Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File:                     sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier:          cBCP/eWGW5/eMELXCU3UR/oQfYqK0y17+YztSWpNzyM=
Subject key identifier:   A9:C7:AC:AB:FD:51:05:41:24:96:FA:32:8D:CC:89:81:D9:DA:35:23
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer:       /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial:       01976884F649684950A7F4F73541CEAC1CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number:          08AC
Signing time:             Fri 13 Jun 2025 09:00:33 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:33 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:33 +0000
Files and hashes:         1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: HL463PYBGL4z+pqBvBJGUYDMyiDW+dU0yHpGi891IMk=)
                          2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:f6:49:68:49:50:a7:f4:f7:35:41:ce:ac:1c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
        Validity
            Not Before: Jun 13 09:00:33 2025 GMT
            Not After : Jun 14 09:00:33 2025 GMT
        Subject: CN=a9c7acabfd5105412496fa328dcc8981d9da3523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:92:43:88:2f:22:f2:c8:e7:16:1a:53:10:
                    35:d0:17:98:6f:f0:be:a9:dd:ca:74:42:8f:2b:66:
                    60:5e:cb:84:9e:b4:2e:a6:10:be:f8:78:e9:2a:5a:
                    d7:04:6b:61:6e:04:94:26:87:d6:0b:35:94:f3:c7:
                    2f:1b:47:b7:21:22:60:49:20:58:ec:33:0b:33:05:
                    8f:08:1d:24:de:a1:20:b2:2e:a6:5b:ce:29:44:8c:
                    1a:fd:c1:50:65:bf:8a:4f:24:18:f5:98:ac:79:6d:
                    9c:63:f8:b4:00:40:cf:19:7e:38:49:29:fb:dd:32:
                    70:81:c7:f6:20:52:a3:dd:3b:f8:57:cf:88:99:f3:
                    3f:19:d5:f2:8a:8f:53:6e:1f:64:e5:ac:ca:fc:f4:
                    b7:ce:39:17:64:b8:1b:3d:e7:b9:c2:8b:3d:7b:f3:
                    83:15:a8:34:34:26:f0:0d:16:45:6e:59:07:b7:fa:
                    38:12:5f:44:b8:24:3d:8e:93:73:85:1c:10:4e:98:
                    93:6c:4e:61:f4:df:db:17:7e:9a:22:dd:1f:d1:d2:
                    47:03:00:d7:51:a8:81:16:4e:27:6d:ba:2d:da:27:
                    81:4d:a2:25:e0:f8:d5:71:fc:59:c1:a3:7b:0f:da:
                    e9:a5:4d:f1:88:ac:e9:bc:29:50:69:1b:50:c6:fd:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C7:AC:AB:FD:51:05:41:24:96:FA:32:8D:CC:89:81:D9:DA:35:23
            X509v3 Authority Key Identifier:
                keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:be:f7:16:d5:70:5c:2f:43:8a:52:a7:e5:76:24:41:22:53:
         ad:55:f7:8b:cf:9a:80:d1:58:2c:4a:d0:06:30:f5:c7:30:d2:
         13:b6:e1:e9:3d:14:c0:15:fd:e1:55:01:41:37:ce:ba:f7:9d:
         56:0d:25:26:6a:40:31:5e:76:d4:57:a9:3d:dd:2b:d4:c5:cd:
         82:87:a4:c8:d0:27:fe:8b:ee:41:50:a8:d3:96:88:db:f5:71:
         58:6e:98:66:cd:dd:1a:76:9d:1c:7d:89:99:f5:32:9e:c5:43:
         69:75:74:9a:aa:27:81:4c:e3:c2:47:67:a6:fc:ea:bd:06:d0:
         91:21:80:b5:98:a5:b4:df:4e:02:9b:d7:f4:fa:4e:f6:78:9b:
         08:24:31:62:ab:a8:67:ce:a2:cb:53:8c:22:3b:be:e8:55:94:
         99:b3:99:79:6e:a5:ee:48:98:a7:d6:1c:a8:93:49:2d:23:40:
         d5:70:5d:bf:c1:0a:7f:4b:08:62:8d:cc:04:0f:2b:31:31:c9:
         7e:60:39:53:34:db:25:b2:d7:6e:05:69:7a:4f:16:24:fd:fd:
         53:0e:ec:25:1a:0b:64:17:fa:c6:1a:ba:d7:61:d2:41:79:0e:
         89:58:a3:32:75:b5:d3:a6:da:0e:7b:df:fc:36:ce:ba:75:5e:
         64:af:c8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:26 2025 by rpki-client