Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
File:                     8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft (raw, json)
Hash identifier:          p6RjSEm4683689/bW8iPEuNdtq/gsP0QFqBsqxVOBp4=
Subject key identifier:   F7:A5:10:24:91:2F:30:99:87:83:AF:1D:2F:9A:2D:B4:4A:8A:09:AD
Authority key identifier: F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
Certificate issuer:       /CN=f07be9d1189771b7337efc1ced2c825dc2472a56
Certificate serial:       0196797B4134195EE29717AAA7556F4A0C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
Manifest number:          0239
Signing time:             Sun 27 Apr 2025 23:00:42 +0000
Manifest this update:     Sun 27 Apr 2025 23:00:42 +0000
Manifest next update:     Mon 28 Apr 2025 23:00:42 +0000
Files and hashes:         1: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl (hash: SJHgy6bXakUDXWY0UsunzIeNmnwrX2G4KbfnjDoLZeo=)
                          2: J2wzb8YKKVcFBB9aw2nmFsUG6Ac.roa (hash: uNatwiz0kls9jaP1S1snowxFlS7dqcfH880Un/eLhPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:7b:41:34:19:5e:e2:97:17:aa:a7:55:6f:4a:0c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f07be9d1189771b7337efc1ced2c825dc2472a56
        Validity
            Not Before: Apr 27 23:00:42 2025 GMT
            Not After : Apr 28 23:00:42 2025 GMT
        Subject: CN=f7a51024912f30998783af1d2f9a2db44a8a09ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:b3:ff:97:15:f7:8f:55:05:b1:b8:6b:7b:
                    f6:df:ca:12:ba:5e:2e:55:f2:db:b6:b5:60:4f:eb:
                    38:52:8f:da:7e:8e:92:89:0b:bb:ba:ff:71:71:d2:
                    0e:77:73:04:d5:e1:82:18:95:9a:6c:02:86:21:b0:
                    53:7d:9e:68:7d:eb:26:87:e6:40:72:32:9e:c8:73:
                    5e:98:74:30:5b:b0:8d:01:e1:27:f1:2c:12:44:8c:
                    47:28:07:cd:5a:f8:e3:d8:1a:90:90:e8:36:b1:48:
                    df:ce:b1:06:41:2a:f8:69:a8:90:24:fd:d5:de:df:
                    05:b6:00:1a:46:c2:a3:cf:2d:b6:7c:de:4f:2b:51:
                    72:6f:17:eb:43:47:99:5f:89:24:04:cc:28:ff:dd:
                    e1:08:64:d1:88:7a:7d:f0:d3:88:b9:34:9c:6a:09:
                    54:36:04:58:85:26:e5:75:55:2e:27:05:27:b6:0d:
                    95:13:78:f1:4b:af:f6:de:6c:c9:d3:0c:dd:1c:d0:
                    51:46:59:dd:40:94:0c:25:0b:f6:30:7c:d9:e0:d2:
                    e2:50:da:4f:b0:51:a0:48:ac:6b:91:36:55:bc:bd:
                    f3:06:2b:a3:b7:20:4b:13:eb:d8:9f:4d:c5:a3:98:
                    fa:1b:61:54:bb:29:0e:b4:40:1f:44:53:de:00:5c:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A5:10:24:91:2F:30:99:87:83:AF:1D:2F:9A:2D:B4:4A:8A:09:AD
            X509v3 Authority Key Identifier:
                keyid:F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:eb:2d:60:60:89:7c:2d:e4:d8:64:de:f4:50:61:70:f9:08:
         50:4b:51:ff:49:1c:38:fb:dc:54:52:b5:95:c8:35:0a:15:d4:
         5c:b3:0f:ad:80:2d:5a:82:4f:7f:65:aa:b2:04:a1:5a:05:9e:
         20:4c:6d:b5:aa:94:97:68:21:c7:25:91:9c:4a:6f:0e:68:19:
         20:16:90:d8:1a:39:e4:9d:45:f4:e4:09:97:cb:8f:15:5e:75:
         09:ea:ef:96:88:19:ee:d0:ce:7e:3b:f6:3c:dd:fa:34:dc:a5:
         de:76:b4:fc:eb:03:e7:7e:42:d5:91:70:29:0a:2c:83:53:89:
         55:2d:eb:91:3e:f8:f4:58:90:7d:16:1b:86:24:92:2c:4b:dc:
         a5:cd:93:18:7d:5b:b9:0e:2e:3a:94:33:0e:4f:40:9c:9b:f0:
         5f:37:07:e4:a3:95:ba:dc:34:1d:ba:88:e9:21:b4:81:e8:80:
         13:57:5f:f9:21:fd:8b:a4:b7:98:49:0a:6f:c8:a3:57:f3:71:
         81:77:3b:06:53:d1:1c:61:b2:2e:b3:ef:12:ab:b5:cb:d3:dc:
         f1:db:75:bb:b9:72:6d:f5:06:fc:38:9f:7c:ab:ff:ab:d8:f9:
         e7:2f:05:90:35:a8:d4:8a:61:44:b9:ae:32:c5:0a:8b:14:1c:
         a2:0f:24:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:26:38 2025 by rpki-client