Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
File:                     8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json)
Hash identifier:          8Bhu7d16fds8r+esTPasgTDyB6oSzQaEetoSDHXIVaQ=
Subject key identifier:   03:D9:46:AA:CA:F6:54:66:F5:62:71:DB:B7:36:28:95:F5:F9:E8:2E
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Certificate issuer:       /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial:       0197B77C9B892A992163D4AD15DBF2D8C837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
Manifest number:          0F20
Signing time:             Sat 28 Jun 2025 17:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:26 +0000
Files and hashes:         1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: lKUjO9sk+jCYaVPcOkdviiDVI3/GXAHbaYD9KwHuVVs=)
                          2: j3qkWwGkWnrxhLgyGwrcFzXJWM4.roa (hash: tCyqkdV84n1oHfUiO9Wnf9/3f5vZVsXyCuIYwhEsEzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:9b:89:2a:99:21:63:d4:ad:15:db:f2:d8:c8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
        Validity
            Not Before: Jun 28 17:01:26 2025 GMT
            Not After : Jun 29 17:01:26 2025 GMT
        Subject: CN=03d946aacaf65466f56271dbb7362895f5f9e82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:a0:8b:fb:37:63:29:61:b6:e5:ba:15:eb:
                    38:14:21:a3:75:6a:c5:9d:fc:15:8c:f8:c5:5c:be:
                    1e:f8:08:36:83:d6:b5:cb:50:a9:f4:a3:74:56:24:
                    d3:46:d6:d4:9a:8a:fd:c2:50:29:c8:84:63:ca:53:
                    d9:8f:a4:c8:24:a4:6e:3c:7b:01:f0:04:d3:a3:2a:
                    88:67:f7:12:d4:fc:b4:bd:2e:4f:41:ba:f5:a4:fc:
                    58:4c:ce:16:42:a9:07:5b:a6:4f:72:03:52:9b:06:
                    99:d2:1c:f7:61:bb:88:2e:18:ae:e6:28:8e:60:c3:
                    5a:87:f3:24:32:c6:85:d1:a8:e0:f2:fd:c8:87:1f:
                    db:31:52:20:59:6c:b4:a1:03:2d:c1:77:86:05:63:
                    63:86:84:cd:2f:56:97:f8:ca:47:90:20:15:f5:f4:
                    de:5d:b8:04:eb:28:8d:29:4a:c4:13:47:d0:54:22:
                    0f:ed:49:b1:dc:d6:18:1f:9b:7f:ab:81:29:1f:d4:
                    bc:f2:f2:97:58:dc:88:3d:f9:a8:b2:64:e4:3c:bf:
                    ad:10:b3:4d:1d:c7:87:f9:a3:ec:26:1b:8b:e4:87:
                    ea:4d:b0:70:56:7d:ad:1f:97:de:d3:f1:7f:5b:00:
                    18:2a:53:18:93:ca:91:12:96:51:3a:f6:ac:a0:a9:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D9:46:AA:CA:F6:54:66:F5:62:71:DB:B7:36:28:95:F5:F9:E8:2E
            X509v3 Authority Key Identifier:
                keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:aa:16:7a:fa:0b:d6:b0:7b:90:b0:51:f6:a3:45:50:ae:
         d4:91:5d:97:db:11:b2:3d:09:bb:3c:32:14:f8:49:50:5d:85:
         b6:b1:46:14:82:e4:c6:ea:c4:96:a0:23:92:79:9c:44:9c:97:
         3c:e7:ac:d5:9c:39:30:67:c2:95:a0:ab:75:4c:51:1d:9c:62:
         e9:a2:1e:cd:17:fe:8b:38:4b:80:7b:f8:c3:af:29:ad:35:35:
         b0:8a:b9:70:8f:a2:c2:1a:3e:f8:a4:80:92:74:5a:e0:b7:9a:
         9e:9d:2b:f4:a9:f4:cd:b8:34:4b:c1:8f:94:76:57:d6:26:bc:
         7d:9f:64:08:ce:a1:30:f5:e2:2e:6e:15:29:81:c1:08:9b:12:
         cb:8b:c5:c1:7d:00:c9:9c:9a:73:90:2a:cb:55:a7:8c:cd:db:
         54:3a:e6:36:91:78:e6:72:70:fd:8c:74:b1:e3:f4:6d:51:de:
         74:86:d2:f6:62:73:30:f7:62:c1:f0:af:24:e8:89:0a:af:cd:
         71:67:1b:ea:65:40:dd:51:60:15:5e:8e:f9:84:a8:31:37:42:
         95:7b:14:0f:b2:d8:15:46:43:ac:c0:b6:1e:5d:e5:e7:1b:53:
         8b:9a:33:f6:9a:bd:b8:70:b7:78:ac:ea:92:65:f7:d9:f9:7f:
         69:3d:81:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:17 2025 by rpki-client