Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
File:                     8UHWZGmLcP-yom9oS0fetsjVmlM.mft (raw, json)
Hash identifier:          //ZHfA6T7mem5Wi8XpSDrOY2CcKVPDztsydxMY8hazI=
Subject key identifier:   9C:55:BC:44:34:8D:38:4C:BA:6A:18:DF:F1:D5:DD:AD:DC:06:02:BC
Authority key identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53
Certificate issuer:       /CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
Certificate serial:       0197B70F17B7B0084D2BCD87F33F6B90A0EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
Manifest number:          0FED
Signing time:             Sat 28 Jun 2025 15:01:48 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:48 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:48 +0000
Files and hashes:         1: 4T4WQHYVEwM6aHV5StYkGf2jN5Y.roa (hash: KlTVObGFhQ/EitqWP5C6TUwR0SNqxo8YoBWHXEsTCiE=)
                          2: 8UHWZGmLcP-yom9oS0fetsjVmlM.crl (hash: x4G/AgZ9oIDAh8XSibWWBEUcfJh1b6f4m046Zj41Vdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:17:b7:b0:08:4d:2b:cd:87:f3:3f:6b:90:a0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
        Validity
            Not Before: Jun 28 15:01:48 2025 GMT
            Not After : Jun 29 15:01:48 2025 GMT
        Subject: CN=9c55bc44348d384cba6a18dff1d5ddaddc0602bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:a7:6a:65:dd:d0:27:1a:68:6f:80:2e:23:
                    56:ac:97:cc:0d:83:c1:ef:42:0d:53:e5:26:37:ca:
                    95:79:76:92:71:42:5c:50:48:fe:04:df:dc:84:22:
                    41:40:91:d8:af:5d:48:0d:5d:67:75:26:31:34:0a:
                    e7:a8:4c:d3:45:da:af:2c:a7:3e:a5:69:a8:a8:88:
                    56:d9:0f:87:3e:fc:6a:b2:71:1a:08:74:f6:4f:4f:
                    3d:3d:06:94:07:7f:38:96:73:36:0e:be:79:fb:f5:
                    93:ac:21:84:71:ba:f4:af:b5:5f:1b:54:2a:5c:30:
                    0b:ac:6c:a6:c3:0f:90:37:71:97:87:4c:cd:47:09:
                    36:ed:b7:87:e3:d8:e5:7b:d1:bb:a6:25:cf:99:a9:
                    4c:e3:22:09:29:5d:d2:31:87:ac:8c:4d:2b:0e:cb:
                    f3:66:94:e6:84:6d:c0:1a:de:d5:e2:1f:34:7b:13:
                    2d:21:7b:b6:01:86:42:57:f5:d7:c6:5e:cb:3b:c0:
                    50:32:2c:c4:8e:57:35:fd:31:ca:c2:3b:1e:39:d1:
                    0d:07:7d:43:48:37:8a:9e:05:75:a2:8b:ed:be:1f:
                    cf:a1:1b:1a:aa:cb:a8:b7:3d:39:25:a7:64:09:4b:
                    ee:e9:e2:96:ba:fc:1d:d4:93:33:5f:6e:d7:75:64:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:55:BC:44:34:8D:38:4C:BA:6A:18:DF:F1:D5:DD:AD:DC:06:02:BC
            X509v3 Authority Key Identifier:
                keyid:F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:65:02:a4:28:12:09:c1:cf:7b:e1:9c:9f:b9:55:14:de:51:
         62:20:6c:c1:06:c3:1c:45:66:b0:3c:89:ee:19:e4:3b:82:ff:
         a0:bc:61:df:71:ea:58:fd:6e:9b:39:b9:87:20:5d:4c:1a:6f:
         f2:ad:58:89:cc:54:6d:4d:43:c0:ff:bd:ea:30:ed:06:9a:5f:
         37:53:9e:c1:f6:f9:52:04:14:64:2f:f3:53:13:70:ec:19:58:
         84:3e:17:a9:bd:98:1d:a9:ce:8f:5c:87:72:2e:a5:2d:75:dc:
         4d:43:5e:6e:f3:c2:df:24:5f:7b:c6:98:80:fd:74:d0:88:48:
         af:df:09:fe:eb:a1:7d:3f:36:1a:11:92:48:bd:33:7d:9e:c8:
         d5:7e:75:78:ec:dc:16:fe:cb:a1:09:37:89:c5:48:51:89:e4:
         8b:50:58:df:d4:54:a6:17:31:2c:0c:bb:dd:35:fb:ac:a2:be:
         7f:b2:63:2e:55:61:6f:63:88:b2:66:dd:11:a6:9f:d8:96:85:
         fe:77:c1:e7:e2:55:b8:8d:58:5f:9b:b9:c8:55:d3:94:e0:b7:
         76:58:dc:a1:f8:25:56:65:25:78:73:1e:2e:c8:be:6a:71:5e:
         5e:f3:13:49:d0:31:b6:93:e9:41:9a:e3:6a:92:b2:7b:32:94:
         8b:96:24:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:34 2025 by rpki-client