Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File:                     8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier:          xvDrS4ubv9VVThOCNeirXyBIlSVi3o42dbdVsKWDiL8=
Subject key identifier:   44:84:68:AE:13:1D:C2:0B:60:9D:8C:E7:C5:BD:6C:04:53:B4:1C:02
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer:       /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial:       0196929617D484398914548DBC14245E6221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number:          14B0
Signing time:             Fri 02 May 2025 20:00:32 +0000
Manifest this update:     Fri 02 May 2025 20:00:32 +0000
Manifest next update:     Sat 03 May 2025 20:00:32 +0000
Files and hashes:         1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: KhLFiaQRS8Mzq3MC8bAnz4Qj3cTMka/RX0QLlEt4guQ=)
                          2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:96:17:d4:84:39:89:14:54:8d:bc:14:24:5e:62:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
        Validity
            Not Before: May  2 20:00:32 2025 GMT
            Not After : May  3 20:00:32 2025 GMT
        Subject: CN=448468ae131dc20b609d8ce7c5bd6c0453b41c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:c8:5c:71:db:bb:85:38:18:2d:e7:d5:ce:
                    94:78:8e:04:7b:29:55:ad:0c:ea:ad:7a:66:13:06:
                    04:4b:d8:3c:79:e6:f2:ce:8f:6b:32:01:d9:fd:97:
                    73:7c:cf:e6:df:59:4e:38:95:f0:5b:f4:9b:f5:83:
                    81:1c:6e:20:4e:e9:9a:b6:18:d1:f6:67:6d:9d:cc:
                    69:f7:e7:25:67:5b:52:7f:a4:25:fb:e2:6f:42:85:
                    09:1c:6e:6d:79:57:84:51:51:2a:1d:d9:aa:ab:15:
                    78:98:50:5e:54:7f:e0:ba:86:ef:40:04:bc:f8:6f:
                    3f:72:b0:5e:a0:3c:e7:d5:ee:65:e0:f3:e4:30:79:
                    32:15:48:1a:dd:21:c7:26:9a:78:2f:9a:5f:06:a4:
                    78:86:9b:e9:b7:e3:a2:00:57:98:c7:92:ab:19:91:
                    ef:ed:f1:ed:c3:34:e2:64:db:a4:1e:2d:86:dc:ae:
                    4c:d4:1d:a0:02:c0:31:76:82:92:8c:85:77:07:0e:
                    dc:f1:3d:98:69:f6:66:78:74:f0:ab:ce:d8:bf:4c:
                    31:36:2e:6b:4a:e3:d2:c6:39:37:57:ab:ff:e5:a3:
                    f6:71:f5:7a:61:b5:4f:6f:b2:f0:ff:39:a7:c7:26:
                    d6:7c:52:df:9c:86:8f:83:4e:67:a6:ae:35:7e:fc:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:84:68:AE:13:1D:C2:0B:60:9D:8C:E7:C5:BD:6C:04:53:B4:1C:02
            X509v3 Authority Key Identifier:
                keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:67:53:78:17:ab:e9:fb:a4:60:58:e5:12:c4:f6:23:1b:52:
         cc:a1:53:0d:87:7f:5b:d4:eb:4c:61:d8:2e:cf:a5:6f:c1:2d:
         d9:69:3d:0e:bb:83:7b:7a:73:16:d9:a8:b6:68:8c:8d:33:28:
         ed:18:03:d1:22:10:3a:1d:45:bd:f5:e5:1d:70:1c:77:95:f6:
         fc:01:0a:12:e2:07:d1:1e:fa:36:5b:e3:3b:7c:8e:fa:54:71:
         ff:3e:fa:2b:a7:93:93:9d:fa:b2:90:73:09:40:43:c2:6a:e9:
         56:e9:69:34:3c:27:c0:c7:89:07:64:42:c6:1e:60:f8:c4:76:
         34:35:9d:ed:9d:fb:d5:f4:4b:38:5e:1c:9d:23:d3:ef:4e:9a:
         11:46:be:ba:b2:af:12:35:34:14:85:70:c0:c3:49:c0:ef:9a:
         63:54:e2:b3:34:9c:b2:36:91:67:10:65:f0:e3:6b:f3:5d:41:
         f0:33:d9:e8:46:6e:12:91:2d:2c:f7:91:4b:af:f5:88:fc:11:
         51:24:42:ed:68:ee:4e:49:3b:a3:7b:aa:cd:b9:9a:1d:0f:8c:
         c3:38:b8:2e:fb:ee:5d:97:3b:c6:3a:37:b3:cc:ee:c3:1d:9d:
         55:a7:fe:02:e7:f5:33:6a:39:fc:9e:92:21:d5:db:1c:b2:35:
         a5:2a:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:52:59 2025 by rpki-client