Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File:                     K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier:          Xg7+kgS0TGY5fpVr9e7HD4z0UJAdZUNR+NruCL4oFk0=
Subject key identifier:   4E:9B:96:EB:D1:81:FD:4F:1F:DE:7E:A6:B7:8A:F4:92:87:6F:D1:B2
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer:       /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial:       0196C04AE1954653BC9BFFD8D34F48D85440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number:          0B26
Signing time:             Sun 11 May 2025 17:00:54 +0000
Manifest this update:     Sun 11 May 2025 17:00:54 +0000
Manifest next update:     Mon 12 May 2025 17:00:54 +0000
Files and hashes:         1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=)
                          2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: n7nsfgVpAzhBLo21KYKGMDRFtRzr6f5oZdKsG5P0Cl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4a:e1:95:46:53:bc:9b:ff:d8:d3:4f:48:d8:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
        Validity
            Not Before: May 11 17:00:54 2025 GMT
            Not After : May 12 17:00:54 2025 GMT
        Subject: CN=4e9b96ebd181fd4f1fde7ea6b78af492876fd1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:cd:04:5f:c3:6a:a1:92:0d:3d:c2:e0:75:
                    be:15:92:44:43:c9:28:01:22:c5:4d:6c:a3:55:7d:
                    82:70:61:5c:2d:0d:13:25:29:9c:dc:9c:2d:5d:88:
                    c4:0e:cc:ab:73:77:42:58:98:e3:e8:5d:fa:94:76:
                    14:c0:35:d9:34:2f:34:e0:14:15:7e:ef:1d:3e:f9:
                    71:67:f9:81:24:90:91:f1:d5:22:1c:83:48:d4:b5:
                    0a:77:ff:68:d1:ec:e5:3c:89:2a:9a:cf:72:2a:f7:
                    7b:9d:14:3e:c7:a1:e9:1a:ad:f9:8f:fd:87:f7:5b:
                    a6:5f:f6:c9:f9:52:6f:8e:55:77:98:a9:ba:1a:c0:
                    94:4d:7c:72:d6:1b:dc:4e:0c:af:b8:e2:58:b2:10:
                    a9:58:d3:e7:d1:fb:3d:68:58:2d:97:f9:b7:ae:32:
                    94:bf:1c:12:22:7d:f4:38:4a:9e:49:16:93:3d:e2:
                    5c:ac:c1:27:9e:4a:2d:f6:97:b4:71:75:e7:54:f5:
                    7f:0d:fb:a6:cf:9f:02:34:b4:2a:ff:e6:a9:ea:9f:
                    77:eb:51:3f:2b:ec:b7:9a:81:58:b0:d4:d0:cb:9a:
                    ae:76:eb:cb:b9:32:6f:d2:aa:35:34:7e:81:26:7e:
                    98:db:84:6c:75:f5:9c:41:43:4f:30:32:39:40:bf:
                    f0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9B:96:EB:D1:81:FD:4F:1F:DE:7E:A6:B7:8A:F4:92:87:6F:D1:B2
            X509v3 Authority Key Identifier:
                keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d5:0c:c9:6b:28:b2:3b:d1:15:d2:b7:7a:7f:af:74:bf:e4:
         08:af:cd:b9:f4:82:53:51:cf:ca:24:a5:f6:c4:69:11:41:b5:
         81:57:ab:7b:9c:eb:88:4c:f3:c8:e7:12:54:05:65:53:bd:f7:
         c1:54:c9:36:ce:a7:04:86:d9:53:aa:ab:56:cd:54:3f:64:d3:
         0b:51:ed:9f:a3:50:e1:98:b4:0b:4e:01:49:86:f3:08:ad:df:
         d6:c6:ae:3a:ff:46:7e:3d:d1:4d:de:55:d9:d6:3a:62:f5:77:
         2c:1f:f8:ae:23:5c:2d:03:0e:90:1f:09:0a:88:9c:fc:59:75:
         7d:3d:de:92:d2:af:1e:89:dc:0c:a4:87:21:35:3b:e6:63:6d:
         ac:02:e6:e7:fd:49:dc:b0:8a:e7:e4:50:f8:39:a9:af:09:bf:
         49:a0:da:2b:be:69:4f:76:06:b4:93:18:fa:80:f0:40:36:c5:
         83:47:ee:aa:eb:36:a7:df:2a:40:2f:5e:dd:32:15:6b:13:5c:
         77:84:ff:60:ca:44:e5:66:85:8a:d0:b4:75:84:79:fa:42:e9:
         92:db:e4:84:f4:0c:cc:5d:3f:a5:14:c9:93:3b:ce:c0:cf:39:
         36:59:b0:23:7d:a9:73:89:24:c0:98:3e:94:e4:5a:8a:92:2d:
         41:a7:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:27:25 2025 by rpki-client