Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File:                     8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier:          s8jPRgSb3ThSsXKD/MgUX5/lNukGzrzK9aVHFSzXjLM=
Subject key identifier:   DD:96:9F:82:E2:7D:38:58:FC:56:7E:34:91:86:44:0F:D1:3D:DD:8B
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer:       /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial:       01976929BE17F484E3DF252EA4FB56E8F2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number:          0276
Signing time:             Fri 13 Jun 2025 12:00:32 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:32 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:32 +0000
Files and hashes:         1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: kNSOqBgUgr/wGn2qF5JA0Jq+zKUg7HteWpESWpb+0/Q=)
                          2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:be:17:f4:84:e3:df:25:2e:a4:fb:56:e8:f2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
        Validity
            Not Before: Jun 13 12:00:32 2025 GMT
            Not After : Jun 14 12:00:32 2025 GMT
        Subject: CN=dd969f82e27d3858fc567e349186440fd13ddd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:d0:3e:49:de:e5:af:7d:f4:b5:90:6f:40:
                    c6:d6:a8:ea:df:12:02:bd:fc:e5:51:1a:f4:ec:cf:
                    c9:79:58:2a:a3:85:e6:7e:9f:72:f9:69:b6:e8:08:
                    71:5d:08:c1:d6:4d:39:c8:52:85:4c:11:4f:2d:17:
                    7c:c5:c5:5c:38:54:1b:7c:a0:1b:9b:90:82:dc:6f:
                    93:14:fc:43:61:b3:c1:46:df:2c:db:85:d4:bb:e6:
                    62:f8:36:cc:49:02:02:31:95:16:fc:93:5d:bb:6e:
                    76:bc:90:b2:0a:a8:26:8b:0c:c5:78:83:73:b5:e0:
                    06:2f:aa:83:ea:9e:f6:d4:71:93:1f:bf:ca:ea:31:
                    82:46:06:b8:dd:ec:3a:ca:3a:4f:e2:ef:5a:32:1d:
                    b9:7f:71:81:92:5b:f7:49:85:0d:05:5c:25:e1:fd:
                    77:5c:b3:1b:19:7e:c5:f9:50:39:75:24:73:02:4a:
                    f4:6a:d1:4b:ef:0b:6d:2b:d3:20:6a:4b:7e:b7:aa:
                    f7:6f:4c:5f:f7:11:4e:c0:71:16:69:c5:03:9a:83:
                    b1:25:9f:da:c8:45:a1:11:d0:58:87:8a:6f:1f:e3:
                    cf:8d:6f:30:a5:a1:a2:35:a3:c2:17:13:59:a7:de:
                    82:86:20:79:bf:d7:38:7c:fb:53:80:67:58:98:f2:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:96:9F:82:E2:7D:38:58:FC:56:7E:34:91:86:44:0F:D1:3D:DD:8B
            X509v3 Authority Key Identifier:
                keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0a:d0:5f:76:2c:01:7d:f4:91:c5:79:4b:d3:de:27:5c:74:
         e2:32:f0:f7:f6:0e:65:08:0b:70:73:c4:20:c6:0f:d2:bc:8a:
         bc:9a:27:83:5c:7a:b2:9d:fa:7f:aa:e6:ea:bf:7a:98:13:a2:
         0b:b0:89:00:f3:e6:3c:bd:16:fc:3e:89:95:15:dd:d1:d2:1e:
         58:1a:3b:f1:4b:2e:5d:81:32:69:cd:d6:26:60:24:89:75:20:
         7f:e0:dc:45:32:c7:d2:b9:10:60:66:57:b5:41:46:63:a3:f3:
         db:67:4e:51:69:da:bd:ee:89:c0:c6:d6:69:82:41:a7:4a:c3:
         1d:4c:43:3b:25:a5:93:62:75:87:da:d3:19:c7:57:be:48:6e:
         98:6a:6a:2f:97:71:df:a3:1a:06:40:60:b3:34:12:63:2f:9a:
         8a:c7:1d:8a:a5:60:63:2d:5d:72:73:c9:7e:1c:02:b8:be:eb:
         fa:bb:dd:aa:b4:50:b8:60:7a:c2:f0:1e:09:96:bc:ba:40:25:
         91:78:33:99:8c:05:be:a9:a2:63:fc:56:81:c1:e2:e3:cd:e7:
         43:1f:c1:0b:28:94:85:57:75:c1:77:1c:55:3a:14:6b:37:13:
         a8:dd:3c:75:ad:28:09:19:01:36:8c:06:9c:42:08:79:cf:10:
         3b:a8:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:53 2025 by rpki-client