Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          NheRsSG4EdfOsCIGvNrAhd1kYaA/CaEwFxhdqY6ka6k=
Subject key identifier:   8B:4C:A2:A9:57:88:FA:E8:36:84:B1:15:80:17:77:91:1F:00:6F:04
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       0196C91680D61264B4E27AA49676AE3846A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          1515
Signing time:             Tue 13 May 2025 10:00:17 +0000
Manifest this update:     Tue 13 May 2025 10:00:17 +0000
Manifest next update:     Wed 14 May 2025 10:00:17 +0000
Files and hashes:         1: 08MOvb96w4xsKgP9JS0zoI8sRTk.roa (hash: 8gdw/ohva2RMhv163mHOocjNP3BJgaz4YyRqUuNJ7fc=)
                          2: EcfJ1jayPFQ3t0p16goPKaqtjcU.roa (hash: a5FoEd1+215WBmQs6vvzPYdx4+KFtw5yrsSUYmblCm4=)
                          3: Feoglcvw_6-C4xgxUoU6eiA0vbo.roa (hash: i5QN1v0aIKZsC1I8BX0SBzxPphQ7cFRhZicwbqLkWoI=)
                          4: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: sJVv07/GQPwEzneAIhiSogvk3OeVeMVW1cq2bQXxGDM=)
                          5: scHcnv6TrwaRFnxyoieAy0wdLy0.roa (hash: KW0/f/Bc0ZybPczgbDkkTfSw75mnRXJrQAuIsFRlAcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:16:80:d6:12:64:b4:e2:7a:a4:96:76:ae:38:46:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: May 13 10:00:17 2025 GMT
            Not After : May 14 10:00:17 2025 GMT
        Subject: CN=8b4ca2a95788fae83684b115801777911f006f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:f4:90:1a:d0:7e:bc:eb:ba:20:05:04:bf:
                    a1:71:ca:93:9f:e7:78:88:0d:16:da:1d:9e:12:ac:
                    d9:63:42:46:65:30:3f:5a:91:ad:7b:f3:c5:56:c8:
                    1f:58:81:cb:f3:1c:9e:86:3a:b8:9b:59:0d:39:e3:
                    30:ed:94:89:98:1f:b0:da:df:4f:e4:33:d8:37:58:
                    fa:b5:a5:f8:b0:71:5d:ee:80:1e:12:af:fb:87:e9:
                    c8:5f:01:b6:dd:be:95:5a:18:0c:ad:6c:b7:fb:b8:
                    10:8c:17:88:97:64:23:e4:6f:79:03:3c:72:d4:3b:
                    62:00:f5:0b:de:7f:02:a5:8e:0d:86:e4:e1:22:a0:
                    10:b1:21:fc:32:44:46:e9:f2:a9:8f:db:90:48:1f:
                    0e:75:3d:b3:1f:38:be:6b:46:d3:2e:17:4c:a7:55:
                    2f:77:7a:bc:13:59:40:d2:14:ef:b7:53:49:63:b5:
                    9b:a0:1d:be:e4:79:4c:4a:52:d2:77:d9:a3:d7:99:
                    1e:c9:c6:9f:67:a9:bf:ab:14:5b:51:dd:8d:8f:cd:
                    fa:85:6e:82:d9:88:5e:b0:36:6d:a2:0c:3c:e4:86:
                    f5:ec:b0:fc:ad:10:df:ba:71:48:7b:86:c7:0a:6e:
                    22:d8:c7:b0:cd:70:75:71:99:46:1c:14:df:2d:88:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4C:A2:A9:57:88:FA:E8:36:84:B1:15:80:17:77:91:1F:00:6F:04
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5c:4d:81:61:0e:4d:d4:16:eb:b3:9a:9b:a1:0b:d5:a2:0f:
         4d:87:f8:63:f1:73:3f:a4:7b:62:6c:1f:e4:df:43:02:4b:ba:
         a7:0f:1c:cf:5e:c9:a2:74:78:f2:6a:62:aa:e3:d8:58:71:22:
         a9:8b:f3:5d:26:13:7c:2e:27:f2:9e:78:ad:99:ad:bf:cc:c5:
         ac:f4:62:91:cc:52:bc:14:e7:12:b2:b7:fc:f3:f4:dc:a5:7b:
         e5:ef:14:61:0b:1e:ec:49:41:2c:b8:d0:ea:6a:cd:55:05:da:
         ec:28:c5:f9:15:7b:5e:f7:6f:62:e7:79:af:bb:ea:c0:78:fc:
         f5:ce:21:68:d1:6d:34:a5:43:19:f0:62:cb:cf:dc:b1:cc:68:
         77:e6:98:e1:94:6c:c9:f4:a3:a2:49:90:5e:98:59:9d:6e:23:
         ea:96:17:6e:12:db:86:3e:74:9a:b1:ca:cd:25:48:19:90:59:
         82:e4:43:88:b2:4e:c1:60:28:5f:12:a6:59:ce:91:1c:4b:ca:
         f7:68:ba:d9:85:ae:2a:f9:d9:9b:5d:6b:77:49:54:a9:9e:21:
         58:8e:e4:af:18:e1:5a:f3:e2:05:0f:65:74:9b:60:73:d3:9b:
         ac:42:47:4c:e8:86:a2:08:91:be:d4:18:7b:e1:c8:84:56:2a:
         27:65:d7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:16:53 2025 by rpki-client