Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File:                     hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier:          GJLOKZ31WoRERGPoOcZs7DfnfTrWPr91yrH9+NUP8cM=
Subject key identifier:   2B:FB:6E:75:0F:05:F4:D6:E9:53:D4:1E:2A:C9:2C:66:06:19:06:7C
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer:       /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial:       019674FA21DB9593EE9DC5F49137F5CEFF31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 02:01:11 +0000
Manifest this update:     Sun 27 Apr 2025 02:01:11 +0000
Manifest next update:     Mon 28 Apr 2025 02:01:11 +0000
Files and hashes:         1: 0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa (hash: Iz51+DSbV7Tr3oZnznfPb0ztDkoHj3CGvdnh39JEVfU=)
                          2: Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa (hash: XwxfewChyQGnh/6DJxz8pIZg+xrexkVvjsVCqgpoH3U=)
                          3: ZovzMlbHa6h-Fl7gDQG_Zq7WfR4.roa (hash: H/iI+5AR6wdmCN1X+mmy0vutxGeF8cVAtih493U1ycg=)
                          4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: G+Vm7m25RNoACFFjxJmPCGHjjOvljPKRPA+SKh5LoWo=)
                          5: l73B-rq6PzNDiKoxaYkXjLCugtw.roa (hash: 3VSqbyAVKfkVsGJFnzfZhKO8PUH5YDBnP4CFYJUZ7hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:fa:21:db:95:93:ee:9d:c5:f4:91:37:f5:ce:ff:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
        Validity
            Not Before: Apr 27 02:01:11 2025 GMT
            Not After : Apr 28 02:01:11 2025 GMT
        Subject: CN=2bfb6e750f05f4d6e953d41e2ac92c660619067c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:23:12:15:09:72:d5:1c:2c:76:ed:ee:4e:
                    01:59:b4:5f:9e:47:c2:e3:1c:ef:13:53:1e:a5:b6:
                    5d:74:0f:ca:be:c6:0d:97:c3:d9:f7:90:9d:53:1c:
                    b4:14:6f:4b:6a:ca:af:a2:ce:7c:d1:9a:10:fe:02:
                    d5:7b:c3:2d:2c:3e:47:2c:da:08:18:ae:1a:ef:77:
                    7b:09:60:3d:11:6a:cc:65:56:6b:82:78:74:06:25:
                    0a:77:8e:3c:d3:46:6e:19:b8:ce:12:28:77:bc:ad:
                    d8:b4:0b:11:13:32:ab:20:6f:06:67:44:0e:ed:89:
                    e5:fa:28:f0:15:85:86:3b:19:66:40:8b:ce:87:92:
                    5b:3d:77:9a:5e:f3:42:eb:22:3c:4c:d6:dc:90:41:
                    d5:6c:a4:00:67:ce:a6:08:7f:bd:15:ef:fe:f9:c4:
                    cd:08:b1:5b:1b:d0:73:88:2c:43:f5:0c:5c:a5:d6:
                    30:b8:1b:f8:a3:68:07:49:b9:f1:40:ed:ec:0b:e1:
                    66:aa:84:3c:d3:c4:3e:7a:94:1c:e6:a5:e6:0e:0f:
                    ed:8d:ff:f6:d3:86:db:d9:d4:b6:d6:2b:a5:2a:44:
                    11:45:f6:57:7f:10:c9:e2:5c:50:85:d5:d1:e1:b7:
                    e6:20:07:19:08:41:da:68:48:21:ae:42:e2:ad:85:
                    d8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FB:6E:75:0F:05:F4:D6:E9:53:D4:1E:2A:C9:2C:66:06:19:06:7C
            X509v3 Authority Key Identifier:
                keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e9:35:b4:06:9b:e0:7c:22:f0:b4:98:93:45:f7:78:4f:2f:
         73:56:1f:b5:5a:d1:1d:73:62:9c:a0:77:3e:94:54:31:73:ce:
         45:0d:59:5d:a3:1c:60:8e:66:d9:cc:c9:2f:2b:0b:96:3f:12:
         c0:8a:17:c0:fd:db:8c:6c:fb:c4:08:32:25:87:75:f2:f8:f3:
         5f:81:a0:22:51:93:dd:55:20:0e:a0:84:69:df:ba:2d:32:14:
         a0:eb:69:3b:50:a7:38:66:a5:a8:61:0e:c1:5f:ca:87:a6:3a:
         bb:f1:1b:2a:6c:8c:9a:13:6d:47:de:79:9d:0c:a4:2b:32:33:
         17:3c:87:c6:1a:d8:d1:ec:1b:a9:59:22:12:ed:1f:a6:1d:b5:
         61:16:02:73:c9:7e:26:a2:ea:17:0a:5d:44:6d:2f:69:9c:2b:
         36:f6:e6:08:e8:d3:e5:67:0e:ff:21:3b:4c:6e:54:59:57:85:
         64:8e:7c:cf:d5:53:c8:e7:a7:ef:f5:aa:e4:7c:d4:32:8c:ed:
         c8:8e:0f:b4:a2:19:6c:86:9e:89:73:ae:7f:a0:49:c7:b3:c4:
         ba:c5:63:99:25:bf:df:6d:25:ae:f6:61:05:64:d1:d5:68:88:
         45:a9:55:3d:2b:52:a2:fa:1e:2c:2f:3f:6e:4d:52:64:06:9b:
         47:ab:89:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:18 2025 by rpki-client