Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File:                     8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier:          ZND9ocRHFU4RYfgIgB11RB+siadLBsOJ6ld0HcqJJAA=
Subject key identifier:   46:05:72:03:1B:A8:38:91:D5:CF:33:D4:87:0B:70:0F:61:A1:FC:6D
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer:       /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial:       0196BB5B5B984C74BE23A0600AA1CF41A3A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number:          0334
Signing time:             Sat 10 May 2025 18:00:48 +0000
Manifest this update:     Sat 10 May 2025 18:00:48 +0000
Manifest next update:     Sun 11 May 2025 18:00:48 +0000
Files and hashes:         1: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: k+kQqCEz30AZs2cqT+obAdE1pCRcRTp5DjTW1X6MqN8=)
                          2: wN3I7D42_Scvh3kTX6wbZgc3STg.roa (hash: +5WZ8eZml5reiYd5KuhYrJcZjNCC9ofGPFNFq+2Hrx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5b:5b:98:4c:74:be:23:a0:60:0a:a1:cf:41:a3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
        Validity
            Not Before: May 10 18:00:48 2025 GMT
            Not After : May 11 18:00:48 2025 GMT
        Subject: CN=460572031ba83891d5cf33d4870b700f61a1fc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:68:2c:83:a4:12:86:f0:c1:a4:a5:b4:37:93:
                    15:76:ab:5c:e9:76:b0:cf:de:ae:70:61:76:b2:20:
                    ff:46:23:a1:86:f6:d6:c0:c2:fd:67:8f:95:e5:3a:
                    38:70:ca:e9:54:94:db:8e:d7:42:be:bf:51:89:36:
                    09:26:b5:3a:7b:b1:be:1e:bc:19:9b:9e:c0:79:b4:
                    5d:0e:e8:f7:1e:95:29:f6:00:d4:ec:78:3c:77:86:
                    6c:f9:b6:f2:96:da:3b:a8:33:09:64:60:75:fc:ea:
                    8c:09:f0:05:e8:54:72:91:19:1a:54:2c:3e:ba:f4:
                    27:85:4d:69:3d:e5:42:88:c3:d9:03:4b:07:f3:a0:
                    17:5d:5d:9c:73:29:64:7c:e4:3d:5a:6e:d1:f9:1f:
                    39:f9:08:f4:bf:a1:b7:dd:e6:74:8d:80:1d:05:73:
                    9d:fa:6f:3d:c7:b8:93:7c:ed:7a:5f:6d:ca:ec:1a:
                    8b:34:83:49:10:91:01:04:06:9e:e1:69:62:e8:fe:
                    c2:51:71:27:3d:ae:93:06:89:f8:70:6b:3d:94:11:
                    c9:f9:a0:8a:22:c9:89:62:12:26:1e:4b:a7:e5:4e:
                    26:ce:2e:e9:6a:2c:29:6a:7e:2f:86:57:48:89:dc:
                    1b:ab:2d:00:e3:67:06:ba:c2:e6:24:7d:2d:ed:08:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:72:03:1B:A8:38:91:D5:CF:33:D4:87:0B:70:0F:61:A1:FC:6D
            X509v3 Authority Key Identifier:
                keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:42:9e:f2:c6:12:b2:a8:4b:6e:d1:0f:a6:12:29:98:9b:38:
         6f:46:5a:99:2c:34:c9:e8:cf:14:7b:f0:3d:cf:18:fb:01:82:
         00:2c:94:20:1e:b4:bd:ec:b5:67:f6:2f:e1:a6:4c:9c:c6:e0:
         81:e9:3e:fc:d2:24:87:ca:8f:73:4a:fa:7b:5f:03:84:be:3a:
         aa:bb:5c:a1:62:00:b0:2c:6e:d7:8c:57:5a:1e:24:18:5f:08:
         01:1e:61:84:9a:c7:b3:06:d3:f6:99:a6:3d:2b:ce:4f:82:a5:
         de:cf:3d:be:e5:7a:4b:91:0e:03:2c:73:3b:df:7c:3e:ea:95:
         0b:77:be:a2:6c:98:fe:59:3d:5c:fb:e3:b1:49:bc:8a:b2:3b:
         37:08:cd:90:19:2f:a8:e7:49:b9:eb:0e:25:09:2d:cd:54:d2:
         90:8a:02:b9:38:7d:5b:64:41:13:02:6b:a3:a2:d6:0c:8c:7b:
         ec:d3:d3:fd:5b:bb:ef:c5:d8:0c:eb:47:3c:65:fa:6f:62:93:
         db:99:19:e3:bb:74:c2:e7:c0:ea:81:b5:96:51:cb:cb:7a:05:
         89:f8:e1:87:7d:11:d6:95:88:16:25:c5:a0:e4:db:7e:c0:ce:
         94:8b:c0:18:2f:82:53:58:ab:03:5e:f3:2a:3c:ee:67:27:c8:
         44:63:4f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:21:29 2025 by rpki-client