Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
File:                     MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft (raw, json)
Hash identifier:          AumOaLrK0dzw0eEx2cIHRbCoPVmxuBy0GwkYx+1vZDQ=
Subject key identifier:   EB:25:50:A6:D7:E2:3D:45:C0:D5:26:94:22:E2:11:02:5A:EB:62:3C
Authority key identifier: 30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F
Certificate issuer:       /CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
Certificate serial:       0196C15DC8EC7EDBBD39D46DFB87CF619545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
Manifest number:          08BD
Signing time:             Sun 11 May 2025 22:01:11 +0000
Manifest this update:     Sun 11 May 2025 22:01:11 +0000
Manifest next update:     Mon 12 May 2025 22:01:11 +0000
Files and hashes:         1: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl (hash: tFzx56y8AUN5fmLwgi0/JpkiFbU3PLxWkidr/Fc9SEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:c8:ec:7e:db:bd:39:d4:6d:fb:87:cf:61:95:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
        Validity
            Not Before: May 11 22:01:11 2025 GMT
            Not After : May 12 22:01:11 2025 GMT
        Subject: CN=eb2550a6d7e23d45c0d5269422e211025aeb623c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:49:74:5d:b8:ff:fe:0a:0a:50:90:fb:50:
                    8d:c0:60:4a:ba:93:66:46:0c:c4:4c:eb:ad:92:4f:
                    2a:bd:05:20:52:6f:2e:f8:2b:d3:72:d6:2f:6c:d0:
                    10:5e:d8:85:48:cc:c4:7c:ca:43:41:98:ee:11:97:
                    33:d3:08:05:46:b8:3b:c7:54:f5:a2:78:37:42:30:
                    5e:6a:60:9e:1c:82:19:4e:93:b3:ff:32:fd:a4:bb:
                    5b:9b:bf:fd:a6:2f:1b:be:d9:f6:37:b4:bc:56:09:
                    78:7d:85:ae:cf:f4:8b:75:34:b5:3f:7f:55:13:b3:
                    70:8f:e5:62:c4:14:80:73:b6:f1:22:72:5a:d6:39:
                    0b:2d:3b:47:aa:1b:6b:cc:81:ab:ca:8f:da:52:d4:
                    b2:55:0f:1a:03:7d:11:69:3c:15:ff:44:b4:8b:b2:
                    d2:cc:75:e2:89:d6:13:9d:ce:b8:8f:f6:58:c1:c2:
                    cd:5c:81:03:ce:e3:62:7f:33:a9:5a:4c:19:d0:cf:
                    aa:cb:34:19:9f:ee:9a:95:dc:11:ab:ce:b9:e9:d6:
                    8b:f8:c3:05:94:17:3c:12:3b:b5:df:6e:ad:52:fd:
                    6d:d5:6a:0d:f6:62:75:8d:70:06:d3:a5:24:e8:7d:
                    5e:a7:44:43:08:a5:ba:8e:2f:36:ad:d4:41:64:34:
                    9d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:25:50:A6:D7:E2:3D:45:C0:D5:26:94:22:E2:11:02:5A:EB:62:3C
            X509v3 Authority Key Identifier:
                keyid:30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7e:64:44:6b:00:a7:2b:57:37:dc:66:4c:41:2d:14:28:95:
         88:c7:0f:be:57:f3:07:e7:6e:7d:f0:0c:e7:71:b5:d7:e6:e1:
         39:32:a1:63:b0:39:9d:85:f4:b5:1a:88:3f:42:05:10:39:75:
         3f:3c:d9:1c:d6:57:ee:04:13:98:88:c5:98:1c:54:cf:7c:aa:
         51:39:52:d7:17:6c:a0:c3:48:be:25:7d:8a:4b:f5:0d:57:88:
         57:cb:d4:92:2f:ba:7f:8e:32:78:5c:46:76:5f:fa:3b:5f:e0:
         5e:74:53:f4:32:4f:f6:04:37:50:cd:70:47:8f:a6:6f:94:69:
         0c:13:9e:c5:d6:6e:29:5d:01:fb:1e:ca:09:2d:1d:f7:49:63:
         65:bb:37:32:56:5f:47:0a:41:cb:9b:06:da:47:a6:09:ce:ca:
         8e:80:a9:7d:0d:f8:2d:4a:29:bc:d2:fa:5e:9d:23:a4:45:1d:
         f9:be:19:af:a6:54:76:b1:0a:85:81:f9:85:ef:e3:21:bd:72:
         97:f5:0b:c6:b6:0d:9b:7a:57:38:8e:72:59:7d:dc:0e:21:92:
         de:e0:60:77:46:08:aa:46:05:f3:40:dd:86:8c:99:39:d5:e2:
         a9:bc:e9:d2:73:93:66:8d:9f:d9:18:49:0b:8c:a5:06:46:59:
         86:0e:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:10:07 2025 by rpki-client