiQ98JM0NY1iLl+QMVF+YOoCbUCeu964IY=)
                          3: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: a6Q2Y9bRYkZBp3842fNEVW87OZk+JrL+2f0rmRPdH2M=)
                          4: XH8_n2Xu0Ky0NZ-VpBjvZGYKIak.roa (hash: BEZY3ts6B3Y7WcxEDYL2G9ZE46ppRZ9yzyXyYGEQ0qI=)
                          5: inYhmF6eIH31cCbSimSwHmklnkM.roa (hash: Z7JVezrkgt/wUelYsw9uGal8TdsJiFhrzbB2ZBBaAzE=)
                          6: og5qYEWen63bomOC6zKV2-iRJG8.roa (hash: PKfcuKBaAgdkTGnezARQJkmyOyp3oz6QpSYP3CmFp+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:0e:87:10:e8:e8:ab:d8:b5:ce:6a:27:5d:11:76:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: May  8 18:00:41 2025 GMT
            Not After : May  9 18:00:41 2025 GMT
        Subject: CN=586fd4db38dc706345644653500a0b1a83c088b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:78:8c:44:1a:7e:03:70:29:74:39:a8:68:
                    e2:0f:8b:65:67:e1:b1:88:6d:b3:eb:7c:ae:e0:71:
                    db:8c:c8:5f:5d:06:54:07:1f:5a:6c:7e:e8:54:ac:
                    cd:44:0a:9f:98:02:f6:5b:c5:8e:e4:1c:29:ba:6b:
                    34:bb:35:3c:85:be:3b:d9:0a:20:ac:4c:d0:34:91:
                    56:09:df:a7:2a:67:7c:11:48:9b:73:85:3b:1e:58:
                    d3:ed:8e:fa:10:d8:6a:13:02:df:9b:f6:21:3f:f0:
                    aa:f7:6d:71:8e:3d:3f:3f:56:8f:20:e0:e4:62:b3:
                    ea:30:e5:87:5b:11:ba:84:da:7a:88:d4:09:62:dc:
                    f5:5a:77:dd:3d:40:90:d1:34:98:16:3c:55:d5:ff:
                    08:0e:f2:2c:f2:3a:f8:02:bf:75:07:30:6f:a6:87:
                    8e:d3:ae:4c:d4:7a:73:4f:55:b2:56:5b:e5:1c:53:
                    0c:14:2b:a9:9f:b5:25:ea:7a:ed:df:72:5f:dd:80:
                    ec:36:97:a7:90:77:58:d2:1f:52:53:ce:8d:2c:aa:
                    10:d7:69:3c:80:3c:ea:33:13:9e:d1:b7:f6:3b:3e:
                    9b:db:82:e1:18:e8:2e:0a:1a:e6:c4:55:3b:3d:7b:
                    cb:c7:2d:83:51:3a:09:fe:a2:24:47:3c:6e:ea:74:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6F:D4:DB:38:DC:70:63:45:64:46:53:50:0A:0B:1A:83:C0:88:B5
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:21:8c:03:69:4c:0c:34:7d:3d:ee:bd:d7:93:49:2d:68:74:
         98:f0:51:28:b4:a3:bf:23:d5:17:93:24:bd:a5:83:cb:1d:30:
         75:89:fd:b1:60:e1:17:50:a1:9e:e0:73:fa:30:69:5e:79:9d:
         4c:e6:e5:ce:34:dd:d3:e5:c3:16:38:3c:39:63:7c:53:10:b4:
         be:47:dd:fd:09:4c:f4:d9:45:cc:aa:20:83:28:df:6e:a5:13:
         1e:3e:05:53:2d:3f:3f:c3:55:dc:e1:cc:32:6e:43:1a:81:e1:
         75:20:f7:65:66:27:e8:e5:2f:74:b9:b1:6d:2f:1c:62:9f:48:
         cb:7d:82:a1:f5:7f:b7:77:5f:5d:79:e0:ec:89:a5:4b:a5:df:
         31:59:db:ec:09:d1:8a:e4:1f:db:ba:2a:fd:24:9e:e3:75:77:
         7b:9a:8b:9a:d4:d0:20:f5:41:9b:c2:42:a8:77:d2:80:8f:c3:
         6d:45:2c:78:4c:aa:20:94:57:6a:f6:65:79:34:60:ad:4b:fa:
         57:27:74:77:77:cb:83:73:ce:84:6b:a3:01:89:03:11:3b:cc:
         c3:78:0c:bd:a0:1a:20:a1:ed:d0:a3:80:39:4f:b3:87:04:b2:
         bc:52:08:91:dc:94:3f:a8:d8:e9:3e:fb:b8:82:a7:d2:2d:67:
         9f:7e:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:55:35 2025 by rpki-client