Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File:                     8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier:          T5YX3Ym+KRoEI/IHbC4aSXfeE/cXZMeE0GReRXbgiz4=
Subject key identifier:   9D:3D:30:F2:A2:4A:80:0D:0D:55:13:5F:FE:3F:06:48:9E:95:E3:5E
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer:       /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial:       019771BF9B77D8B760AE8ED5CA4BA4A2BC1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number:          1593
Signing time:             Sun 15 Jun 2025 04:01:11 +0000
Manifest this update:     Sun 15 Jun 2025 04:01:11 +0000
Manifest next update:     Mon 16 Jun 2025 04:01:11 +0000
Files and hashes:         1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: X+V8uQN7kr/UIBnJQQrsXGaTdYAhYQxCldoVdHwyXSk=)
                          2: Im2JQRLROW71vKm8r2oO6Xo1LEY.roa (hash: MahGrn/8hOcGcxLx7I6GfG5YqTkwO2eBFakKNoAC1GA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:bf:9b:77:d8:b7:60:ae:8e:d5:ca:4b:a4:a2:bc:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
        Validity
            Not Before: Jun 15 04:01:11 2025 GMT
            Not After : Jun 16 04:01:11 2025 GMT
        Subject: CN=9d3d30f2a24a800d0d55135ffe3f06489e95e35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:6e:33:e0:4b:4f:ef:63:00:49:1c:1d:11:
                    ed:bd:e9:99:21:d8:85:3c:26:06:2c:0d:a5:2b:f0:
                    0a:eb:75:b9:77:a4:71:57:d8:0b:10:98:1a:99:b9:
                    2a:c3:fb:8d:9f:c1:b6:fb:f7:27:4b:8b:06:ea:fa:
                    2f:49:6e:3d:90:94:0b:30:fc:ee:b8:57:79:e7:60:
                    14:07:09:54:fe:55:ba:9d:a3:24:a9:d1:c5:e2:be:
                    6e:6e:75:55:1a:15:e0:34:7f:02:c8:13:bb:ef:cd:
                    1d:ca:fe:fa:07:10:01:5e:10:a4:e5:a1:ef:31:1d:
                    95:1e:27:6c:8c:bd:03:0a:bd:ea:f6:81:86:07:f5:
                    77:64:7d:10:70:08:99:d6:a8:9c:48:32:3f:1c:d2:
                    34:e2:56:31:11:b7:b1:de:b0:91:4d:c6:8b:13:2e:
                    7f:a3:17:a5:74:53:db:b7:74:04:66:b6:91:4a:6d:
                    9a:41:31:f8:69:f1:89:ec:08:05:e3:53:b9:da:a3:
                    5d:f2:d4:c9:f1:b8:0d:f4:c9:6d:16:18:ab:38:a3:
                    7d:76:14:2a:81:44:16:36:43:2f:d1:60:25:89:4b:
                    86:20:e9:49:90:00:1c:3b:73:ab:2b:ba:5d:be:2a:
                    30:51:29:fd:9c:81:eb:a7:4d:47:a6:5f:9f:de:2c:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3D:30:F2:A2:4A:80:0D:0D:55:13:5F:FE:3F:06:48:9E:95:E3:5E
            X509v3 Authority Key Identifier:
                keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ba:2f:47:f8:96:a5:c5:56:0a:09:34:7b:c7:c5:7e:64:c8:
         72:4f:3f:e3:1f:ef:ff:a5:b8:ac:c7:03:b4:0d:c7:91:a8:15:
         b0:6d:5f:9c:1b:1c:81:f7:b1:e8:34:fe:db:5c:1f:f6:83:1c:
         60:ec:97:ee:14:47:39:9b:ae:a1:2c:d9:08:2c:72:6f:c1:06:
         87:13:1f:a0:56:64:59:67:ab:2b:d0:6d:ba:8c:12:99:25:4d:
         4c:c1:49:8f:04:a8:70:87:eb:22:da:e8:c3:81:67:b5:4d:1b:
         50:9a:28:b0:f2:c0:03:e3:01:f2:3e:e3:ba:0e:bc:b6:e2:3f:
         b0:b7:4d:94:e0:1d:15:f6:8d:df:31:4c:1c:58:99:bf:20:d1:
         c4:c1:4f:41:22:f6:0c:ff:a6:61:81:8f:f6:2f:f9:c8:61:33:
         6c:02:4a:9c:47:69:86:23:23:a4:ed:b2:b8:72:25:35:c8:67:
         82:50:5d:fb:b9:f5:38:f7:4a:7a:6e:f2:3c:e3:b4:80:9c:53:
         64:71:d7:51:de:44:74:7d:98:e7:e3:04:d4:10:84:3e:d5:77:
         84:0c:d8:37:45:74:ba:3b:9d:d5:c2:e4:03:57:58:d0:77:64:
         31:31:5b:f7:3b:b4:d3:93:f8:57:41:53:8f:0a:bb:f9:96:a4:
         4e:ab:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:47 2025 by rpki-client