Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File:                     S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier:          pk+WJ1iDdGn7xc0DcVhTHysqKg2Z7sb+IdtjUGCZf60=
Subject key identifier:   CA:BB:5A:16:6C:2A:54:88:14:1B:59:02:FF:E2:21:6D:59:39:F4:F1
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer:       /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial:       0196930470CC2E3DF08000A4906E0B86B911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number:          04B9
Signing time:             Fri 02 May 2025 22:01:03 +0000
Manifest this update:     Fri 02 May 2025 22:01:03 +0000
Manifest next update:     Sat 03 May 2025 22:01:03 +0000
Files and hashes:         1: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: RpgVvtSK30rPWhve7SHbKc0TfN1xtYurmCydCGqpZwk=)
                          2: hewkwqUbEjrIV_IBVqwAtoymkrQ.roa (hash: Jkl1mlHh6xctvJTfhoOpTm+3C4TmQ7fhy/9GZ6iTL9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:93:04:70:cc:2e:3d:f0:80:00:a4:90:6e:0b:86:b9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
        Validity
            Not Before: May  2 22:01:03 2025 GMT
            Not After : May  3 22:01:03 2025 GMT
        Subject: CN=cabb5a166c2a5488141b5902ffe2216d5939f4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:65:4d:e0:e0:9b:ec:39:94:e9:87:df:9e:
                    05:39:86:56:81:b8:df:07:14:71:43:a5:15:9a:47:
                    26:aa:57:83:92:f1:88:1a:be:90:15:91:70:16:34:
                    31:af:57:bf:42:87:37:aa:d1:f6:1e:76:37:a5:77:
                    79:66:1a:1f:92:ac:8f:95:22:6b:06:b0:23:39:aa:
                    7c:b9:7a:02:22:39:03:e8:d5:e7:ad:2d:fc:c0:3f:
                    ef:f3:0d:ba:23:8c:d4:ec:c7:94:52:38:cc:19:9e:
                    b1:2b:f2:09:51:12:c0:95:a3:9a:cc:79:ba:85:b6:
                    82:75:29:43:91:a3:bd:50:ed:b9:db:6c:3d:5e:59:
                    62:14:37:75:0c:c7:f8:11:9a:6e:4b:e8:2e:73:4c:
                    56:d3:ff:94:73:39:39:d7:8a:75:e3:04:13:d8:b1:
                    25:51:e7:c9:25:72:ae:4b:f3:f7:46:f5:40:98:c0:
                    98:9e:bd:82:a3:0b:83:b4:8d:18:a4:5f:7a:fe:e0:
                    96:2d:ff:47:2e:fc:45:4a:80:3e:b1:1c:9b:52:b1:
                    49:7a:6d:c8:ef:10:0d:09:2a:10:85:da:01:d7:d2:
                    de:08:d7:2c:a4:b9:ef:fb:78:b9:3f:c3:f5:b2:31:
                    c4:4b:9a:14:c5:af:f8:a3:8f:11:c4:49:4e:21:df:
                    e9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BB:5A:16:6C:2A:54:88:14:1B:59:02:FF:E2:21:6D:59:39:F4:F1
            X509v3 Authority Key Identifier:
                keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:03:32:c2:43:9c:31:d1:e8:79:06:8b:4a:cf:d0:ee:aa:64:
         7f:03:4a:09:65:9c:fe:b1:2d:d4:ca:23:6f:ec:5f:a2:87:a8:
         4c:9e:78:50:32:24:21:a2:90:83:12:0c:41:17:68:f3:2c:d6:
         3b:29:cd:6f:e8:4a:80:53:68:60:38:08:1c:d6:2a:84:51:59:
         0d:03:8e:9d:f5:00:72:3f:a1:cc:fb:69:ab:dc:cc:90:c2:5d:
         89:a2:b9:a9:19:00:73:5e:c4:82:ef:d1:87:04:83:fd:cb:c7:
         38:7d:ce:18:e2:65:01:dd:20:8e:41:b0:c2:52:be:64:cf:04:
         c7:9a:5a:a0:16:ed:6a:cc:79:3e:d7:15:8c:58:e6:65:14:d7:
         03:bc:98:91:55:70:28:3d:c4:d8:33:c7:4b:82:75:52:fd:d0:
         d6:d8:4b:14:aa:c5:5b:74:ad:15:cb:1f:b7:40:7a:8b:4a:8c:
         30:a4:e6:e1:82:aa:06:ef:40:14:9e:b2:49:c4:e6:48:72:ae:
         61:52:1d:35:76:b6:6f:e9:00:b2:ca:4f:33:86:b8:5f:33:47:
         69:1e:ff:28:6b:43:21:24:7e:cc:86:a4:32:ef:fb:4b:bc:43:
         06:d3:c9:dc:3b:1f:19:48:ba:27:a7:83:ff:83:90:54:27:cb:
         f7:8a:d1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:15:58 2025 by rpki-client