Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File:                     8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier:          Q409+irHkEt7lJjdT3cltG8Zat8F1S8eK9Ln5rprnzY=
Subject key identifier:   31:48:5B:30:B4:29:DB:C0:13:1B:65:A2:9F:34:F5:22:DC:B8:1C:E5
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer:       /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial:       0196BC6E6CD1B5F5D85ABA052FA306F4DC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number:          038F
Signing time:             Sat 10 May 2025 23:01:15 +0000
Manifest this update:     Sat 10 May 2025 23:01:15 +0000
Manifest next update:     Sun 11 May 2025 23:01:15 +0000
Files and hashes:         1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: yGmJ58It7cA23PsazXHIckQpyNtMfg7yACcqezEWhNU=)
                          2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6e:6c:d1:b5:f5:d8:5a:ba:05:2f:a3:06:f4:dc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
        Validity
            Not Before: May 10 23:01:15 2025 GMT
            Not After : May 11 23:01:15 2025 GMT
        Subject: CN=31485b30b429dbc0131b65a29f34f522dcb81ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:fa:16:dc:45:7c:f2:b7:dc:da:6c:ea:35:
                    21:23:cc:fc:91:58:8c:af:19:e8:57:05:d9:0c:9e:
                    7d:fa:ec:23:6c:8f:82:8b:04:f9:5f:bf:e9:ef:3f:
                    dc:5e:f2:47:d7:19:6a:d6:f4:00:6d:0a:bb:c1:bc:
                    93:0a:ac:a8:bb:66:39:1f:c5:ec:02:90:24:be:f1:
                    4d:cc:b3:7f:4f:c0:5f:7f:5b:47:ab:ca:3e:84:f4:
                    c4:ee:4c:3e:64:0d:52:43:54:7a:fa:14:c0:53:47:
                    a8:b2:d4:c8:ca:49:cd:51:26:6a:37:6c:b2:02:8c:
                    0f:78:88:bb:26:df:ce:fd:24:8f:b8:fa:4f:41:bf:
                    9c:59:4b:4f:22:d6:48:e5:63:11:e1:bd:b8:95:e6:
                    90:a1:ed:01:75:87:ea:2e:8c:e5:08:e5:98:7d:c0:
                    dc:4e:df:de:4c:05:74:54:00:6a:4b:c5:f7:76:d8:
                    56:c3:cc:b6:b2:28:fa:51:41:4f:04:f7:55:35:64:
                    65:31:66:a2:e3:ed:bb:1f:ef:df:14:d1:2f:58:7f:
                    65:43:97:4a:e4:1b:e1:7e:8f:5c:67:4b:ea:5e:95:
                    fe:82:4e:c3:66:02:a8:6d:03:b2:21:cf:79:38:f2:
                    38:7e:c8:4e:6e:0f:43:07:05:40:28:6f:a5:d1:27:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:48:5B:30:B4:29:DB:C0:13:1B:65:A2:9F:34:F5:22:DC:B8:1C:E5
            X509v3 Authority Key Identifier:
                keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b0:6f:7b:15:4a:55:a8:eb:12:b5:27:47:c9:1d:53:a5:7f:
         ab:dc:23:b7:04:86:49:17:16:d9:a1:3d:95:8f:af:5d:28:75:
         fe:65:f9:89:29:11:bb:a3:d5:81:d3:ee:b2:f0:fc:3b:5e:15:
         cb:bd:61:fa:d4:c8:b5:8f:28:c6:92:bd:a9:86:f0:bd:01:06:
         3a:9c:20:05:73:09:a3:1d:94:49:79:e1:d7:92:ad:bd:11:92:
         3d:8c:00:0f:18:b5:62:d3:68:60:39:e9:2b:44:17:1c:92:85:
         3a:40:9c:fc:f2:30:d3:18:8f:7c:b8:3a:2f:cd:3e:9f:6c:c1:
         d5:b7:85:f4:f8:9a:ad:ca:94:f4:9f:a9:5f:b8:a5:56:3a:d1:
         13:05:2a:10:a8:47:f5:a3:fa:af:4b:91:c8:6c:ba:3f:9a:80:
         58:79:60:fe:ab:76:86:a6:d1:34:6a:1a:de:b2:22:15:8f:dd:
         88:92:20:a3:08:4c:fd:f1:57:39:fa:98:ce:90:2c:00:11:35:
         88:d2:74:c5:4e:a3:11:75:e1:11:9b:3b:12:b9:88:30:b6:d2:
         55:23:e3:44:bc:e7:4e:05:84:2f:ea:3d:70:16:bc:b0:f7:ec:
         29:e7:49:d1:5b:b8:c4:af:e4:ce:92:85:f2:10:22:b0:72:32:
         22:a9:a8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:34:54 2025 by rpki-client