Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File:                     0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier:          DjlMb1vPSrBRTs6wS3Jz97SCglE2Y3HZIkL1tKhvpFs=
Subject key identifier:   22:45:36:B6:7F:57:CE:6B:98:BD:0D:57:9E:58:79:6E:14:2A:A6:05
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer:       /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial:       0197789C9A1863CF5A4F0D31967A9CC6D75D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number:          0E17
Signing time:             Mon 16 Jun 2025 12:00:18 +0000
Manifest this update:     Mon 16 Jun 2025 12:00:18 +0000
Manifest next update:     Tue 17 Jun 2025 12:00:18 +0000
Files and hashes:         1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: HYzKYM5zeROx0bqWxvpOaChxgsMPQFIQJcZexcHrLuw=)
                          2: tWrNNpvQLnIYXShcXDmxPXzlROA.roa (hash: rl7K0aTuna5/yne12oTJUAQ6OhB1j3YlRj4Y9PjqK84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:9c:9a:18:63:cf:5a:4f:0d:31:96:7a:9c:c6:d7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
        Validity
            Not Before: Jun 16 12:00:18 2025 GMT
            Not After : Jun 17 12:00:18 2025 GMT
        Subject: CN=224536b67f57ce6b98bd0d579e58796e142aa605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:f2:93:68:9b:dd:73:33:78:a0:07:95:ee:
                    bc:9b:4f:68:f5:b8:44:e7:54:b9:d6:24:e4:29:cb:
                    39:9c:e5:e8:66:2a:ac:36:e6:56:0f:a2:cb:fe:b3:
                    21:db:0d:3b:e9:d4:d5:9d:9d:c2:5a:69:6e:9d:47:
                    81:86:03:28:0e:01:77:60:33:d8:ac:23:97:fe:f3:
                    f0:7a:b0:bf:71:93:7c:f2:85:08:60:e9:c0:67:b6:
                    ca:df:e3:fa:5c:bb:6d:46:dc:40:ca:2e:e5:68:0e:
                    96:02:c5:18:3a:34:f5:57:11:aa:da:b3:82:4b:17:
                    3d:6a:04:33:4c:ea:a0:2e:ac:15:08:6a:a4:66:42:
                    e9:c0:b3:e1:72:51:4b:4b:83:05:30:a5:43:d3:e0:
                    28:37:47:2a:dc:34:0c:02:4d:30:96:b3:bc:ea:e0:
                    2d:f4:4d:30:b9:8d:e2:52:04:7c:39:0c:28:6d:d3:
                    dc:74:31:c8:14:df:8a:5f:89:bb:45:ad:ce:ec:d8:
                    8a:d7:1a:61:6c:57:a6:13:df:11:ed:93:eb:10:45:
                    1e:2a:e8:be:fe:02:44:f4:52:ac:b1:09:24:8b:ca:
                    2f:11:53:81:ad:9a:74:70:a4:49:5e:1e:66:b5:0f:
                    6d:81:e4:ac:64:9c:41:17:2d:29:b1:76:f4:30:60:
                    c4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:45:36:B6:7F:57:CE:6B:98:BD:0D:57:9E:58:79:6E:14:2A:A6:05
            X509v3 Authority Key Identifier:
                keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8a:fb:e5:50:aa:59:8c:19:2e:30:d5:8a:0a:38:ce:50:d1:
         f8:ca:df:0f:a4:47:f1:85:bc:9e:50:cd:d3:64:8d:ba:e7:fb:
         4d:e3:b0:ad:25:a7:28:69:42:cc:13:32:a0:c0:45:b5:d7:48:
         a7:89:0f:08:19:ce:85:fb:93:b2:6b:89:f8:29:b0:85:b4:ef:
         57:a8:45:bd:e5:cd:60:e2:cb:53:9a:77:7d:b5:80:cf:80:36:
         39:be:a6:16:7e:0e:68:b8:0b:56:ce:a4:73:4c:d2:cf:db:62:
         3e:6d:56:35:b2:de:46:b8:d3:1a:7e:3c:ed:07:51:d2:50:52:
         a5:f4:90:02:9d:56:23:8d:25:af:51:3c:0e:5d:f8:11:18:8d:
         f8:50:54:ed:7b:0b:45:36:2d:4d:d1:0e:27:0b:d3:1a:e0:c1:
         29:5a:e1:49:cb:8e:40:dd:f5:84:8c:55:11:cd:fd:37:a0:5f:
         8c:01:3f:a4:1c:53:ea:21:9d:7d:10:e4:64:3c:c8:a5:07:c5:
         e3:06:81:98:f1:ef:53:95:12:8b:c6:1e:8c:31:49:5d:4d:4e:
         01:2f:7b:3e:25:ef:8f:d5:f5:72:03:c3:c1:87:41:d9:1a:08:
         65:b3:41:06:73:1a:99:95:1b:3a:09:a9:d0:be:5b:39:10:81:
         70:1e:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:05:24 2025 by rpki-client