Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File:                     8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier:          9kAUDZYQ7IezqeNu2UqpKErJ+LcHRfKHGfjyv+mzS50=
Subject key identifier:   BD:6C:5D:48:01:5E:94:89:46:83:98:C6:EA:58:AE:58:4B:E5:7C:89
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer:       /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial:       0197B77C78012A380206A52FF73E8AC2F38D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 17:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:17 +0000
Files and hashes:         1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: DotI1EQm3zwOscaDZtmNtubzR2BwOP1bW2XZuwiWMYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:78:01:2a:38:02:06:a5:2f:f7:3e:8a:c2:f3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
        Validity
            Not Before: Jun 28 17:01:17 2025 GMT
            Not After : Jun 29 17:01:17 2025 GMT
        Subject: CN=bd6c5d48015e9489468398c6ea58ae584be57c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:7a:96:1d:c8:89:11:46:33:ad:3d:a6:52:
                    5d:9f:59:ef:7a:b9:17:c3:32:9c:e7:35:38:f8:3a:
                    22:3f:7c:8c:88:a3:94:42:24:e0:d7:f1:20:cc:7b:
                    b7:e5:6e:47:82:e9:a7:c5:1e:2d:d9:ef:88:42:51:
                    b8:80:58:79:f8:c0:89:2f:dd:92:94:b2:d6:2c:63:
                    47:d4:7b:f8:7b:d4:d6:62:d2:bc:04:d5:09:0c:5a:
                    87:fd:c2:07:ee:f2:8b:4b:ed:f2:30:53:d2:01:35:
                    06:a8:5b:1c:45:05:1e:ac:f5:7b:7d:44:72:66:c1:
                    6d:23:0f:ab:3d:13:8c:99:4a:95:f0:bc:32:49:30:
                    f7:20:4b:e5:e8:56:27:a4:fb:30:e4:fb:39:4e:b7:
                    35:2b:7b:db:7b:a2:db:0b:75:a6:3a:8c:d3:7e:f2:
                    35:6d:74:35:dc:5a:5e:d8:3b:8e:05:ad:c8:fd:f9:
                    8d:c5:c4:2d:bf:79:25:f2:cb:8a:bf:e6:5c:0d:0b:
                    60:16:87:9e:5f:99:b7:28:52:b2:ff:9e:46:46:64:
                    8d:d5:c7:e6:72:81:e5:87:4e:49:08:f2:2e:15:bb:
                    db:f7:bd:da:78:b8:32:2c:a8:9e:3b:c4:25:de:bd:
                    c4:7b:1f:4c:b2:0c:f7:2e:36:68:bb:9b:ed:3d:a3:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6C:5D:48:01:5E:94:89:46:83:98:C6:EA:58:AE:58:4B:E5:7C:89
            X509v3 Authority Key Identifier:
                keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:dd:0c:4b:5d:50:8e:d5:ed:f8:21:36:5f:2f:19:ce:91:c4:
         48:a7:5d:49:89:4c:2a:54:e0:25:c4:7b:07:6d:07:4f:a1:7f:
         63:9b:2a:31:15:28:fc:1f:90:f8:5f:55:bb:e8:ab:a0:a3:37:
         d4:8c:83:17:43:71:ae:a4:6a:c8:11:1c:81:70:f0:cd:64:8b:
         6e:dc:b4:65:4c:92:a7:52:03:1d:97:d7:d3:80:67:a9:49:7f:
         cd:e1:6b:d1:83:13:9c:58:4d:bc:1e:19:8e:d7:26:b3:3e:3b:
         a4:7a:37:df:0a:46:6e:88:fe:bd:6a:73:2d:1f:bc:81:8e:8b:
         50:d6:5e:d0:0c:45:77:00:1e:33:67:93:e6:15:da:d1:77:68:
         af:19:a0:99:1e:0f:17:d8:e8:c4:09:29:2f:7c:f7:fe:b9:5d:
         79:cc:84:f7:dd:d7:41:01:ab:59:30:6b:37:ff:d3:f9:95:b2:
         2d:fb:91:b2:5a:5b:b5:ce:be:69:8d:a9:79:ba:44:31:76:51:
         db:0d:ec:41:49:7e:09:aa:64:9d:ba:25:f2:64:f8:b5:b6:9d:
         d2:86:0a:0f:d2:65:41:b8:6f:25:ee:5c:ac:a5:15:97:a8:85:
         a9:d0:e1:d7:3d:73:2e:7b:e8:f1:1d:03:7a:12:61:b6:fa:3f:
         ec:9a:1d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fHgBKjgCBqUv9z6KwvONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOTJjZTRkNjg4NTM0NTQ4NGU5OWE3N2Q3NjE2NmZjNzIw
MjIwMzMwHhcNMjUwNjI4MTcwMTE3WhcNMjUwNjI5MTcwMTE3WjAzMTEwLwYDVQQD
EyhiZDZjNWQ0ODAxNWU5NDg5NDY4Mzk4YzZlYTU4YWU1ODRiZTU3Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh96lh3IiRFGM609plJdn1nverkX
wzKc5zU4+DoiP3yMiKOUQiTg1/EgzHu35W5HgumnxR4t2e+IQlG4gFh5+MCJL92S
lLLWLGNH1Hv4e9TWYtK8BNUJDFqH/cIH7vKLS+3yMFPSATUGqFscRQUerPV7fURy
ZsFtIw+rPROMmUqV8LwySTD3IEvl6FYnpPsw5Ps5Trc1K3vbe6LbC3WmOozTfvI1
bXQ13Fpe2DuOBa3I/fmNxcQtv3kl8suKv+ZcDQtgFoeeX5m3KFKy/55GRmSN1cfm
coHlh05JCPIuFbvb973aeLgyLKieO8Ql3r3Eex9Msgz3LjZou5vtPaPBOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1sXUgBXpSJRoOYxupYrlhL5XyJMB8GA1UdIwQY
MBaAFPCSzk1ohTRUhOmad9dhZvxyAiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMt
MDMxNTk2MTEyNDgwLzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMtMDMxNTk2MTEyNDgw
LzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnt0MS11Q
jtXt+CE2Xy8ZzpHESKddSYlMKlTgJcR7B20HT6F/Y5sqMRUo/B+Q+F9Vu+iroKM3
1IyDF0NxrqRqyBEcgXDwzWSLbty0ZUySp1IDHZfX04BnqUl/zeFr0YMTnFhNvB4Z
jtcmsz47pHo33wpGboj+vWpzLR+8gY6LUNZe0AxFdwAeM2eT5hXa0XdorxmgmR4P
F9joxAkpL3z3/rldecyE993XQQGrWTBrN//T+ZWyLfuRslpbtc6+aY2pebpEMXZR
2w3sQUl+Capknbol8mT4tbad0oYKD9JlQbhvJe5crKUVl6iFqdDh1z1zLnvo8R0D
ehJhtvo/7JodbA==
-----END CERTIFICATE-----