Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          28UNtb9/6aSRqQxrWHHkYx6Qw5biAFiy9AGqf2IrEhw=
Subject key identifier:   B9:BF:E6:6C:AC:AE:C6:11:DF:ED:55:EF:9A:AA:DD:0A:D6:0A:10:5B
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       01968F27F288D97E8021760B96CEBC1592A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          14F7
Signing time:             Fri 02 May 2025 04:01:21 +0000
Manifest this update:     Fri 02 May 2025 04:01:21 +0000
Manifest next update:     Sat 03 May 2025 04:01:21 +0000
Files and hashes:         1: 08MOvb96w4xsKgP9JS0zoI8sRTk.roa (hash: 8gdw/ohva2RMhv163mHOocjNP3BJgaz4YyRqUuNJ7fc=)
                          2: EcfJ1jayPFQ3t0p16goPKaqtjcU.roa (hash: a5FoEd1+215WBmQs6vvzPYdx4+KFtw5yrsSUYmblCm4=)
                          3: Feoglcvw_6-C4xgxUoU6eiA0vbo.roa (hash: i5QN1v0aIKZsC1I8BX0SBzxPphQ7cFRhZicwbqLkWoI=)
                          4: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: 4NX1ArVzgI6eCtVflV2OaJ6+Ht5JTPqfaaA0wTccBhc=)
                          5: scHcnv6TrwaRFnxyoieAy0wdLy0.roa (hash: KW0/f/Bc0ZybPczgbDkkTfSw75mnRXJrQAuIsFRlAcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:27:f2:88:d9:7e:80:21:76:0b:96:ce:bc:15:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: May  2 04:01:21 2025 GMT
            Not After : May  3 04:01:21 2025 GMT
        Subject: CN=b9bfe66cacaec611dfed55ef9aaadd0ad60a105b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:77:49:89:25:6c:8d:31:ae:ea:85:00:16:
                    51:68:26:a6:83:19:68:e5:7e:00:72:8b:51:57:9c:
                    88:58:65:a4:24:7d:4c:8e:ee:96:a0:f2:0a:10:a8:
                    8b:45:ac:41:12:6d:03:fb:50:61:d9:34:82:93:90:
                    41:7d:78:02:44:a3:c1:25:f9:23:e6:70:31:ea:20:
                    96:ed:50:48:a8:4f:8e:21:e8:7b:02:f1:bf:08:81:
                    c0:8d:63:86:3a:26:24:95:98:b8:ea:7c:df:e7:fd:
                    bb:cd:4a:f5:a9:5e:48:a0:89:d1:ee:6b:56:27:4b:
                    a2:3b:a0:43:19:fe:31:8c:34:1e:1a:57:7d:7a:53:
                    bd:e4:97:36:b8:97:a4:4a:8c:64:7e:d2:44:19:e5:
                    be:d6:5e:40:8d:aa:62:2d:bd:ec:dc:2d:e7:61:f9:
                    a6:32:f0:eb:27:df:e9:ca:ed:19:26:c4:e5:b1:d3:
                    6d:8a:89:54:eb:8d:21:18:54:cb:4e:b4:e1:48:81:
                    56:75:59:73:3c:5f:58:b0:27:06:c4:cf:68:ae:67:
                    e4:89:46:d4:9d:bf:53:e3:ad:9d:d6:35:d8:15:4b:
                    6a:e0:de:fd:0f:85:7e:ef:e0:99:69:e4:0d:3a:27:
                    33:90:c9:57:b6:7d:5b:f3:9e:50:7b:1e:72:78:21:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BF:E6:6C:AC:AE:C6:11:DF:ED:55:EF:9A:AA:DD:0A:D6:0A:10:5B
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:82:41:d0:e6:87:49:e5:78:83:e5:b0:e1:82:96:e3:c7:9d:
         74:68:5e:20:db:91:b2:7f:88:2b:85:6c:17:64:f8:b8:ce:37:
         a9:c6:bc:25:ce:3e:02:7a:11:40:08:c1:33:ed:85:87:80:9c:
         fb:73:3c:a1:10:36:95:9b:3e:b3:49:bd:c9:5b:78:53:44:cd:
         80:d1:9f:9b:61:3c:05:85:7a:f2:29:2e:14:7d:fa:aa:a4:04:
         45:63:02:d8:fe:6e:cd:68:38:7e:15:04:84:f8:8c:e6:b9:98:
         e3:fe:65:77:9f:72:93:69:d8:ae:e4:13:4d:81:5a:db:ae:81:
         98:ca:91:83:e9:ce:66:54:8e:9f:32:43:82:93:6a:c3:f6:35:
         4c:d1:b2:da:d6:79:44:ea:7a:2c:fe:75:61:32:51:7e:95:c7:
         0c:ff:27:e5:03:1d:ae:62:88:f7:ba:7d:15:ec:6b:33:df:88:
         7a:1a:dc:33:e1:07:5d:9d:79:0d:ea:b1:16:1e:e3:96:60:3c:
         fd:33:3c:b3:c7:ca:69:57:63:f1:9c:7f:e3:ec:4c:25:af:7b:
         f3:ee:ff:d7:09:27:b4:f8:55:35:cf:15:b0:94:cb:ed:df:ba:
         37:22:65:ee:85:18:71:aa:98:98:f6:33:a1:cc:24:04:1d:7a:
         ae:a8:52:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:36:51 2025 by rpki-client