Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File:                     8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier:          wkDigNwCaGYqdgCg/noEiEziPD6bZH1fyVteB6E6lBI=
Subject key identifier:   58:D6:42:0F:E1:95:57:F1:67:BE:53:C5:86:EA:15:58:49:3E:D7:3A
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer:       /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial:       019689CA28E78104740BE79431CE8736242F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number:          1518
Signing time:             Thu 01 May 2025 03:00:49 +0000
Manifest this update:     Thu 01 May 2025 03:00:49 +0000
Manifest next update:     Fri 02 May 2025 03:00:49 +0000
Files and hashes:         1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: NJUf+rSzmKKPIn+mXgvX7Q894ad+6hSfavOzdeXQzKA=)
                          2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:ca:28:e7:81:04:74:0b:e7:94:31:ce:87:36:24:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
        Validity
            Not Before: May  1 03:00:49 2025 GMT
            Not After : May  2 03:00:49 2025 GMT
        Subject: CN=58d6420fe19557f167be53c586ea1558493ed73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:0b:95:ea:30:4b:9a:7e:f7:33:d8:90:f5:
                    ec:84:1d:e0:f4:be:a6:05:99:b8:b9:36:33:03:f6:
                    69:03:a9:01:97:f0:32:57:6e:66:2c:9a:7b:ba:f8:
                    f2:9e:22:26:c0:ad:b3:e6:bb:2f:ff:43:a1:22:46:
                    98:0b:51:38:f8:8f:c8:80:51:21:eb:30:bc:e9:3f:
                    a7:cd:19:bc:0c:ad:15:c6:46:e8:8a:44:44:d4:11:
                    b9:44:ff:9c:0f:0d:47:e3:08:c1:15:5f:14:ae:a4:
                    6c:df:b6:d2:21:4c:88:bb:80:91:d6:7b:2e:d7:16:
                    92:13:de:23:87:4a:72:33:88:de:08:82:60:b1:ac:
                    3a:62:57:c4:82:90:d2:80:ae:8f:f6:22:fa:a0:fa:
                    24:d1:c9:7f:ac:32:70:47:3e:0d:06:cb:55:fe:3a:
                    42:01:bf:7f:ed:72:13:e7:db:c4:f5:7d:36:1a:29:
                    7d:22:0d:86:d5:32:49:17:f7:55:bd:6d:9d:af:b7:
                    21:ca:da:5f:f6:42:db:45:41:cd:3f:2a:74:3d:e8:
                    a9:54:13:43:24:cf:20:c4:de:14:5a:50:b7:18:a8:
                    c1:fb:52:c2:02:4a:5a:f5:aa:29:f5:e6:4a:73:8e:
                    1f:b9:88:06:98:07:a2:47:31:69:22:de:f7:23:3a:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D6:42:0F:E1:95:57:F1:67:BE:53:C5:86:EA:15:58:49:3E:D7:3A
            X509v3 Authority Key Identifier:
                keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cf:6c:e4:bc:3f:c3:c8:38:34:27:fb:af:90:ec:cc:e6:b6:
         f5:6b:c9:51:33:08:76:f9:e2:4f:fb:57:89:ac:df:a8:8c:ce:
         df:8b:65:c1:02:f9:22:cb:42:58:57:79:9e:22:a2:d1:27:ae:
         b1:fc:bf:58:29:6c:78:01:b9:b0:66:3c:b2:b7:3f:9b:00:bd:
         d3:fd:18:23:5d:0f:75:63:43:97:c3:9f:0e:66:21:27:ba:43:
         88:70:19:12:e2:ac:e6:37:c1:cc:8c:e1:05:ee:7e:5d:05:8d:
         67:42:c6:21:bc:00:d2:07:42:df:96:14:87:b0:9b:ec:86:54:
         ae:88:61:ce:48:78:de:c3:5f:c3:90:15:ff:fa:db:85:e0:87:
         93:89:ba:e7:ae:b5:cf:c0:ca:f1:db:dc:fd:30:cf:a7:b9:3c:
         91:a1:ea:e2:c2:f5:9a:9a:c4:1c:a5:03:6b:73:bb:07:9e:32:
         8d:16:e6:a8:43:e2:7c:1b:bb:2b:a2:0d:e1:67:c2:5a:68:bc:
         a7:8c:e8:56:bb:b4:87:52:2f:13:ab:aa:c2:62:26:e0:41:32:
         47:82:5c:c3:ec:fe:e8:8c:b1:a0:8a:d0:27:d6:34:df:e7:7f:
         0d:89:37:ba:f4:e5:90:75:e2:5f:86:0d:49:9f:9a:52:be:3b:
         15:2a:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:11:13 2025 by rpki-client