Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File:                     08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier:          6l0k7WyN3h20d0EcUDFMzncZHcr9vq8e4P84BWcDZJE=
Subject key identifier:   D4:3E:C9:1D:E0:7F:0C:88:C9:FE:D3:BD:87:5F:C3:AC:69:DF:F6:1F
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       0196895BFA883ED19E05AC3E664CA1A55FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number:          1100
Signing time:             Thu 01 May 2025 01:00:28 +0000
Manifest this update:     Thu 01 May 2025 01:00:28 +0000
Manifest next update:     Fri 02 May 2025 01:00:28 +0000
Files and hashes:         1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: U99D6HUkdmNlzGWkdgwOqWG28cJAnOlmF5A7xzUOZyM=)
                          2: 0H1Z8N5wGt3dSjqDG8bowD-Ttng.roa (hash: oPSp0ubsi2iqvVhAG7FKsfv+UH3h4fdTyPyVMxry6Iw=)
                          3: 7cGpErFojxZQKCSeJeJ8U-ucjfw.roa (hash: u8HNSCh1+MNiLey93QoDDaHwFmVThoOReQEndhAwPeo=)
                          4: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=)
                          5: YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa (hash: J+sfrqDRaIaNCnrB/qidc2XHG3Pcd1LgS59q0souwmY=)
                          6: lJFoGwOfjYG7bpWJkltu5e79TPY.roa (hash: a/JvmbooIi2RUBJmFiHrsUi1IesqwE85tvSq7Xkrm58=)
                          7: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=)
                          8: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=)
                          9: znHrAZm_EwJFzSlzHUBaDIb6T_c.roa (hash: 8+CSmVuv7oNvnmW3AJMftQvBT3ExE6lD+2YKqmYy4aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5b:fa:88:3e:d1:9e:05:ac:3e:66:4c:a1:a5:5f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: May  1 01:00:28 2025 GMT
            Not After : May  2 01:00:28 2025 GMT
        Subject: CN=d43ec91de07f0c88c9fed3bd875fc3ac69dff61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:54:c8:79:68:0a:0f:bc:b5:20:64:eb:64:
                    4e:fd:45:c6:80:0f:a3:a4:bc:f7:53:29:f7:ff:a6:
                    cb:61:83:4a:33:1d:98:da:8a:3a:e6:0a:15:9e:03:
                    16:9d:a0:44:6c:cb:91:1f:f8:37:56:06:98:56:b3:
                    31:7a:31:f8:a3:53:55:96:22:f8:3a:14:99:46:a4:
                    59:f5:06:7a:78:fa:91:05:b2:fa:d2:d9:43:eb:59:
                    c2:45:21:d5:fd:1b:1f:ef:fb:a0:c2:0e:d6:3d:81:
                    35:4d:78:6c:e6:b7:99:10:47:08:37:58:04:47:74:
                    0d:f8:8c:ae:99:33:a8:92:cf:74:78:0a:ed:5a:5b:
                    9f:55:18:ef:9c:b0:c3:68:9d:85:58:0c:e2:77:e0:
                    7e:6a:14:25:09:6a:65:74:a6:ad:5f:fe:00:df:76:
                    a9:7e:0d:ab:1a:e6:51:5b:cd:bc:77:2c:11:ad:7d:
                    2d:23:a5:9c:da:a7:e9:c8:3c:c6:36:90:5b:b4:96:
                    ad:37:40:e9:f5:5b:87:e7:b3:03:1a:85:8f:8c:8e:
                    31:49:e0:9e:05:4b:34:77:6a:f4:4f:2d:f4:c1:9d:
                    58:b0:dd:30:b6:d2:98:4c:29:70:fe:b6:43:3b:96:
                    74:6d:5f:33:98:16:86:46:80:9d:62:50:bf:c1:6a:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3E:C9:1D:E0:7F:0C:88:C9:FE:D3:BD:87:5F:C3:AC:69:DF:F6:1F
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:28:71:be:c6:52:86:93:47:b9:01:11:bc:0d:fe:c8:b3:fb:
         a8:88:b5:da:17:9a:f7:42:38:8b:02:f9:18:19:7b:d7:6e:2a:
         e9:4c:60:fb:52:0d:84:50:f0:32:de:df:ec:e7:83:e0:57:d0:
         bd:f3:36:6a:d6:b6:10:c9:b5:f4:eb:92:47:d1:5c:25:ae:ff:
         a4:6c:d8:3a:b6:f2:88:23:c9:ce:04:f7:87:f9:ca:42:16:15:
         65:32:ab:8e:83:6a:43:8e:52:8c:6a:cc:34:31:4f:1f:8d:ab:
         80:ac:18:54:ff:8e:87:51:67:2c:b1:2f:84:bd:0b:64:02:65:
         7c:81:a6:fe:30:8a:24:b9:4a:5f:7d:a1:1b:23:e6:7d:36:2d:
         a9:0e:dc:c1:b1:21:88:da:06:55:b9:8c:f9:17:4d:39:2a:30:
         24:e1:98:8a:a5:9f:f4:ce:b2:9c:df:62:02:37:c4:4c:96:cf:
         3a:98:78:71:c0:88:50:45:af:8e:23:7f:d5:7b:30:f7:ce:68:
         0e:ab:1c:c4:9f:a5:e6:94:a7:0e:8d:68:86:68:08:11:ee:73:
         aa:96:42:3a:53:4a:e7:47:87:35:10:f2:1c:a6:47:53:ff:e5:
         00:6f:e7:49:a4:5f:9f:b9:77:82:5b:02:46:ac:dc:4a:c5:54:
         e5:af:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:27:47 2025 by rpki-client