Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
File:                     g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft (raw, json)
Hash identifier:          D7Ogl5z8utxvzQg51prshWOWOp2En6NA+ytAVeIpa94=
Subject key identifier:   06:99:2E:49:EE:8E:3E:C1:DD:65:35:C5:60:57:6F:0F:0B:94:63:15
Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
Certificate issuer:       /CN=83c8d01caf2b0751d035c537566f45627925e4f6
Certificate serial:       01976929C63BEBA19309747DBB390D917806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
Manifest number:          10D2
Signing time:             Fri 13 Jun 2025 12:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:34 +0000
Files and hashes:         1: J4HW2mYS6aU6LfQRgOlYRDbLp5k.roa (hash: Bt4aDKGWyvEeRSoxrjAjHWSOknnKJY9L9kMvMSuInRo=)
                          2: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl (hash: UFEiFb3YpILA1W9joh2Ziflu3OB3OzrH7ppfSW5K5RQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:c6:3b:eb:a1:93:09:74:7d:bb:39:0d:91:78:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6
        Validity
            Not Before: Jun 13 12:00:34 2025 GMT
            Not After : Jun 14 12:00:34 2025 GMT
        Subject: CN=06992e49ee8e3ec1dd6535c560576f0f0b946315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:11:2a:36:23:58:90:be:63:f4:49:be:b6:36:
                    b7:61:98:d9:59:00:92:ef:91:b6:48:96:a3:42:c7:
                    3f:b3:b5:b2:25:5c:47:d1:21:72:b1:7e:0b:05:e9:
                    b6:76:e1:39:6a:d1:42:10:88:78:61:7b:b5:90:92:
                    98:66:b6:5b:a8:48:92:a5:8b:6e:f0:a7:2e:20:36:
                    ec:ae:73:63:59:99:e7:5c:1e:d2:e4:2f:af:11:a1:
                    41:ba:be:b9:24:6d:c4:ec:d3:3b:1d:3e:30:29:09:
                    53:4c:ca:fd:8b:ce:f9:59:63:08:30:82:06:11:af:
                    87:45:f4:28:b2:24:da:62:af:d2:c5:4e:0b:2e:fd:
                    0f:60:36:fe:28:23:2f:22:26:47:68:c4:ad:fc:22:
                    5c:b4:e0:22:bb:01:ec:06:3e:2e:2b:69:2a:95:2b:
                    d5:0d:8a:64:f7:28:10:6d:ac:41:55:dc:b5:1d:7f:
                    dc:07:5f:fd:8e:74:5c:f2:6e:f5:ba:8c:b2:72:b5:
                    5b:70:82:36:58:05:20:c5:a2:00:b3:89:67:b7:bf:
                    9f:a9:b0:ca:7b:e3:9a:84:99:e5:f9:12:aa:3c:b0:
                    c5:db:cd:b9:1e:15:0c:25:f4:34:76:0d:b5:87:0b:
                    49:b9:cf:c6:82:31:c3:55:ac:62:4b:47:b0:9a:f0:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:99:2E:49:EE:8E:3E:C1:DD:65:35:C5:60:57:6F:0F:0B:94:63:15
            X509v3 Authority Key Identifier:
                keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:96:bc:79:c9:54:59:23:53:86:54:e3:3b:49:98:28:4c:4e:
         79:63:90:6b:55:1c:7a:1a:7a:54:1e:f3:ec:dc:e8:00:93:d0:
         48:01:a3:d4:75:17:de:1c:05:03:e8:95:f4:fb:83:93:2a:1b:
         51:0e:a7:fb:5c:74:11:56:9c:e5:b3:fe:14:55:67:cd:fd:2d:
         16:6b:d6:8b:6f:7d:1a:8a:02:89:d1:11:42:52:68:7b:e2:15:
         44:95:21:ae:71:10:f5:66:38:08:e3:78:6e:81:cb:b3:21:88:
         4e:14:32:6d:fc:56:63:b0:cb:0b:86:9e:69:ba:7b:57:47:94:
         9c:50:f9:07:e4:4a:59:fb:23:89:b2:1a:53:e1:5c:04:0a:49:
         39:1e:46:ee:2b:8c:fc:fb:f7:34:f5:73:30:86:2a:0e:7b:73:
         92:51:16:56:71:61:89:18:03:94:28:3b:a6:22:b6:ec:1a:8e:
         11:e6:05:6e:95:02:29:40:f0:50:33:42:6f:b2:01:07:64:49:
         3c:16:8b:36:ba:0b:f9:b5:5d:db:33:0b:bd:49:db:06:b5:85:
         07:21:15:12:ba:fd:dc:fb:ba:8a:dd:fb:8d:94:7f:fa:21:42:
         9f:2b:28:f5:6d:d0:76:5d:ac:9b:4b:fb:3a:3f:6d:6d:9e:5c:
         81:5e:b3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:50 2025 by rpki-client