Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File:                     C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier:          aWAtazZHlS/xFM/aYQzSqJh5Cu8kCRZq+EKpQcK+0Pw=
Subject key identifier:   E4:60:63:55:1F:6C:F2:B2:96:91:8E:3A:7A:4D:D5:0F:47:4C:1A:54
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer:       /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial:       01968390AD740405DF6906AB5783B82EE63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number:          08EF
Signing time:             Tue 29 Apr 2025 22:00:18 +0000
Manifest this update:     Tue 29 Apr 2025 22:00:18 +0000
Manifest next update:     Wed 30 Apr 2025 22:00:18 +0000
Files and hashes:         1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: moPUS5Ocr8MYsq2CCyd/qlqU1tRDIere3zuxFv+Bb3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:90:ad:74:04:05:df:69:06:ab:57:83:b8:2e:e6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
        Validity
            Not Before: Apr 29 22:00:18 2025 GMT
            Not After : Apr 30 22:00:18 2025 GMT
        Subject: CN=e46063551f6cf2b296918e3a7a4dd50f474c1a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:64:1e:7f:6e:e7:c1:1e:f3:bf:13:3b:06:
                    4b:52:a2:69:f5:93:2f:d3:97:7d:8a:12:d9:fd:35:
                    da:a0:b9:63:7e:37:c6:68:ff:61:8b:37:9b:e2:bc:
                    b6:03:de:46:d0:d5:e9:b8:2d:3a:0d:61:12:94:66:
                    8f:40:d1:67:33:24:c6:c4:70:dd:90:db:3b:6b:26:
                    72:d7:f3:40:e3:a9:ed:1d:81:a6:55:d1:58:0e:31:
                    10:e3:7f:ce:38:7b:80:8f:19:d4:96:09:0b:a6:e0:
                    84:91:7b:8c:2e:c5:04:1f:35:8f:73:53:11:7e:52:
                    0b:0c:37:83:e3:5a:a8:21:2e:05:fc:e2:9c:34:15:
                    e4:09:a4:a7:a2:2f:64:95:e1:d1:21:a9:5a:9c:c0:
                    25:88:ac:cc:b6:e3:76:f3:03:55:9e:40:87:87:81:
                    b0:33:e9:68:53:0b:32:cb:e4:63:01:3c:81:20:93:
                    73:e1:bf:ed:e2:0f:dd:92:80:b1:c7:2c:91:92:f6:
                    74:49:bb:e8:c4:c1:4b:4d:dc:c7:53:30:3d:5b:29:
                    25:4e:21:7e:bb:e5:fe:81:1b:73:dd:1a:a2:7c:30:
                    94:4e:aa:94:64:ac:21:f6:54:01:3c:1a:f6:0d:95:
                    8c:36:06:a2:c1:cb:33:26:52:95:bd:5a:96:9a:90:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:60:63:55:1F:6C:F2:B2:96:91:8E:3A:7A:4D:D5:0F:47:4C:1A:54
            X509v3 Authority Key Identifier:
                keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8e:51:85:29:db:71:f1:a5:93:10:da:79:89:08:25:03:c5:
         74:62:1e:14:6e:89:a8:9d:3a:14:0b:72:3d:80:3b:58:38:1c:
         20:40:1c:a7:e6:78:c4:9a:93:56:1c:97:a3:50:49:fd:d4:5a:
         a6:67:e0:d7:5b:e1:2e:21:d5:c1:9a:40:a8:93:58:cb:05:aa:
         89:eb:c1:76:4c:7d:6b:3f:a3:7a:d5:1b:ab:b2:c6:29:09:e4:
         ff:06:cb:11:8b:1a:04:df:62:a7:6c:d3:71:18:fb:3e:52:12:
         ae:8f:53:45:32:ff:48:4c:0e:ad:63:44:f1:b5:41:c4:ea:35:
         06:2c:fb:1a:8f:14:d6:7c:f0:d7:d1:00:16:31:b3:08:09:6b:
         ce:52:df:0f:03:c3:b3:89:06:53:89:54:ed:b7:24:c5:dd:65:
         39:ee:de:03:30:94:f0:93:8c:a2:e1:a7:ee:5f:00:ab:19:32:
         7d:63:54:66:d5:58:43:33:32:69:3b:a3:9e:47:86:6d:bf:78:
         08:d7:f3:4c:d2:67:2b:79:67:6f:73:3b:50:e5:65:b5:4c:cf:
         5d:3c:57:be:15:c3:1e:3e:3e:29:00:6d:1d:a6:75:61:ac:05:
         24:76:e7:83:f8:e8:d4:ca:57:81:35:c9:7e:c7:df:40:c2:70:
         1d:d3:8d:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkK10BAXfaQarV4O4LuY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmQzYzk1YjYwOTI3YTVmNjhiOTk1ZTdiOTc5ZTY2ODAz
YzEwZWQwHhcNMjUwNDI5MjIwMDE4WhcNMjUwNDMwMjIwMDE4WjAzMTEwLwYDVQQD
EyhlNDYwNjM1NTFmNmNmMmIyOTY5MThlM2E3YTRkZDUwZjQ3NGMxYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZlkHn9u58Ee878TOwZLUqJp9ZMv
05d9ihLZ/TXaoLljfjfGaP9hizeb4ry2A95G0NXpuC06DWESlGaPQNFnMyTGxHDd
kNs7ayZy1/NA46ntHYGmVdFYDjEQ43/OOHuAjxnUlgkLpuCEkXuMLsUEHzWPc1MR
flILDDeD41qoIS4F/OKcNBXkCaSnoi9kleHRIalanMAliKzMtuN28wNVnkCHh4Gw
M+loUwsyy+RjATyBIJNz4b/t4g/dkoCxxyyRkvZ0SbvoxMFLTdzHUzA9WyklTiF+
u+X+gRtz3RqifDCUTqqUZKwh9lQBPBr2DZWMNgaiwcszJlKVvVqWmpCcqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORgY1UfbPKylpGOOnpN1Q9HTBpUMB8GA1UdIwQY
MBaAFAv9PJW2CSel9ouZXnuXnmaAPBDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ18wOGxiWUpKNlgyaTVsZWU1ZWVab0E4RU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZWI4ZjktZjcyOC00ZDA1LWIyNGEt
YTg1MTRhYTVkMDhkLzEvQ18wOGxiWUpKNlgyaTVsZWU1ZWVab0E4RU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mZWI4ZjktZjcyOC00ZDA1LWIyNGEtYTg1MTRhYTVkMDhk
LzEvQ18wOGxiWUpKNlgyaTVsZWU1ZWVab0E4RU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI45RhSnb
cfGlkxDaeYkIJQPFdGIeFG6JqJ06FAtyPYA7WDgcIEAcp+Z4xJqTVhyXo1BJ/dRa
pmfg11vhLiHVwZpAqJNYywWqievBdkx9az+jetUbq7LGKQnk/wbLEYsaBN9ip2zT
cRj7PlISro9TRTL/SEwOrWNE8bVBxOo1Biz7Go8U1nzw19EAFjGzCAlrzlLfDwPD
s4kGU4lU7bckxd1lOe7eAzCU8JOMouGn7l8AqxkyfWNUZtVYQzMyaTujnkeGbb94
CNfzTNJnK3lnb3M7UOVltUzPXTxXvhXDHj4+KQBtHaZ1YawFJHbng/jo1MpXgTXJ
fsffQMJwHdONAw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:47 2025 by rpki-client