Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
File:                     8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json)
Hash identifier:          LvkxLd60oFc4mhiVK4FjpBGUEDnQvDZmYn4Zy/QCVkg=
Subject key identifier:   CE:07:89:E3:D4:3D:06:CF:BC:1E:F3:1E:87:96:85:EE:95:E0:D8:47
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Certificate issuer:       /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial:       0196C64CDE44E79983AA3DB22217E359D71F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
Manifest number:          0FDC
Signing time:             Mon 12 May 2025 21:00:48 +0000
Manifest this update:     Mon 12 May 2025 21:00:48 +0000
Manifest next update:     Tue 13 May 2025 21:00:48 +0000
Files and hashes:         1: 5ZNnU0ul1PvuB6V3S-Y8qQNgW4Y.roa (hash: RgXKHj2HAygr87kEjLFNnsJCWJ6hg9g9jGeFNERw+T8=)
                          2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: pQEPgsT1tn4Sm+I8dO3Xm55fz3r5sOK1z7KH/fpOL3w=)
                          3: 9c9IMdwPViHHlGIXa-EYvM5rE2c.roa (hash: Y48jer5SEM8eKuN0ygvkfPpOfOkBQ0uV7/NANNuOcto=)
                          4: DYGgwKgBr-X-UJNWrHRoiByEE0k.roa (hash: 0UcPzEKGR92DACoKDDn5wkyZ0r0HCl4oapCFAXQREB8=)
                          5: Xi938_LG0fo08PcIDueZffuVF3Q.roa (hash: 5cOzoa9nCO1ZRf33mVdI0qSK+ZoAQbsBPtAf2Kylv28=)
                          6: oAsyO0CJws2AMTge7-6JSychHyY.roa (hash: OT9pAjZ/E5OdooOn7gC+YSxibLo6Rf5dBxQdNRyss9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:4c:de:44:e7:99:83:aa:3d:b2:22:17:e3:59:d7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
        Validity
            Not Before: May 12 21:00:48 2025 GMT
            Not After : May 13 21:00:48 2025 GMT
        Subject: CN=ce0789e3d43d06cfbc1ef31e879685ee95e0d847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:49:d8:e0:26:45:75:cb:27:ee:00:21:d3:
                    1c:03:49:ee:02:cd:7b:0d:a8:3e:c9:78:5f:bc:17:
                    14:26:2c:d9:b0:29:6b:f8:ac:a1:a0:c0:e7:99:d3:
                    48:36:fa:a3:19:35:83:82:19:3c:cc:d9:19:77:e6:
                    0a:c7:b9:4c:b1:58:76:60:c2:50:23:9a:81:28:c2:
                    3d:4d:ae:86:b2:eb:e1:83:87:d0:54:37:56:41:d5:
                    95:de:6a:f3:f8:14:7a:44:57:db:c5:3f:02:0d:39:
                    d4:02:d4:4c:df:e6:46:ff:20:e4:dd:4e:11:b3:72:
                    9f:7d:4e:df:dc:75:4d:55:cf:64:3b:19:0f:28:43:
                    54:d4:e7:9e:1e:8d:16:66:b3:e7:c6:b0:75:54:b1:
                    29:f4:07:47:5e:f0:d1:98:34:de:e9:1b:c9:84:45:
                    bf:43:fd:7f:ec:1c:0b:f4:c2:81:28:63:55:be:2a:
                    20:6e:48:9c:ae:e9:98:ae:f8:03:c5:7d:cf:97:e1:
                    74:1c:04:6b:d0:10:4c:9c:2f:3a:09:a9:9b:91:76:
                    f9:b5:54:d2:50:93:f9:55:23:26:7b:0c:1b:08:07:
                    c7:5a:38:c7:97:5e:30:08:68:5d:c8:35:e2:d5:b7:
                    65:5a:f2:99:51:08:f9:4e:14:a6:01:b8:fb:58:5c:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:07:89:E3:D4:3D:06:CF:BC:1E:F3:1E:87:96:85:EE:95:E0:D8:47
            X509v3 Authority Key Identifier:
                keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:5e:9b:74:cf:50:3e:b9:ad:67:2c:4e:de:15:69:6b:5f:68:
         bc:ff:f1:8b:87:e0:be:77:40:7a:b0:fe:24:39:8c:7a:78:e2:
         f2:4d:6e:f7:eb:60:3d:cd:92:c5:65:ab:e4:8f:c6:0d:82:55:
         79:1e:bc:a1:03:7b:59:89:82:da:94:93:02:75:4f:00:61:b8:
         c6:2f:8e:20:56:ca:b5:f3:d5:c8:a3:75:b0:17:bf:22:26:a4:
         0c:fb:9c:c2:b6:95:06:88:ad:74:ba:69:bb:9d:0f:04:31:2c:
         76:62:8d:46:69:8b:23:70:4b:1d:93:72:25:25:b7:52:f2:9d:
         c2:64:e6:dd:7a:7a:82:ac:4c:a3:19:01:09:3c:bc:6b:d2:85:
         e9:00:8c:27:22:5b:29:89:78:6b:83:33:bc:7f:ff:e3:4a:9f:
         65:42:9b:87:98:5e:2b:8f:2c:57:14:7a:4d:1b:86:5f:bd:e8:
         40:d6:e7:45:01:62:3e:32:dd:0f:db:67:dd:24:56:ff:ba:c1:
         04:32:53:76:57:25:e5:db:e5:0a:6e:95:00:40:c2:1e:d2:f4:
         35:04:f0:54:f9:77:ea:01:2f:6d:ae:96:28:dc:e4:e7:ee:a4:
         d8:64:22:17:db:a9:69:85:70:78:70:15:eb:79:7c:45:b1:ea:
         91:71:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:52:59 2025 by rpki-client