Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File:                     aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier:          bF33kXI3zCmxoXwv1XNSl3ZASV0CKrUpSSlwjvbKVO8=
Subject key identifier:   14:AB:E9:41:D0:D9:68:B2:C9:1C:2E:85:DA:74:72:1A:11:96:A7:8B
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer:       /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial:       0196A051A3BDE2AA55FD1737078193DCF50F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number:          08C8
Signing time:             Mon 05 May 2025 12:00:27 +0000
Manifest this update:     Mon 05 May 2025 12:00:27 +0000
Manifest next update:     Tue 06 May 2025 12:00:27 +0000
Files and hashes:         1: ZT9B9tNXRU8FWuertgPw13h16Xk.roa (hash: 6Xo+gMjKVgARvSeIM+HakBpfnwiy5S2ZtZ1dnsf1HiU=)
                          2: ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa (hash: dwMw2ItUKiHNfMn5bYBAvjaKKEHGXJR9EQ9x+7hM0I8=)
                          3: aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa (hash: 8bEOeURzXGquWtq1D4IuWCkHSIndbbhR7t89VUeuAh4=)
                          4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: A8AgQLbb0bVSNCHzbbFNRk7tkcyVM1t21vvZorH2vMM=)
                          5: zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa (hash: xntvWCwvdBtpyZsW2377VZBl7bSJB3okyecwJktY+Gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:51:a3:bd:e2:aa:55:fd:17:37:07:81:93:dc:f5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
        Validity
            Not Before: May  5 12:00:27 2025 GMT
            Not After : May  6 12:00:27 2025 GMT
        Subject: CN=14abe941d0d968b2c91c2e85da74721a1196a78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:f2:75:14:86:59:59:7a:90:1c:0c:05:23:
                    40:69:bf:c9:58:fd:f8:e8:2d:78:67:d3:64:0c:aa:
                    ac:50:d0:e3:83:e0:5a:36:90:c9:65:d5:8b:9c:18:
                    44:48:ab:22:6b:fa:aa:67:ee:10:6d:0f:f9:97:d8:
                    9e:74:02:d5:3f:f0:61:53:9f:79:08:a3:3d:ce:bc:
                    55:73:22:03:0d:6d:57:71:85:de:8b:a9:d3:1c:46:
                    95:1f:73:df:a0:73:49:df:48:24:03:59:e2:2e:9a:
                    d8:97:09:4f:24:c8:22:b1:af:ff:cb:be:9b:67:24:
                    4a:4b:9f:45:12:1d:73:11:c9:f3:6a:68:f8:c6:48:
                    a9:3e:6b:40:f8:8b:ee:00:c3:0b:a7:f1:88:d2:57:
                    fc:68:5c:77:8d:b9:f7:ee:bf:99:40:f3:50:84:68:
                    6b:90:90:17:fc:02:c1:fc:cf:2d:51:2d:4c:98:8e:
                    30:d2:8d:bb:4d:01:47:12:2b:4f:53:7a:cb:11:9e:
                    b6:02:fc:4c:2d:d1:82:39:bc:b5:c5:80:91:7a:a3:
                    2a:91:45:8a:2b:4a:5c:44:f8:ee:61:5f:9a:2c:6a:
                    88:a0:d7:53:2d:32:e2:67:ad:84:bc:4f:11:43:d4:
                    a8:77:3b:f0:71:d1:2e:e0:4d:57:08:26:e9:b7:a3:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AB:E9:41:D0:D9:68:B2:C9:1C:2E:85:DA:74:72:1A:11:96:A7:8B
            X509v3 Authority Key Identifier:
                keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:52:bd:eb:20:ee:01:c7:fa:13:f7:3d:e8:99:11:0a:47:7f:
         a0:5a:0d:75:7c:35:10:09:09:40:c2:d8:18:1a:7d:59:34:f0:
         f2:fa:66:aa:a2:90:87:9e:d2:8d:94:3a:63:4f:9a:30:1a:87:
         89:09:65:fd:22:df:fa:fd:55:eb:b2:63:cc:56:ab:a8:46:0f:
         1e:f6:34:b7:d8:0e:fc:c1:b8:2a:1d:e3:04:2b:b3:99:83:52:
         87:88:7b:fb:d7:1e:39:c7:58:2e:46:32:19:28:52:ca:94:e4:
         3b:c8:59:6e:fb:24:56:67:20:16:0f:d2:f9:31:29:a0:eb:36:
         a8:46:1c:e0:6c:a9:9e:22:d8:92:cf:a5:a5:90:7c:84:70:1b:
         cb:53:55:c0:b6:88:93:2f:e4:2c:c3:e1:b5:88:cd:eb:5f:10:
         61:24:6f:f9:7f:44:5d:91:db:af:31:fb:da:d0:5e:6e:73:60:
         82:10:ba:ac:7b:24:ec:0e:e2:ad:36:9a:62:3e:74:75:55:bf:
         85:de:55:ca:1b:8f:9d:d1:03:81:bf:da:3a:81:54:9d:d8:d3:
         c6:5f:06:8c:cc:a3:fa:39:3f:46:23:ff:9d:08:d3:da:01:84:
         b9:9f:eb:76:3b:89:4b:23:a2:60:17:48:63:28:87:92:e1:5a:
         9b:3c:a0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:39:56 2025 by rpki-client