Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File:                     i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier:          D3q1HcmuUklZlwddQY1d28wuYuFib5M7Lz7o/puqwuM=
Subject key identifier:   9E:C2:82:39:00:57:54:1D:50:1C:8C:F0:B6:12:86:34:0B:95:BB:69
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer:       /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial:       019770755DB928C257AF40589E7C51330BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number:          0846
Signing time:             Sat 14 Jun 2025 22:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:29 +0000
Files and hashes:         1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: evB9btkisNeSf36Y4Yl8C3BQqu9uV3vk+e/HnTJn5Vg=)
                          2: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (hash: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:5d:b9:28:c2:57:af:40:58:9e:7c:51:33:0b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
        Validity
            Not Before: Jun 14 22:00:29 2025 GMT
            Not After : Jun 15 22:00:29 2025 GMT
        Subject: CN=9ec282390057541d501c8cf0b61286340b95bb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:93:99:ca:d8:9b:83:da:6b:98:77:4d:3c:
                    1a:94:a2:c8:fc:cd:6f:7e:d1:64:70:18:74:30:c0:
                    90:ea:39:b0:4a:fa:f5:e9:6f:66:d8:bf:1a:ce:a3:
                    40:ef:c1:1b:d7:83:bf:fb:e7:98:ff:dc:23:d9:35:
                    80:4c:37:e0:d4:f3:2e:bc:0a:c2:71:5b:63:58:34:
                    b6:de:d5:5d:46:8d:55:3f:39:f4:ac:fe:e0:a1:fa:
                    b4:18:11:de:e1:2b:3b:e9:3e:05:11:19:5e:40:e1:
                    38:9b:6a:ac:0c:04:1a:fa:68:8b:04:ee:59:1a:2d:
                    95:1b:62:4a:e6:6f:66:6b:c7:3b:c7:d7:f8:4f:c8:
                    32:af:f5:e3:87:c5:62:67:24:21:5d:21:b0:2f:ec:
                    ca:d8:72:8a:2b:df:67:3a:4c:b3:67:12:13:8d:e7:
                    a1:b5:5c:2e:d3:cc:10:9c:0c:8a:27:56:2d:56:0b:
                    2d:cf:4b:73:08:31:b9:61:56:8e:d9:18:4e:dc:b8:
                    de:ba:08:b3:c8:44:f6:93:82:aa:f3:c1:1b:57:00:
                    ee:da:90:b7:bd:5c:4a:83:84:2c:d1:67:77:e9:54:
                    57:be:73:02:fc:eb:99:a4:70:66:3d:e5:04:22:1a:
                    be:57:6f:68:ba:af:17:ea:6a:98:bc:6d:e7:bf:bf:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C2:82:39:00:57:54:1D:50:1C:8C:F0:B6:12:86:34:0B:95:BB:69
            X509v3 Authority Key Identifier:
                keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:16:52:0b:9e:17:78:ad:09:3d:4f:bb:89:4c:1b:60:0b:b1:
         31:8d:d0:2a:46:b6:26:9a:6c:ca:91:80:c7:81:41:a7:fb:fb:
         69:ef:43:be:c4:a1:24:ca:53:a3:4b:29:15:a6:a4:3e:cf:f6:
         e5:7f:02:90:04:56:3b:eb:23:df:2e:c3:4f:47:df:3e:bd:f2:
         d7:2b:ab:40:cf:a3:ce:36:64:e3:d3:f4:8f:87:37:12:7c:b6:
         fd:cb:c6:de:87:ac:d6:ef:7e:f0:a7:3d:d0:f6:bb:cb:b0:e8:
         c6:2e:7d:e8:58:4b:1f:1c:ab:3c:e4:4d:a1:f1:6f:00:51:03:
         f8:cf:89:f4:ff:00:4a:e1:75:bd:d3:72:8c:15:f8:d8:f8:90:
         29:7b:e4:d2:a8:ac:2e:f4:ee:73:ef:23:19:23:52:5d:48:6b:
         e9:6a:c9:9e:17:3e:b9:a6:22:20:58:ac:4d:02:99:c8:b9:44:
         f3:af:b3:6c:d6:cf:c3:4e:eb:75:0a:79:e6:39:7a:5e:ea:9c:
         96:41:03:53:ea:2e:b9:86:d0:ec:4c:f7:a0:f5:cd:4c:1d:c8:
         d9:c2:f1:3e:ad:ac:c9:6c:a5:7d:99:be:1b:a3:ea:63:fe:f2:
         cb:59:8e:bd:a9:27:cc:8f:3b:8d:a0:a4:0e:d5:49:4f:af:72:
         09:53:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:11:55 2025 by rpki-client