Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
File:                     8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft (raw, json)
Hash identifier:          u+wDCJsdo42fScAXLfnw5BBfjdqrM/EIcQfSRGDVSFo=
Subject key identifier:   D2:0D:12:59:B3:3C:01:37:A0:9A:F1:09:A7:E9:0F:D7:A9:CE:E7:73
Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
Certificate issuer:       /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
Certificate serial:       019674F9B3A3996F472A7E9DCADC4026F027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
Manifest number:          F4
Signing time:             Sun 27 Apr 2025 02:00:43 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:43 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:43 +0000
Files and hashes:         1: 0c_l4ysRLhoLyNhVK3O7GIWEcSo.roa (hash: wCgtD5GTaTUHzlGOdOblih6qPlBPABAlJQ113X+Jw+c=)
                          2: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl (hash: 8/rRjMeiSK09EDrfIjD140/hgMA2EZ1uTtm70kVO6fA=)
                          3: 97Bdc61qbgqdAvjBmYkfFO0y1Ww.roa (hash: oUOsuSRnUrU8knVeKfFc9QKPrgL79MjXgwUrkum1/pg=)
                          4: L4cYTmcMFfvtup8EOVfWGJu2vX8.roa (hash: erMMZD+S+Fs2aYT1Dy3VVlR447qTafNqOv1NGE4DFgI=)
                          5: Z29YwFdCw8mb-MR3SYDyBs3lmMg.roa (hash: J+lE3dbsGRla43+sCei9+kYRVYFXdgjow6d3cOzy75c=)
                          6: bFysswJxqvMNZTsaf64flp1ZIQc.roa (hash: uwCDzi7rd+IXP1Mw2HNimdPO1YXu5Quq3N1iTcDCSa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:b3:a3:99:6f:47:2a:7e:9d:ca:dc:40:26:f0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
        Validity
            Not Before: Apr 27 02:00:43 2025 GMT
            Not After : Apr 28 02:00:43 2025 GMT
        Subject: CN=d20d1259b33c0137a09af109a7e90fd7a9cee773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:36:a1:b1:19:b5:9c:03:af:0e:f8:65:b0:
                    a2:3d:11:95:f4:93:41:a4:56:10:bb:2c:91:23:99:
                    15:32:dd:2c:d2:b8:ef:52:a4:ab:a5:f6:b3:a2:64:
                    d8:36:13:0a:ab:e8:23:9f:6d:0c:14:5d:ec:0e:0a:
                    08:f8:89:55:0c:cb:0b:68:eb:30:83:0d:b7:6b:5e:
                    27:56:ad:e6:80:6d:e7:6d:20:3a:67:e6:02:e9:7c:
                    47:1c:0d:c0:2f:73:d7:99:b3:bb:c6:81:96:5a:c0:
                    3d:66:90:2d:81:01:46:12:4b:1b:8c:ef:ed:c4:30:
                    b7:d9:82:85:a8:6b:41:3b:f2:ab:59:af:8e:9d:32:
                    ed:d4:f3:61:65:98:4e:6a:e4:45:8e:77:bd:34:f5:
                    75:8c:d8:1a:cd:b2:2f:9d:d3:f2:d5:2b:92:06:5f:
                    74:5f:0c:57:69:b4:f1:87:7e:48:9a:c3:d4:f7:b3:
                    53:aa:5b:57:b1:32:57:5d:16:f5:52:f7:79:03:ad:
                    f1:85:0b:71:e0:55:e5:7e:53:b1:ea:59:5d:5f:94:
                    68:ee:df:8b:75:80:00:c2:ef:70:24:c6:b6:6a:bb:
                    4c:c4:f9:d7:f6:f2:e3:51:01:da:15:ad:03:6b:bd:
                    b6:45:05:64:6a:84:28:2a:37:cf:7d:04:bc:bc:d0:
                    d0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0D:12:59:B3:3C:01:37:A0:9A:F1:09:A7:E9:0F:D7:A9:CE:E7:73
            X509v3 Authority Key Identifier:
                keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d5:5d:30:5c:5e:8b:3e:d3:f7:30:a0:4a:de:cc:ab:2d:11:
         28:f2:33:9f:c3:37:d3:ee:8e:37:15:8f:67:07:f5:d8:e4:56:
         8c:0b:03:c2:d0:ce:69:36:94:b2:6d:b1:95:cc:39:a8:3d:96:
         5b:53:21:7f:6d:b2:ce:ae:44:cb:9a:2f:ee:43:b4:0f:c8:f5:
         6d:aa:5f:d5:dd:31:29:a5:09:0d:40:aa:3b:5e:07:57:98:2f:
         41:43:c8:9d:76:39:ff:08:7d:d4:97:6d:e1:93:d7:c9:58:77:
         c3:57:a9:ba:47:ee:3b:e9:6e:2d:27:a5:ce:6d:ec:a2:0f:a1:
         63:a9:ac:1c:c8:3d:62:b6:d2:69:7b:87:5a:c3:56:79:cd:ec:
         12:29:49:1e:b9:dd:f3:e1:85:60:20:38:97:d7:96:92:ab:23:
         d8:45:83:9f:bf:ac:bf:2e:bd:c5:36:39:5f:c8:ed:44:c9:92:
         f1:59:45:b1:96:9f:c3:b0:2c:35:1b:c8:e7:f2:dd:a9:12:a5:
         28:a1:a4:97:24:67:48:b4:e3:5e:24:f4:68:0f:6c:fc:66:9d:
         bb:58:fd:11:a1:6c:bb:aa:9e:9b:3b:ab:50:3c:5d:3e:f9:2d:
         e0:b3:7c:08:6b:bc:c5:cb:86:ad:ae:b6:bf:96:d2:6f:3d:4c:
         02:23:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:21:13 2025 by rpki-client