Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File:                     0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier:          hyOQeRChH3KNHk0GnecUPhaKT/3wydj5JVzB77galjY=
Subject key identifier:   8B:B3:57:C4:2F:CD:F0:BA:12:A2:92:0B:54:DC:80:6E:68:72:32:44
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer:       /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial:       0196C7CCF6FF85FBBEF93FC0F34E03EADCB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number:          127B
Signing time:             Tue 13 May 2025 04:00:20 +0000
Manifest this update:     Tue 13 May 2025 04:00:20 +0000
Manifest next update:     Wed 14 May 2025 04:00:20 +0000
Files and hashes:         1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: yqo70S/yQAz0j4PICvb9ffnlln0R8fUsbGNPdNgFIeU=)
                          2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cc:f6:ff:85:fb:be:f9:3f:c0:f3:4e:03:ea:dc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
        Validity
            Not Before: May 13 04:00:20 2025 GMT
            Not After : May 14 04:00:20 2025 GMT
        Subject: CN=8bb357c42fcdf0ba12a2920b54dc806e68723244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:08:e3:99:36:d4:b8:d5:85:db:c7:a1:f1:
                    a2:11:28:ea:03:91:34:18:88:ed:15:79:f3:0a:0d:
                    06:4b:25:5e:8b:2e:6e:ee:d2:51:42:b5:a9:7a:ae:
                    86:71:cf:40:6c:2c:a0:18:56:f4:30:d3:a7:54:99:
                    c4:e0:80:3e:f5:91:38:58:d2:56:c9:58:a1:fc:45:
                    9c:46:73:ed:7b:da:2a:85:fa:50:4e:16:51:7b:02:
                    f7:90:93:5a:dc:36:8b:03:c0:8a:91:25:e4:5e:0e:
                    c2:bd:9f:d0:e2:d7:9f:3a:e9:2b:dd:9f:03:8e:c8:
                    b2:37:00:54:f5:d7:62:79:65:af:42:39:b6:dd:a1:
                    b2:85:05:81:fa:a9:9b:d3:46:31:d2:ee:9c:dd:4f:
                    f9:3f:1e:43:d6:6d:c7:e5:a9:2a:ff:a5:69:39:91:
                    b1:35:14:e8:63:42:44:c2:e2:3c:fb:15:c5:c5:55:
                    2e:c5:77:f0:3d:fd:bb:8f:77:a9:1f:ce:72:88:1a:
                    a0:b9:25:05:f3:7f:ea:be:40:c7:c5:ef:83:bf:8f:
                    02:d8:fb:6f:d4:17:7b:80:15:c1:65:17:95:0b:5a:
                    54:bf:2a:69:78:e8:02:2b:b9:6d:8f:e5:3d:1b:97:
                    a1:bd:4d:6e:c2:cb:15:ab:65:55:70:4f:f6:29:b9:
                    66:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B3:57:C4:2F:CD:F0:BA:12:A2:92:0B:54:DC:80:6E:68:72:32:44
            X509v3 Authority Key Identifier:
                keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a7:9d:ff:52:94:e8:d4:b2:37:eb:13:51:1b:c5:3a:de:4c:
         88:f8:11:9c:2b:2e:31:6e:46:61:37:13:5d:1c:17:49:45:d5:
         5f:70:a0:81:c9:fe:53:ee:c4:0f:6c:fb:7b:5d:51:24:44:3a:
         43:bd:b1:1c:a2:93:bf:14:bd:01:66:e4:f4:45:f7:47:a8:b0:
         fb:08:5c:66:6d:13:00:25:83:c8:54:a3:c7:43:87:08:48:46:
         d5:9c:68:38:1b:b1:82:78:b7:10:eb:06:9c:d8:03:e7:3a:aa:
         6c:79:ac:cf:8d:e8:8c:cc:b5:f9:91:73:fe:51:95:0b:dd:67:
         8d:69:3b:68:b1:69:9a:d6:f8:90:32:3d:23:c4:88:4e:e7:ae:
         cb:bd:68:6d:ef:64:a0:f5:d6:1a:aa:79:69:08:81:f3:8d:13:
         4f:b4:85:5f:a8:b9:71:0c:e7:95:1a:ee:95:3e:83:e8:0b:17:
         ea:07:52:2a:d4:c9:4f:b3:b7:d2:ce:fd:23:8c:93:0e:61:ae:
         b8:dc:28:cc:cd:83:57:53:24:8d:c0:20:4b:4b:fd:1c:fd:59:
         57:03:ed:1f:12:96:98:2e:f0:e3:62:f8:19:23:bf:2f:ea:9a:
         5b:5c:c5:db:b5:23:cf:83:6f:ed:e5:4a:b4:ed:ae:57:43:96:
         0a:2f:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:30:18 2025 by rpki-client