Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File:                     8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier:          MontxSGsJuMXF7S0eZ8ybmMlvMPUeBoG0TIdqMIOvLw=
Subject key identifier:   E3:BE:65:42:61:9E:42:AC:43:89:69:6D:19:22:37:B7:1F:65:72:05
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer:       /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial:       0197B74579EB6F61ADE862D16EB64D40167D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number:          049F
Signing time:             Sat 28 Jun 2025 16:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:13 +0000
Files and hashes:         1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: 0i/IYVEQrZGUhmPGOZE7pNr8uvv+svuHnvyYkQ1AYZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:79:eb:6f:61:ad:e8:62:d1:6e:b6:4d:40:16:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
        Validity
            Not Before: Jun 28 16:01:13 2025 GMT
            Not After : Jun 29 16:01:13 2025 GMT
        Subject: CN=e3be6542619e42ac4389696d192237b71f657205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:39:0f:2b:61:e9:b6:63:4b:5a:e9:31:ab:
                    03:d6:3a:e7:9d:03:3f:12:48:a2:3a:0a:96:a7:e8:
                    01:0a:60:41:ff:d7:4a:33:a6:d3:5c:b1:85:53:2b:
                    ca:6b:5b:4a:1a:92:f4:d9:20:c8:d0:b5:e2:e9:28:
                    56:a9:d7:12:62:5b:ad:68:c5:8e:79:ef:cc:03:af:
                    68:46:18:15:34:c0:38:f7:a4:b3:aa:bb:22:90:6f:
                    26:1a:ed:21:7d:b5:da:2f:10:6e:28:7d:43:ee:35:
                    a2:62:b7:c3:2e:53:9c:7b:c5:f3:7c:66:21:82:b4:
                    2a:22:ba:e5:19:88:1a:2d:aa:81:93:a7:0d:c4:8a:
                    97:c9:37:18:c2:a7:62:f9:bb:ee:d5:50:cb:3e:2c:
                    fb:3f:2e:d0:1e:b6:3a:33:ae:e2:75:a6:3a:27:46:
                    22:d5:6c:aa:4a:a1:7c:6a:5a:17:c3:31:ef:8c:95:
                    25:a0:70:99:1c:b6:cd:69:45:df:14:2f:82:10:5e:
                    71:84:56:b8:98:a7:e3:1d:82:13:9e:d2:b9:5e:44:
                    87:a9:1a:ea:ee:16:e7:d4:3a:19:93:1e:a9:4c:55:
                    28:7f:0e:04:25:da:35:19:4c:17:8c:53:85:28:ba:
                    20:5c:25:85:25:5a:48:6b:39:a9:a4:79:44:a9:aa:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BE:65:42:61:9E:42:AC:43:89:69:6D:19:22:37:B7:1F:65:72:05
            X509v3 Authority Key Identifier:
                keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:f8:af:d0:2a:54:5d:e6:3c:05:4a:da:cb:87:1b:9c:c8:
         3c:04:ff:06:98:92:9d:0b:54:7b:32:ae:28:8a:c2:a4:89:82:
         84:62:fe:7c:d2:af:f3:17:fe:e8:bc:77:12:8d:48:5e:b2:f7:
         a7:94:92:2c:84:1f:89:1c:82:8a:3c:33:73:fb:d0:84:72:f3:
         d6:13:6a:c9:5c:16:26:84:b4:37:74:5d:b9:5a:cf:44:0d:84:
         60:a6:0f:98:0d:2f:9f:3d:80:54:aa:9a:23:26:fa:2f:48:b3:
         f1:f2:ba:11:bb:35:c9:2b:b0:de:21:00:00:de:5d:82:4b:d7:
         a0:8f:23:eb:45:e9:6c:a3:2e:8c:47:4b:c2:98:22:09:64:6b:
         df:61:83:a7:86:5d:6b:e7:54:ba:b1:28:5f:f3:93:44:c4:0f:
         c7:7f:62:35:7c:81:33:b9:71:71:a1:ac:10:fa:94:ac:98:7c:
         61:74:1f:78:71:da:09:da:0f:e2:f6:7f:c2:d3:b2:0f:bd:6f:
         23:d1:13:49:a7:f3:a7:a6:cf:39:92:b1:1e:d8:69:2f:50:80:
         b8:8b:03:a0:cc:c7:3b:10:91:71:5d:ed:cb:b5:13:21:d1:ca:
         b1:f7:07:65:8f:86:06:82:17:06:9e:86:1d:1f:53:d7:5f:60:
         06:b2:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:14 2025 by rpki-client