Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
File:                     t8VYxCxDrVlAbqRGye7-1CpJHuw.mft (raw, json)
Hash identifier:          wPVgcxkyDzDLjxlBrrxe/Rvhp39NvJrr8hlzc3/q6I4=
Subject key identifier:   AA:39:73:E2:6E:6E:C4:7E:02:62:D9:44:62:49:C2:4C:8B:D5:56:C9
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Certificate issuer:       /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial:       0196D7E546CF62AEAC34BD707569E494A159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
Manifest number:          0BEE
Signing time:             Fri 16 May 2025 07:00:49 +0000
Manifest this update:     Fri 16 May 2025 07:00:49 +0000
Manifest next update:     Sat 17 May 2025 07:00:49 +0000
Files and hashes:         1: 9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa (hash: VGm9skjMPVUUg6edMcPusOOmF7cXf1kchI2oKrFFOoI=)
                          2: t8VYxCxDrVlAbqRGye7-1CpJHuw.crl (hash: PyKMmZ0M//uTlXrbEVbcxLbX3upqb5oHk2KxUSRDMR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d7:e5:46:cf:62:ae:ac:34:bd:70:75:69:e4:94:a1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
        Validity
            Not Before: May 16 07:00:49 2025 GMT
            Not After : May 17 07:00:49 2025 GMT
        Subject: CN=aa3973e26e6ec47e0262d9446249c24c8bd556c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:80:b3:54:73:ed:b8:e9:58:f1:21:1f:ce:be:
                    95:f7:81:1e:9d:38:23:1d:66:77:2f:c3:67:48:91:
                    b2:c2:85:c6:5f:00:64:31:cd:d6:43:75:2c:0d:88:
                    b1:70:fe:cb:c7:ea:c1:8b:1c:fa:38:58:1a:f1:c7:
                    af:89:52:d9:a8:a3:54:53:b2:04:60:e1:cd:99:99:
                    13:23:49:c5:5c:4d:bb:bc:b9:9a:1c:dc:a1:2a:76:
                    bd:8f:da:81:11:78:8f:fb:ef:8b:75:e8:56:e0:62:
                    32:79:65:9f:41:72:fd:d1:4a:fd:a8:83:84:2f:cb:
                    66:f0:ab:21:f4:66:ed:02:99:87:ed:48:54:cd:02:
                    0d:10:6f:bd:b5:6b:64:3e:e6:cb:0d:c3:c2:c1:c6:
                    dd:01:f6:f2:b3:d4:66:ed:c4:9b:ce:aa:74:07:30:
                    82:00:df:76:12:18:f9:ce:11:71:09:23:83:47:ca:
                    49:31:db:21:97:5a:9c:d6:04:9c:07:94:aa:27:46:
                    cf:b1:8c:bd:63:55:49:a3:09:85:7d:f5:40:87:a3:
                    f9:77:ed:8c:7c:1a:cd:fb:46:ae:fb:67:aa:18:11:
                    67:22:e5:9a:d8:bc:14:f0:fa:fe:fd:24:5e:8f:db:
                    96:1d:63:fa:02:55:3e:f4:28:de:91:df:89:b5:9c:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:39:73:E2:6E:6E:C4:7E:02:62:D9:44:62:49:C2:4C:8B:D5:56:C9
            X509v3 Authority Key Identifier:
                keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:54:ed:23:c7:b1:f7:26:3c:c8:d6:0d:a5:26:99:a8:2c:59:
         23:a3:2d:4f:99:6f:4a:3f:a6:52:1c:c7:23:3d:a9:d7:4a:af:
         24:e9:c5:f4:1d:d5:9c:12:f4:5b:3c:30:e9:2d:51:f3:a9:4e:
         00:01:57:7f:eb:4a:b3:42:67:d3:b9:65:15:6c:f2:b5:24:aa:
         52:46:22:84:e5:64:f7:3c:e1:17:d2:97:fc:f0:71:52:2a:5d:
         48:e3:5d:99:a8:a4:25:fd:ed:78:a6:73:12:ec:4b:52:26:55:
         15:7f:5e:25:96:25:9d:c1:66:03:56:06:49:61:34:44:69:7c:
         46:eb:c0:eb:43:e5:7b:d1:56:77:e9:dd:55:2c:6a:52:50:c3:
         b3:8f:fd:33:c3:10:7a:89:b7:99:f0:e2:d9:87:19:4e:78:31:
         88:a4:d0:03:2b:94:49:07:c7:6c:ad:46:d1:1a:07:dc:ea:cf:
         37:8d:a7:c1:46:f9:90:11:2b:90:cb:6a:54:ad:0d:0e:aa:31:
         8f:de:41:92:12:5a:7b:b4:fd:72:b4:61:74:98:b8:a9:8f:33:
         2d:b4:6e:95:1a:03:c4:6c:96:e3:c7:77:fc:80:d2:35:38:1f:
         b2:27:6b:c6:9a:7f:3d:c8:95:38:ec:00:3d:f2:ea:97:ff:2c:
         62:be:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:14:35 2025 by rpki-client