Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
File:                     8mag-YbyGUXIDYMVZ7ryliAQetw.mft (raw, json)
Hash identifier:          HwwgWFEi0ed1fJlKoSRzB6YUGdNvDWmNgXMiLBfMP2c=
Subject key identifier:   C1:1B:89:9D:62:F0:51:DD:A9:9F:5E:3D:2B:F9:59:C9:96:72:9E:99
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Certificate issuer:       /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial:       0196C5A87C21D5AA5AC388E27F0BE0EA740B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 18:01:15 +0000
Manifest this update:     Mon 12 May 2025 18:01:15 +0000
Manifest next update:     Tue 13 May 2025 18:01:15 +0000
Files and hashes:         1: 8mag-YbyGUXIDYMVZ7ryliAQetw.crl (hash: XyXbxKWODdbFjSvPc+uDlY55MD72PTroI2BbovoyMxQ=)
                          2: M5jtoM41Y8zxhgX6892Azn7CbgI.roa (hash: SsoCa6KU5R2ocIrHDaK8+DXGCTEtvLA0sldxtO1jaaY=)
                          3: NhXAxr82j13CORIdeWDl9PifhbY.roa (hash: LWTp4X6BWg45hL0vGetxJ41kPYBDS+pDAAij0HwwDrY=)
                          4: xwKRlfuar5Ok0_Vuih0mv8ent54.roa (hash: ofzw4+EAI9dgA5ztmD8H8K5/VJLMCGrjBng1uGirlUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a8:7c:21:d5:aa:5a:c3:88:e2:7f:0b:e0:ea:74:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
        Validity
            Not Before: May 12 18:01:15 2025 GMT
            Not After : May 13 18:01:15 2025 GMT
        Subject: CN=c11b899d62f051dda99f5e3d2bf959c996729e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:81:e3:dd:02:e8:60:bb:ad:54:06:53:1a:
                    bb:c3:c3:27:c6:99:cc:f6:e2:8a:f2:be:3c:a1:37:
                    89:5e:fb:6f:a6:3b:fb:f6:0f:b0:3d:c3:a8:4d:14:
                    47:55:a1:94:ff:0d:63:c4:83:47:55:24:05:9b:0a:
                    8e:a3:d5:42:cc:d6:6b:a0:fc:03:5c:8b:27:58:f9:
                    d8:ab:a9:98:6b:b6:a6:4a:4c:6f:38:3e:67:f0:1c:
                    2c:6b:13:1b:74:66:a9:73:e5:fb:6b:21:84:29:0a:
                    99:77:cd:c0:eb:20:f4:1d:10:32:4d:ac:65:ea:23:
                    46:4d:9f:c3:b9:e0:0d:4b:ae:ac:4a:24:8d:41:db:
                    dd:87:2d:63:ab:ac:2a:b1:9a:be:81:6a:0e:e7:ff:
                    c3:cd:a5:9a:a6:e6:8b:91:f1:43:a1:e2:d7:d4:32:
                    19:79:ea:d8:26:49:cf:36:28:0c:97:60:95:0b:9a:
                    31:b9:e9:63:76:04:c1:b5:a7:77:53:10:38:86:53:
                    73:d4:3a:49:b5:7f:24:5a:60:d1:ab:4e:48:4d:14:
                    09:11:20:77:b3:ef:61:16:0e:9a:2e:73:66:3d:95:
                    38:62:89:be:64:df:ae:5f:03:52:1e:10:38:e1:67:
                    63:38:9a:b3:b8:d4:f6:13:0a:9c:98:e4:ec:9b:fc:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1B:89:9D:62:F0:51:DD:A9:9F:5E:3D:2B:F9:59:C9:96:72:9E:99
            X509v3 Authority Key Identifier:
                keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9b:c2:bc:62:a5:f1:83:c5:05:e3:fc:93:1b:18:ac:18:be:
         17:6f:73:ce:1b:32:09:1e:18:4b:ef:9f:b8:a0:27:dd:b6:4e:
         e7:25:cb:2e:6e:34:4f:b5:24:06:94:d9:fb:87:44:8d:5a:b0:
         74:b9:12:0b:9d:29:e3:1d:57:01:80:a8:c3:31:56:0b:f8:0b:
         82:a9:59:9d:20:01:37:8b:46:d8:9f:f2:4d:ce:ee:ef:82:83:
         ac:3d:ec:8e:22:bf:ab:7e:f1:f7:20:12:3b:3a:cd:87:68:b3:
         17:4e:55:49:0e:44:6b:0e:e6:41:e8:d0:1b:95:b0:cb:72:5d:
         23:23:98:19:f3:2d:c4:1c:d6:44:86:1a:3c:7c:4a:96:96:e5:
         07:a6:d2:7f:41:4a:d6:94:8e:5a:ce:6d:fa:32:04:5d:4c:74:
         66:82:eb:d9:a9:b0:da:db:ad:82:b5:d0:82:14:a9:90:ff:84:
         4e:5f:fb:7a:24:93:5d:11:81:24:07:1d:8f:81:a1:55:d3:fe:
         f6:38:81:66:d9:bf:2d:2a:18:c0:74:58:4b:79:5c:3a:00:f1:
         0c:87:4c:e6:5a:3c:b0:19:28:a1:e1:3f:e6:33:56:8c:1a:b1:
         c1:6c:15:4a:f6:b4:55:60:6c:5b:83:45:bc:5d:81:95:55:d6:
         1a:2b:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:23:21 2025 by rpki-client