Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File:                     8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier:          +QAM5l2l9Efb7dPnKy8z1GDthQ4xYGoAKECo+pG4ElE=
Subject key identifier:   9C:69:36:64:18:70:3C:DE:71:46:6C:F2:2F:19:1A:EE:6B:22:5F:56
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer:       /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial:       01969AF48EDAB84475C49F688ED2A927E938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number:          1114
Signing time:             Sun 04 May 2025 11:00:40 +0000
Manifest this update:     Sun 04 May 2025 11:00:40 +0000
Manifest next update:     Mon 05 May 2025 11:00:40 +0000
Files and hashes:         1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: BX5BlBoVY4+fzLSgxlL0ONyewlPj/ys2cWh0g6j/VJ8=)
                          2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 11:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9a:f4:8e:da:b8:44:75:c4:9f:68:8e:d2:a9:27:e9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
        Validity
            Not Before: May  4 11:00:40 2025 GMT
            Not After : May  5 11:00:40 2025 GMT
        Subject: CN=9c69366418703cde71466cf22f191aee6b225f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:44:36:f1:70:c4:ad:a5:92:2a:8e:78:63:1a:
                    58:83:78:a5:75:01:e6:93:2a:12:51:0b:3e:a9:78:
                    47:ec:d1:68:25:0f:01:bf:db:b6:10:a6:cd:3a:2c:
                    4d:b7:ad:5b:48:48:7e:13:5e:8a:07:fa:54:4a:5d:
                    83:1d:e4:c7:07:2c:db:85:8f:fe:5e:05:de:4f:8d:
                    2f:57:e7:ce:41:7e:22:66:cb:b1:de:60:48:3c:63:
                    f0:8f:09:93:01:eb:56:40:1d:3b:80:c7:06:c3:39:
                    b2:56:5b:31:2c:5a:ab:1a:33:fa:ba:56:9a:4f:35:
                    2f:1e:d2:37:78:87:e7:20:a3:cd:aa:13:4e:78:e4:
                    9a:d4:5f:3e:5d:3c:30:de:cf:35:93:16:ca:2a:40:
                    f4:bc:2d:0d:d9:5a:91:37:b0:d2:8d:a0:07:f4:81:
                    8f:d8:ec:d9:d8:3c:4d:13:03:1e:65:93:76:61:f2:
                    f3:29:8a:77:31:35:4d:4f:e2:a1:9e:29:cc:13:a3:
                    87:cf:13:a1:29:c6:cd:fd:70:83:ca:a0:66:2d:41:
                    c5:02:4a:78:72:77:f3:87:92:e2:e2:31:c4:26:d8:
                    e9:1e:ff:39:0d:d0:ec:99:a0:7a:7a:83:ff:26:a2:
                    67:c5:6e:35:48:ab:ff:fd:4f:07:d4:7a:be:d8:a9:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:69:36:64:18:70:3C:DE:71:46:6C:F2:2F:19:1A:EE:6B:22:5F:56
            X509v3 Authority Key Identifier:
                keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:93:c7:9b:07:17:97:0d:28:7e:7c:a5:31:e4:1b:d0:4d:fe:
         aa:32:13:89:5b:7e:6d:64:f5:e4:38:d8:b9:22:56:1f:94:31:
         24:90:52:de:02:83:02:dc:2f:98:f1:27:fa:59:4c:48:bf:42:
         cb:5f:95:1b:7a:4d:a4:7d:aa:a7:b8:01:51:aa:a8:11:df:a7:
         4a:df:84:fa:61:87:6f:3f:fc:ad:3a:07:1d:78:d8:1b:4d:aa:
         36:75:24:53:9a:6f:94:98:a3:65:0d:ce:78:74:8f:5f:e6:fa:
         12:9a:aa:09:8f:7f:f4:e0:ae:4d:90:54:2e:69:95:ea:21:34:
         05:85:b3:1b:24:de:60:45:e8:d9:67:4f:34:76:3a:94:af:00:
         44:88:47:8e:8b:f8:56:d9:65:d0:f8:11:97:fa:ff:ba:b9:d8:
         ec:21:8a:0d:87:cc:9e:0d:a9:37:64:ab:be:af:e6:92:a4:95:
         25:df:bc:90:bf:ba:a0:b2:a2:3a:f7:46:2e:cb:8b:d2:3c:5c:
         a2:b5:31:48:84:2b:5b:ec:89:31:85:8c:3e:f2:4c:11:7f:ce:
         aa:41:fc:b1:b6:1d:47:7d:a9:fd:19:fc:e8:a0:79:ef:a7:9e:
         0d:9c:51:eb:c6:68:ad:a8:90:d4:95:77:0e:d2:a2:05:f6:76:
         c3:7e:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:47:59 2025 by rpki-client