Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
File:                     Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json)
Hash identifier:          n7XcTKj1SvQdZgHxmoYgCPoCawztsKbgJCJ765cV+dw=
Subject key identifier:   1F:8A:A0:48:EF:C6:37:91:5D:08:5B:EC:31:24:51:0B:1F:EC:79:39
Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
Certificate issuer:       /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Certificate serial:       01976BBD8ACF1D0D84C4FEE3F88E250B73D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 00:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:13 +0000
Files and hashes:         1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: 1Ph3zhxJpTlwuQwzKj7xMNzb71Zci/mkCdtJY5MvOFw=)
                          2: pkl1dG1Tn-y8sIzafCzQdaxLGO0.roa (hash: +t+HSalevZKgrBOwo+A1WYwHvxUsDh9dx8CrhAZYnCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:8a:cf:1d:0d:84:c4:fe:e3:f8:8e:25:0b:73:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
        Validity
            Not Before: Jun 14 00:01:13 2025 GMT
            Not After : Jun 15 00:01:13 2025 GMT
        Subject: CN=1f8aa048efc637915d085bec3124510b1fec7939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:bd:66:28:8a:a5:13:c5:b5:3a:b5:d2:e0:
                    f2:6b:31:bc:a6:c0:1a:b6:ee:3c:a7:b3:25:0f:ee:
                    a4:41:37:b2:91:95:65:16:bb:f4:81:6a:b1:d9:1c:
                    bc:91:47:5c:c5:74:ea:d7:55:35:08:51:2d:bd:72:
                    ad:41:bd:20:7b:90:23:9a:95:c3:3e:3b:b3:26:d0:
                    b4:81:00:e3:ab:12:7c:a6:76:c1:40:64:c5:10:8e:
                    71:89:4d:7a:42:35:e0:1f:3d:e9:ff:3f:b2:7e:63:
                    50:86:98:84:eb:ce:29:48:66:9a:b6:d5:20:b1:38:
                    1c:1f:2c:b1:48:5b:7b:41:f3:65:95:b1:9f:b3:fc:
                    ed:0b:ce:d8:fc:fd:a1:aa:fd:47:e4:f8:bc:88:f1:
                    35:f1:fb:7a:c4:e7:b1:aa:cf:01:5d:36:f0:dc:23:
                    9d:9a:09:f4:e6:97:2a:e5:17:ec:a3:fa:03:40:5f:
                    45:1f:f3:53:cd:5e:b8:9e:f2:8e:ad:ca:f2:ad:fd:
                    81:e3:0d:e6:dd:35:68:39:9c:51:d3:4a:23:80:2f:
                    27:c3:ff:ab:f2:1d:92:30:b0:12:7f:61:ab:9f:d6:
                    2b:41:7d:31:57:f9:66:f5:8c:26:ce:c9:38:26:9d:
                    9b:ce:5a:5c:18:0b:0f:25:9c:d7:c4:bd:21:d8:b2:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8A:A0:48:EF:C6:37:91:5D:08:5B:EC:31:24:51:0B:1F:EC:79:39
            X509v3 Authority Key Identifier:
                keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b3:cb:24:65:03:9e:7c:12:91:2c:a6:d6:71:55:b0:0f:70:
         f4:8c:4a:1a:d7:e0:96:f1:de:c1:fb:80:50:ee:52:77:cd:a4:
         e1:52:c2:bf:f9:3c:98:d7:d7:db:47:e9:12:65:28:f1:a1:d8:
         74:b4:82:7f:b6:11:f5:1c:3e:56:bf:34:b2:e1:86:b3:90:72:
         74:7d:49:7d:c5:e7:78:46:b6:c1:9a:d9:8d:ce:af:d5:84:aa:
         8f:11:fc:76:e7:0f:29:f3:31:c4:38:ec:66:18:02:63:56:19:
         51:25:ee:27:d9:be:f6:3f:a5:ec:4b:d5:c1:4a:0a:fe:d8:97:
         4f:c7:8f:bf:c7:40:32:3c:3f:b8:85:b7:a3:c9:31:02:02:c6:
         6a:50:9e:fd:bd:07:20:4c:4c:ca:21:b9:79:89:7c:79:d9:79:
         65:81:d7:f6:30:cc:37:b5:2b:61:97:a1:23:02:f2:de:88:8d:
         17:0e:d8:96:6e:52:84:7b:ac:96:a1:9e:08:0c:b5:24:69:d8:
         d0:93:af:1a:db:46:c4:c3:1a:75:c6:e4:2b:b4:8f:f7:9c:4d:
         b6:2c:eb:6d:b8:6e:fb:50:90:d5:2e:79:77:67:93:45:45:cd:
         46:cc:12:7b:b6:0e:2b:e5:f8:aa:02:c1:4c:d3:da:99:4d:af:
         0d:b6:e4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:52:43 2025 by rpki-client