Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
File:                     8NSBnmY6qUh7aggqd9IjfhuIAqE.mft (raw, json)
Hash identifier:          x1xEVgyAMMesehfP9YJshLuAvsZuCzZ7kBlDn+Klu6Q=
Subject key identifier:   A7:D2:FA:4F:69:6F:42:3C:A4:4D:B1:69:68:4F:47:65:B3:80:1C:DA
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Certificate issuer:       /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial:       0196CC859447E106222F09B9176269B895F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
Manifest number:          0B9B
Signing time:             Wed 14 May 2025 02:00:28 +0000
Manifest this update:     Wed 14 May 2025 02:00:28 +0000
Manifest next update:     Thu 15 May 2025 02:00:28 +0000
Files and hashes:         1: 8NSBnmY6qUh7aggqd9IjfhuIAqE.crl (hash: M8KgbCN4WLWDpHxIRsypVSeRv7GqYoVVfcJdjXZDj2k=)
                          2: Sy3V_IgTk4ktGswgBw55mEgUx3E.roa (hash: b8dOVW1U1sP2mqNqvtuzgrz8hyIMvAWuWDCj7ROCZgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:85:94:47:e1:06:22:2f:09:b9:17:62:69:b8:95:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
        Validity
            Not Before: May 14 02:00:28 2025 GMT
            Not After : May 15 02:00:28 2025 GMT
        Subject: CN=a7d2fa4f696f423ca44db169684f4765b3801cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:51:2d:86:14:9c:04:0b:fe:0a:71:9d:a8:
                    30:a4:dc:f4:ec:a2:17:dd:7d:e2:30:f4:71:88:9f:
                    b6:30:e5:18:a7:ef:eb:4d:3c:dc:fc:f8:c3:54:e1:
                    7f:45:05:93:50:a2:03:1a:6e:0b:50:8f:c3:b1:7c:
                    9f:51:08:80:90:09:1e:eb:27:56:40:2a:4d:9b:f3:
                    48:c5:a9:12:8a:27:48:ea:77:13:7c:b3:76:74:9f:
                    31:a5:52:85:ed:43:36:cc:08:09:03:17:9d:1f:1f:
                    d2:d0:20:89:93:ea:13:a6:5d:b7:2e:ec:06:12:d4:
                    16:31:95:d5:05:78:ba:84:89:68:f0:59:53:16:ec:
                    81:e5:15:8a:23:f2:45:e8:d4:a5:25:76:e6:85:51:
                    53:0f:a9:58:8e:f9:28:3c:2a:ea:07:f4:48:a2:29:
                    aa:32:cf:14:ee:1c:5b:42:6b:25:b2:e7:23:3a:8f:
                    e3:19:6f:76:f3:e9:87:0d:62:c4:b4:1a:a2:b1:31:
                    50:a4:cf:2f:56:fd:41:5e:06:a6:dc:9a:c1:60:ab:
                    62:38:20:bf:44:ef:58:1d:ba:1b:1f:48:f9:97:cf:
                    e9:56:87:01:3e:03:64:35:bb:7b:a4:cb:f0:21:b5:
                    48:e1:e2:42:d7:b3:88:89:48:b9:e8:88:96:95:63:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D2:FA:4F:69:6F:42:3C:A4:4D:B1:69:68:4F:47:65:B3:80:1C:DA
            X509v3 Authority Key Identifier:
                keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:e1:ba:ef:b4:2c:f4:02:ca:62:ea:fc:d6:c7:48:03:c0:ea:
         fe:6f:00:70:f2:7f:8b:be:66:db:94:44:fa:35:14:ac:3a:6c:
         61:73:64:7e:aa:01:9a:ba:9e:eb:39:87:12:d0:e2:0c:62:f7:
         2e:fe:50:6c:57:d1:63:dd:dc:de:c2:87:62:ca:95:09:d1:50:
         90:d7:3b:da:78:22:2c:6f:24:fc:b2:a5:14:96:24:aa:5a:9b:
         32:0a:e7:eb:f8:01:85:f7:bb:96:fb:f0:d5:38:dc:8e:41:b4:
         b1:d6:41:a0:d3:d2:11:00:f7:f1:72:b9:28:83:9e:dc:a8:6d:
         2e:ab:8a:f5:73:6c:16:f5:a9:66:46:c4:8f:16:23:33:c4:9f:
         af:76:a7:a0:58:68:68:61:d1:61:51:99:24:75:79:b3:20:6d:
         0c:59:f9:91:40:02:e5:61:0a:ba:c2:33:ba:f8:ef:a1:56:46:
         44:47:fd:0b:de:7d:71:da:ea:23:d2:dd:a1:d2:3e:ef:5e:1c:
         cd:d7:f3:80:2b:58:66:86:a9:54:95:b5:d8:1a:00:4e:ce:a9:
         6a:ea:6b:b1:5b:fc:7d:92:46:cf:4c:bb:99:66:6f:8d:62:1d:
         0d:ce:8e:15:d0:ed:94:12:fa:ef:68:f5:9e:3a:7b:5a:bd:51:
         13:7a:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:15:48 2025 by rpki-client