Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File:                     l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier:          4pnrkKZuZWwbh/ka5Wj+WcbG6uu5wzdgU2V/PhZCHbo=
Subject key identifier:   F4:29:F5:C0:33:3F:8A:05:66:F4:88:F4:CA:26:0C:62:E0:72:38:8A
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer:       /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial:       0196A088E218EF1C9874250EA3AC1E338D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number:          0A7F
Signing time:             Mon 05 May 2025 13:00:47 +0000
Manifest this update:     Mon 05 May 2025 13:00:47 +0000
Manifest next update:     Tue 06 May 2025 13:00:47 +0000
Files and hashes:         1: Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa (hash: +dB90Z/NoEK2sKATplyBvT745dtw32LCvl2j/FqLTfY=)
                          2: XCN5lwkGM58av9oqAJsgGCsHbJ4.roa (hash: 8aCR6L9MXmCNnfWofwqGUNu6pEk0OZanJ7hWSkVsigk=)
                          3: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: waP3PUn1O9uF2VYwnY1c1y8UEfXPncqeX5leNAkjK14=)
                          4: tYNk5ivLrJOQmND4t8YVO7XJjVM.roa (hash: 7BRKmsVp5QSVmk/qolkRNTnxiIc5l5yvcX18LVXR7ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:88:e2:18:ef:1c:98:74:25:0e:a3:ac:1e:33:8d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
        Validity
            Not Before: May  5 13:00:47 2025 GMT
            Not After : May  6 13:00:47 2025 GMT
        Subject: CN=f429f5c0333f8a0566f488f4ca260c62e072388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:51:c7:41:67:6f:2f:c0:0e:9d:e3:f1:bb:
                    af:7d:b9:a6:e9:61:d6:db:c4:3a:c9:15:50:08:fc:
                    f0:13:24:aa:99:ff:b8:81:78:10:1c:03:4e:ba:00:
                    1d:c2:77:3b:89:7b:22:83:70:56:16:8f:d0:17:fd:
                    c2:a9:cb:7c:0b:88:4e:2c:8c:9d:3d:5d:9f:90:dc:
                    1f:a4:5a:70:cd:f0:ed:6b:b7:3f:33:c7:89:77:bb:
                    42:f0:9d:e2:6f:72:f0:9c:b6:f5:e3:ad:e0:0e:bd:
                    ac:7f:25:98:0d:91:91:b8:ff:c4:d1:53:aa:95:3e:
                    38:28:f3:f4:31:e9:58:dd:5b:57:cd:34:9d:16:bb:
                    55:f1:3a:ba:d0:df:01:b5:2d:74:6d:c0:4e:8e:97:
                    4e:04:89:22:27:e9:20:d7:ce:07:d0:b2:9a:97:a1:
                    90:99:2c:af:33:62:f6:2a:dd:59:56:99:e7:88:b3:
                    0b:0d:0d:eb:f5:40:f5:ec:7e:c5:55:8e:fb:f1:85:
                    57:46:50:34:bd:f7:df:77:07:85:fa:e3:89:5e:8c:
                    72:75:41:ba:06:c0:85:a3:14:b1:fe:bf:48:92:db:
                    4a:e3:f4:b3:46:aa:f8:67:cc:15:ff:cf:22:a5:76:
                    b2:fc:6c:b6:48:2d:ce:7c:e5:00:ba:54:ba:93:ee:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:29:F5:C0:33:3F:8A:05:66:F4:88:F4:CA:26:0C:62:E0:72:38:8A
            X509v3 Authority Key Identifier:
                keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:58:14:22:3c:cb:8d:d5:da:9b:4e:5a:95:10:65:ca:e3:a0:
         a8:41:5b:95:aa:24:99:ba:11:45:4f:00:19:99:23:23:61:ff:
         a5:71:ae:b2:86:67:c3:6d:24:da:58:07:f7:ec:01:45:1f:01:
         89:7b:f2:17:80:d4:87:48:14:ed:92:6f:86:1f:cb:a7:be:44:
         af:11:9d:6b:61:c2:12:f1:2f:d4:6a:33:96:9c:b7:aa:64:db:
         8e:f9:68:05:ea:94:c0:47:cc:91:de:b2:d1:0d:e3:f3:51:b2:
         1f:55:53:7d:d3:a4:24:8c:88:2c:d0:17:24:e2:dc:41:ff:93:
         be:5d:6a:4b:36:a2:db:42:82:e0:44:fe:92:77:14:a4:02:5d:
         ed:93:d3:5d:3e:30:9f:e9:e9:bb:f1:1a:c0:3f:91:8e:04:d6:
         18:1c:08:52:c7:68:69:a1:2e:a2:75:bd:b0:01:bb:4d:1a:e3:
         7c:19:73:dc:15:c1:49:03:8b:5c:64:06:a3:49:17:54:c6:2e:
         76:4f:d6:2a:6b:46:57:a0:68:03:af:67:a9:d4:bd:30:46:74:
         73:24:f7:a6:fd:e5:0c:2a:de:f9:c6:10:2d:9c:70:80:57:48:
         e3:3d:97:9b:45:ab:50:70:35:0b:46:ad:41:93:c2:f1:bf:3d:
         38:9a:6d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:14:36 2025 by rpki-client