Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File:                     8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier:          W++TXb/Jldt8UCNxwhMU+yZM4RMZPkklV202PlOLJ1M=
Subject key identifier:   26:89:F7:04:21:FD:BB:11:EF:68:48:A1:56:8D:97:78:66:90:EC:5E
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer:       /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial:       01969F08498F713C591F11FAE653C164D205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number:          037B
Signing time:             Mon 05 May 2025 06:00:42 +0000
Manifest this update:     Mon 05 May 2025 06:00:42 +0000
Manifest next update:     Tue 06 May 2025 06:00:42 +0000
Files and hashes:         1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: 1aQrb1TKHCqcrZtpi1fh/7DXOqceOc7i9RLUP4odXI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:08:49:8f:71:3c:59:1f:11:fa:e6:53:c1:64:d2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
        Validity
            Not Before: May  5 06:00:42 2025 GMT
            Not After : May  6 06:00:42 2025 GMT
        Subject: CN=2689f70421fdbb11ef6848a1568d97786690ec5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:b2:21:67:6b:1b:67:47:e0:63:38:0e:53:
                    b4:52:93:f7:07:88:e4:ee:95:5e:26:57:99:01:a3:
                    85:af:71:e4:4b:52:15:71:7b:a5:f6:79:ae:f9:ef:
                    84:42:73:e0:9e:42:72:1c:1d:f8:c4:a7:6a:9c:8b:
                    6b:05:5f:56:e0:3a:a5:c2:3a:97:70:e2:74:b8:37:
                    27:61:9d:48:52:84:8b:7a:d1:14:20:d4:35:1c:1f:
                    25:f1:9f:3f:49:79:08:04:ed:b5:a5:52:5f:78:13:
                    d1:68:06:c2:cb:12:e8:3c:fa:35:d5:a5:59:e2:cf:
                    6a:ce:1d:40:0f:96:d1:16:13:30:12:8a:f2:23:7c:
                    ae:e4:1b:08:76:a0:88:7c:0b:1f:47:4e:18:4b:19:
                    f8:a0:b9:b1:93:c6:aa:b7:90:c1:e9:0d:b0:d9:ba:
                    f1:cb:9a:fd:74:d7:18:fe:0e:ef:55:c4:96:59:ee:
                    91:eb:5e:8e:42:4b:40:bb:fd:a9:9b:44:24:b9:b9:
                    4d:ac:92:44:d9:9f:4e:79:43:e8:f9:9a:82:1f:74:
                    ab:ef:a1:9d:46:b4:f5:59:f1:4c:52:b4:ed:de:3e:
                    8d:3c:7b:5b:5f:ab:46:49:11:30:68:35:1a:7e:80:
                    47:ce:00:4e:27:b8:45:fc:eb:87:1d:57:9c:e4:2b:
                    8c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:89:F7:04:21:FD:BB:11:EF:68:48:A1:56:8D:97:78:66:90:EC:5E
            X509v3 Authority Key Identifier:
                keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7a:67:f8:ea:2b:46:b7:10:59:2d:79:c8:c8:49:d8:fb:89:
         45:5f:4b:44:ea:5b:23:bf:bc:ce:ea:46:81:5b:6c:6a:70:39:
         a2:25:78:d4:96:45:90:35:61:d0:a0:8d:c6:6b:44:69:d8:9a:
         76:3f:a7:56:74:f0:6d:64:16:dd:3e:ea:18:70:68:b9:1a:65:
         cb:d8:15:d5:bf:49:b6:ae:8e:dc:c5:6f:4a:91:c3:50:4f:d0:
         ed:c8:81:34:d2:8f:7a:2c:b0:e2:07:52:f1:0d:ad:cc:e3:a7:
         fd:dc:30:34:8f:dc:6a:a7:23:7d:eb:58:f2:d7:d5:eb:19:01:
         bd:7d:39:b2:e2:48:52:7f:27:a3:c3:50:20:96:4b:89:64:a8:
         74:68:5a:9d:5c:5f:85:9e:50:32:5b:a3:16:8a:03:dd:f7:af:
         a1:aa:6a:6b:fc:5c:93:ba:68:0e:f4:a1:8e:bc:fe:df:20:db:
         db:91:bd:ab:13:35:c0:ef:fa:e0:82:cc:41:df:de:72:ad:39:
         00:20:8c:d9:86:ce:a8:c5:8b:ab:cc:8e:d3:8a:27:c8:8d:7c:
         da:83:77:c8:96:0d:f4:11:c8:1d:da:3b:7a:3e:8e:fa:87:a6:
         eb:08:db:ae:d7:0e:bb:95:a1:77:7e:a6:a8:7a:81:e8:8e:a7:
         ca:c6:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:01:57 2025 by rpki-client