Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File:                     8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier:          DWRA3wJRgIBA+YE2TKCsC3q85doMcWK+zk6b6f2sIAo=
Subject key identifier:   90:6E:DC:11:DD:2E:A6:64:BD:9C:1B:F4:8F:98:17:87:DC:29:BF:70
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer:       /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial:       0197B7B2E6FC21E919AA276804F888B61802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number:          1369
Signing time:             Sat 28 Jun 2025 18:00:44 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:44 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:44 +0000
Files and hashes:         1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: 7THn+O5mtRgJmmJ6GVAtJYNsiWyr8pNcQkkFhGlv+hY=)
                          2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:e6:fc:21:e9:19:aa:27:68:04:f8:88:b6:18:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
        Validity
            Not Before: Jun 28 18:00:44 2025 GMT
            Not After : Jun 29 18:00:44 2025 GMT
        Subject: CN=906edc11dd2ea664bd9c1bf48f981787dc29bf70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:16:68:58:d9:ca:c1:f3:c2:ff:f4:19:d4:
                    1f:03:63:8f:10:3d:09:a2:1e:a0:22:81:fc:19:ec:
                    25:4b:3b:41:f0:b7:51:83:dc:c4:66:60:fa:7f:f8:
                    a2:6b:32:e9:cc:f8:3b:dd:bb:95:50:2b:0e:f5:c2:
                    f3:c4:07:4d:5f:14:c4:e4:a5:7d:6d:8b:9c:18:0e:
                    f7:8c:0f:6c:a5:2f:c7:ea:ad:de:c6:11:5b:53:bd:
                    5c:4b:d4:0c:0e:d2:f9:ff:d7:9d:bf:82:04:42:c4:
                    42:1a:29:47:be:1f:f2:af:42:6c:4a:8c:fb:18:cf:
                    bd:94:0e:61:f4:e3:9e:48:b9:34:2a:aa:a0:f5:70:
                    d4:60:f1:2f:d3:59:e3:02:f3:4c:1f:db:c1:db:1c:
                    0b:f7:c2:b3:0d:ae:70:4f:d7:62:93:ac:89:e4:35:
                    7f:50:9f:cb:c7:f5:c4:3a:90:55:91:61:5f:78:33:
                    11:0e:8e:3e:06:bd:55:4c:91:dd:7e:bb:26:a5:40:
                    d9:6a:fc:cb:82:dd:87:1f:9f:2a:c2:33:b3:7e:55:
                    a8:88:d6:9a:62:92:07:b5:4d:95:26:4d:96:32:1e:
                    39:09:c6:4f:64:89:d7:76:e7:6c:7e:09:c0:f3:e5:
                    63:b6:c9:dd:90:64:90:79:cd:11:8d:b0:49:22:91:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6E:DC:11:DD:2E:A6:64:BD:9C:1B:F4:8F:98:17:87:DC:29:BF:70
            X509v3 Authority Key Identifier:
                keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:f2:19:35:d8:83:f9:8e:40:08:25:71:58:ab:3f:74:99:
         1a:09:74:7c:68:a9:52:79:48:bc:d7:21:43:a7:80:b3:fc:57:
         22:c5:e6:ca:74:47:ca:44:00:b6:8d:5c:9f:9f:7c:b9:4d:51:
         77:9d:9f:95:8d:ed:53:46:6d:fd:65:6e:0e:1d:97:b6:61:a6:
         1a:8e:eb:c5:a9:4e:5a:ff:a5:41:1b:bf:62:3a:e8:22:f8:f7:
         f2:c5:31:c2:bf:25:99:2e:c6:04:5c:d7:92:a7:7d:ba:3c:e5:
         70:d7:a0:3d:12:9d:1b:5d:09:0f:64:d9:77:4d:d7:79:42:ab:
         4d:35:5a:51:f7:91:b8:99:e8:bb:27:fa:74:30:b5:f2:1a:f2:
         4e:d5:3d:f8:67:ff:10:e5:41:3e:d0:ac:26:d7:11:f9:9c:f9:
         1d:e7:41:8e:33:cc:3c:b0:d2:20:4f:dc:82:2a:66:c1:17:da:
         be:5b:ff:d5:72:89:88:de:77:f9:39:2b:47:65:88:8c:f0:87:
         d8:67:2f:56:7e:ca:54:d3:d8:18:e4:c9:2c:64:0b:16:6e:56:
         24:07:74:3d:63:22:3d:24:37:8a:a5:60:f6:2d:4b:6f:95:4a:
         83:85:92:ef:c5:1a:65:d4:32:4b:e5:f8:20:a9:52:27:09:84:
         25:32:eb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:08 2025 by rpki-client