Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
File:                     8UHWZGmLcP-yom9oS0fetsjVmlM.mft (raw, json)
Hash identifier:          7J4Jra9a0G238DzsAa2BSsgKI2KoIazR930cdiVv3ZM=
Subject key identifier:   FA:8A:CA:EF:E3:D5:A1:AC:23:97:0F:07:9B:31:B4:E6:4F:F4:F3:2A
Authority key identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53
Certificate issuer:       /CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
Certificate serial:       01969F08AE7FA04EFC13CDF2EE57D8A69B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
Manifest number:          0F5C
Signing time:             Mon 05 May 2025 06:01:08 +0000
Manifest this update:     Mon 05 May 2025 06:01:08 +0000
Manifest next update:     Tue 06 May 2025 06:01:08 +0000
Files and hashes:         1: 4T4WQHYVEwM6aHV5StYkGf2jN5Y.roa (hash: KlTVObGFhQ/EitqWP5C6TUwR0SNqxo8YoBWHXEsTCiE=)
                          2: 8UHWZGmLcP-yom9oS0fetsjVmlM.crl (hash: qN88WXlE8Pe/qaL4UUV1TweiNsrNcpVlhrH6lAg7MRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:08:ae:7f:a0:4e:fc:13:cd:f2:ee:57:d8:a6:9b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
        Validity
            Not Before: May  5 06:01:08 2025 GMT
            Not After : May  6 06:01:08 2025 GMT
        Subject: CN=fa8acaefe3d5a1ac23970f079b31b4e64ff4f32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:a5:d7:0d:f0:dc:f2:37:e4:10:b8:70:da:
                    94:c7:75:9e:53:84:26:78:8f:fd:79:ae:f6:74:81:
                    f4:34:ca:c3:f8:a6:08:4d:9a:cd:72:f7:25:9f:79:
                    9d:c6:a9:3f:9e:49:fb:31:e5:51:1c:46:d7:20:a8:
                    9e:58:40:1e:6f:04:80:c0:10:af:25:37:7d:a2:e0:
                    ec:7a:ba:40:3c:70:e4:43:1c:fc:a4:88:27:33:ab:
                    8f:ef:b8:8f:0a:8e:61:8c:07:02:59:87:81:2b:0d:
                    83:1c:eb:74:b6:d7:54:39:b5:ab:c9:d8:e7:5f:28:
                    58:6a:28:0b:19:36:d3:b1:3f:16:5e:bb:97:a4:25:
                    3b:4b:5a:70:19:08:c6:90:e7:b3:48:ba:45:ed:a6:
                    db:74:28:51:23:77:c3:d0:72:60:d2:24:06:57:aa:
                    37:a0:5f:83:ec:e0:31:e5:7b:19:3d:9a:9f:69:fe:
                    9b:3e:fb:21:c1:5c:65:07:71:37:c1:31:a9:0b:64:
                    f4:bb:4d:f2:5a:58:8f:98:2f:2e:a5:5b:e7:26:94:
                    6e:4d:f6:d4:d3:d8:6c:a9:a3:d6:44:69:0d:7f:9e:
                    d2:49:e3:c8:25:2d:79:fe:1b:f3:1e:ec:c9:fb:b5:
                    c9:8c:da:e1:58:53:ab:de:4b:1f:5c:ae:e7:1b:4f:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8A:CA:EF:E3:D5:A1:AC:23:97:0F:07:9B:31:B4:E6:4F:F4:F3:2A
            X509v3 Authority Key Identifier:
                keyid:F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bf:65:ab:58:f1:f7:86:a0:d0:f4:3d:8b:33:4a:91:69:72:
         5c:fc:9e:27:c6:5a:bb:68:ab:57:51:9c:84:26:14:8d:f1:c7:
         53:57:b4:c7:0f:de:e0:94:8b:66:c5:fa:cd:e9:b0:bf:de:e3:
         f6:b9:89:27:32:b5:c1:26:3a:24:75:e1:74:bd:82:94:17:cf:
         73:c3:a4:e6:9c:db:e7:7b:9d:3f:3c:10:56:e1:d5:53:16:bd:
         e0:70:e6:00:3a:bd:00:b8:d8:90:85:4e:9a:24:39:24:d8:d3:
         88:e9:50:4d:01:ad:43:fe:e3:4a:2c:19:c2:93:a5:7e:85:eb:
         34:15:ec:08:6c:06:40:58:e2:c7:0b:32:66:0b:3a:f8:fc:53:
         45:36:ba:9a:08:b4:6d:c1:34:30:e6:da:76:08:e6:06:7e:80:
         b8:f2:8a:9f:9d:6f:44:e3:28:51:4b:7b:07:cd:d2:52:44:d3:
         c8:76:23:7e:27:22:45:08:bb:de:7a:c1:3e:c1:2d:d8:24:03:
         1d:e8:53:05:6c:85:46:75:28:36:58:7b:aa:ee:89:bc:70:16:
         95:f3:7e:3d:58:83:f0:c5:fe:ff:2c:70:6b:3c:58:5e:84:fb:
         5f:27:34:25:f8:0b:c6:d9:8a:65:c5:52:71:9b:36:94:0d:2e:
         e0:83:e6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:25:58 2025 by rpki-client