Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File:                     8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier:          oY0FFpjhiZ7UI1aF7ThZKg1bLx9tgdngQmDG3JJcB8s=
Subject key identifier:   51:06:E5:1F:0D:75:0C:9C:6F:54:CF:89:79:EC:AC:71:90:8B:4F:51
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       019690DEE421B3DADC0CC58C498FC30E8E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number:          14C4
Signing time:             Fri 02 May 2025 12:00:48 +0000
Manifest this update:     Fri 02 May 2025 12:00:48 +0000
Manifest next update:     Sat 03 May 2025 12:00:48 +0000
Files and hashes:         1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=)
                          2: 1pzVXPbgxEX73Fvhek9cnU4DDFk.roa (hash: KBcYXTx3hKne/Dhm3KPhvSNiNaQ1ottkjjUhssYyunQ=)
                          3: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: HWUBkuw0jjKqHK9L2OgD1NCq4qirspZCxqWGQraXiEs=)
                          4: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=)
                          5: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=)
                          6: LhFj95I_FAK0SQt_IVeu_j9yy-Y.roa (hash: UKe9AQrQFX9sK5Sb3u4prHdwMu3msjjjq1TGlUk7HFU=)
                          7: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=)
                          8: qapdX9GHEa2o929_QuPaQDtsKOo.roa (hash: yXoeklRVR1pGxKI4F+grxEP1kght2DQV6MfbRtkPOyI=)
                          9: wl4AgRxN-dsEZVWVRwagB4p0FuM.roa (hash: D3k3ebSuA5lnvxMk1CjJz6RjXbgYa8hOXOr3a2fIOuU=)
                          10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:de:e4:21:b3:da:dc:0c:c5:8c:49:8f:c3:0e:8e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: May  2 12:00:48 2025 GMT
            Not After : May  3 12:00:48 2025 GMT
        Subject: CN=5106e51f0d750c9c6f54cf8979ecac71908b4f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:4c:a3:28:72:33:01:a0:e8:a5:90:e5:4c:
                    0f:67:a7:46:c8:85:bc:2a:54:53:e7:c4:53:d4:8f:
                    f8:e7:a0:f7:27:95:90:99:af:0a:44:fb:0a:14:44:
                    7b:4e:aa:8a:1f:bf:da:35:91:11:63:71:93:2c:b9:
                    0d:a4:3f:4d:4f:86:4c:75:e2:29:f2:f5:fd:55:61:
                    db:e3:38:e6:de:4b:ec:8d:88:24:e4:87:29:0d:9e:
                    d1:55:a1:1b:79:1e:f3:30:27:71:6c:cf:47:8d:c8:
                    02:6b:f5:1c:68:b8:78:de:cd:29:39:7d:d1:80:cb:
                    be:75:34:b6:d0:04:0f:4e:41:49:bb:13:9c:0d:24:
                    7a:70:44:3e:58:82:be:27:80:64:09:f5:d1:67:59:
                    4f:9c:6d:3c:37:85:f7:9f:14:5e:c8:74:0a:59:84:
                    5d:89:e2:d7:63:33:d0:17:1d:a3:e6:da:8a:5c:cc:
                    29:41:68:d5:b4:e3:2f:73:cd:19:9a:93:78:da:0b:
                    d4:08:02:ec:1e:a8:55:b9:d9:4e:54:97:c7:95:8c:
                    65:ba:60:4b:d4:df:ed:16:2f:f5:8c:8a:ac:de:a4:
                    07:bb:b5:a1:1c:10:6d:07:28:68:98:f5:b2:04:63:
                    1f:2a:38:55:97:ef:4e:fc:dd:32:da:6d:f4:35:37:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:06:E5:1F:0D:75:0C:9C:6F:54:CF:89:79:EC:AC:71:90:8B:4F:51
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3e:97:23:d4:c9:10:d7:ee:a4:d0:43:e6:38:93:55:5b:67:
         bb:2b:c2:da:f6:2e:c9:ca:04:4f:d4:3c:d1:d0:cc:ee:49:79:
         49:21:15:26:2e:fa:3b:c8:70:6c:a0:06:f2:fd:5d:aa:6c:f7:
         28:0d:69:ea:71:f2:dc:08:ce:e4:3c:ba:3c:01:2e:12:fa:c3:
         58:48:0a:db:ef:ba:3d:ed:84:58:27:46:9d:93:7f:43:dc:3d:
         80:f5:dc:2b:e4:b0:b2:95:7d:85:e4:68:38:ed:55:10:a0:e1:
         3e:ad:5e:83:12:d6:ff:23:18:5f:0a:20:98:50:16:ec:13:2b:
         a1:65:1f:87:e7:5c:e1:98:11:0d:e0:58:4e:62:11:33:74:35:
         3b:44:32:f5:d4:99:55:54:f9:98:4f:6d:97:40:74:1b:ed:b6:
         9f:00:a7:e7:11:79:6a:1f:bc:52:ab:24:30:07:cc:06:f7:50:
         95:34:9b:4e:47:bb:9b:e7:8f:9f:aa:68:4e:3d:30:4a:ae:51:
         75:45:b2:f8:88:1c:2f:58:c5:f0:56:0e:ed:21:47:ed:93:2e:
         93:9e:d6:1a:d4:f2:d4:17:78:08:ef:cf:cc:31:44:aa:64:73:
         f6:26:5e:a7:2a:16:c9:16:2a:04:08:56:c0:fd:46:bf:de:76:
         28:c1:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:26:16 2025 by rpki-client