Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
File:                     1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft (raw, json)
Hash identifier:          Hc8zxzGsSNnoM0MYmqty8JoFuJWzEJdn3DDHQCeUUxs=
Subject key identifier:   8B:0F:EE:91:EA:4B:CF:8E:AD:D3:52:F4:83:95:6A:F2:B8:9B:20:4F
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Certificate issuer:       /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial:       019673E6BED1A8A2E94CA01D9200D0747992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
Manifest number:          150F
Signing time:             Sat 26 Apr 2025 21:00:23 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:23 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:23 +0000
Files and hashes:         1: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl (hash: 2hk0J370bfvHnuxhO2Jg61RjQ69/ZxfdH65EctviDtc=)
                          2: 6wlg7_4FPmuXNKS9TGtMblKpb18.roa (hash: NB4kxO5xhtaDmptY5MXonKpcqUfNico299jC167lw3c=)
                          3: K8XuD1NpxrW0TJB7qtrYsXkJRDA.roa (hash: /CdBF5kIZ5ECcmHw5H6/OJaH4oIiEyJ+Vl+1/T4lKZc=)
                          4: uEtH-WMzGMQ39OBfcunTZEOsrt8.roa (hash: DDKUC3onp/8aOQ+NFAy3yM0YxsOrViUAEuEDZFkRFtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e6:be:d1:a8:a2:e9:4c:a0:1d:92:00:d0:74:79:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
        Validity
            Not Before: Apr 26 21:00:23 2025 GMT
            Not After : Apr 27 21:00:23 2025 GMT
        Subject: CN=8b0fee91ea4bcf8eadd352f483956af2b89b204f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:95:63:05:97:b7:95:08:95:c7:7b:00:a6:
                    e9:a0:b8:5f:99:63:1e:4d:48:f3:67:5f:04:d1:3d:
                    50:ec:6d:c4:66:4a:5a:0c:f3:2e:5a:bf:8b:ed:08:
                    79:88:ad:64:c2:1a:18:ff:75:c3:88:63:fd:4f:c3:
                    d5:38:ca:d0:70:bd:3f:81:b1:28:33:89:16:b2:51:
                    2a:23:52:9a:0f:68:e0:39:0f:0e:f7:1c:44:23:41:
                    8c:af:ee:7d:9b:93:c5:88:64:d9:a6:d3:83:c7:f0:
                    a1:78:4f:a0:92:53:58:fb:68:fe:df:ac:0e:51:46:
                    3f:54:76:25:e6:40:68:f8:2a:c8:88:0d:b4:72:41:
                    65:51:f3:48:4c:f5:af:54:c7:fc:78:45:53:75:2d:
                    d8:ab:4d:7f:25:59:62:db:64:16:77:48:20:13:6b:
                    59:f4:2b:03:4e:51:e1:1f:0c:3b:5a:4c:ca:44:94:
                    10:a0:c7:70:37:4b:2d:f6:66:97:4c:52:70:bb:21:
                    b7:b5:12:fa:64:d1:1b:23:df:86:3d:0c:af:06:4a:
                    31:02:14:28:54:bf:21:67:6f:57:d9:c8:f1:7d:ae:
                    fb:89:f3:ba:78:00:da:a9:0a:75:55:f9:73:8f:4f:
                    8a:8d:de:59:f3:09:f2:33:0e:ae:49:68:3f:39:ad:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0F:EE:91:EA:4B:CF:8E:AD:D3:52:F4:83:95:6A:F2:B8:9B:20:4F
            X509v3 Authority Key Identifier:
                keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:05:30:63:ed:84:e6:48:9a:f1:82:58:47:cc:a8:43:73:
         47:a7:81:dc:af:3f:45:5a:1a:96:09:7f:d0:d4:14:fd:05:6b:
         c1:54:a3:bb:c6:42:b4:f0:4a:da:6c:93:13:c2:8d:1e:a0:5a:
         2e:e3:1e:ec:48:1e:f3:09:bc:52:39:a7:b5:87:b6:cb:0c:79:
         b4:f6:88:ef:38:f0:a4:75:6c:fc:2b:af:59:93:cd:a7:c2:d1:
         98:ed:1b:2e:e2:91:8c:99:25:e8:9b:d3:35:a6:ee:cc:33:34:
         e2:6d:67:54:2a:7a:40:c1:6e:e1:fa:c4:3a:b1:91:98:f0:2f:
         87:a1:1d:d9:02:20:2f:6f:1e:9d:99:5c:b6:29:f5:bd:ab:bd:
         4a:6d:4f:94:c9:18:d0:b8:71:72:6f:e7:09:d8:71:bf:a7:fb:
         b3:5a:10:b1:a9:aa:4d:9c:73:b8:27:92:ea:d6:1a:1b:a9:a2:
         3b:cf:8c:0c:ee:e3:3e:13:c6:86:c6:eb:88:15:42:8b:35:ef:
         21:3b:e3:e9:14:1f:64:2f:70:62:dd:40:79:2d:c1:31:9c:2c:
         7e:e7:c1:27:c4:c5:7c:b8:c6:a0:5c:4f:4e:07:d9:bd:70:ee:
         b0:52:16:5f:7a:87:82:fb:0e:d1:ed:81:48:77:9e:23:38:ee:
         c9:72:84:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:43 2025 by rpki-client