Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
File:                     j8HWvjunicXa61l6E13l7Myrj5U.mft (raw, json)
Hash identifier:          T+FC16IhVjXRZqtRXpCjrC7hVJzTZw7Y0X9FedhKWmU=
Subject key identifier:   D7:8B:9D:21:9F:A5:E4:7A:EC:0E:27:50:B8:A5:6C:C9:2E:F7:47:54
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Certificate issuer:       /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial:       019674C29918A33D8222C9D886C4C0146811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
Manifest number:          13FE
Signing time:             Sun 27 Apr 2025 01:00:32 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:32 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:32 +0000
Files and hashes:         1: j8HWvjunicXa61l6E13l7Myrj5U.crl (hash: KBhDSDV2ScGJAPefJ8BBIUnAsSMj2CoQ2hxdeO7hCyQ=)
                          2: ns9Iu925uNPqm9SyfjZghoXo_D0.roa (hash: 5KxIGOmUfDj5TmcmXox7HeyHg9DfY+4gQjDvtCkMxCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:99:18:a3:3d:82:22:c9:d8:86:c4:c0:14:68:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
        Validity
            Not Before: Apr 27 01:00:32 2025 GMT
            Not After : Apr 28 01:00:32 2025 GMT
        Subject: CN=d78b9d219fa5e47aec0e2750b8a56cc92ef74754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:b7:70:3f:f0:ad:fe:5f:73:0f:72:18:b7:
                    c7:b2:ec:39:c4:97:ea:6a:d0:b1:b4:fb:5f:03:a0:
                    ce:2e:27:02:f3:9e:99:58:59:d8:ca:47:da:c0:9b:
                    0f:e5:a3:a6:83:69:58:08:e8:8a:8e:28:9c:70:65:
                    61:2e:e5:82:14:49:0d:f2:0e:a9:25:1c:42:bd:9a:
                    bf:9a:30:a4:68:b5:d0:c8:81:df:26:c9:fb:de:dc:
                    99:aa:d9:bb:40:5f:40:ab:27:a6:72:38:e9:04:93:
                    ba:56:fd:62:21:57:f4:a6:f7:37:30:ed:60:f6:82:
                    a7:32:8e:22:28:ca:ed:78:d8:a9:e9:67:1d:96:3e:
                    1d:74:2c:87:31:7b:06:13:5e:2a:10:d5:62:33:28:
                    46:62:6e:eb:48:a0:3e:7c:16:a7:ab:0a:46:6d:80:
                    e3:74:09:a8:bd:f1:c4:06:05:81:e4:d6:d4:19:4d:
                    d1:4c:6d:d4:81:44:9b:6e:e4:82:da:f8:ed:e6:5f:
                    1b:23:a4:68:df:a6:84:d1:6a:3b:96:54:8c:34:71:
                    7f:fb:65:81:2e:94:4c:bd:dc:6e:b4:f5:20:f7:5b:
                    4e:8d:8a:2c:df:47:b3:b0:40:62:f6:49:73:64:fb:
                    47:b1:20:f8:fd:29:03:91:3a:c4:6a:d0:b8:cc:42:
                    3d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:9D:21:9F:A5:E4:7A:EC:0E:27:50:B8:A5:6C:C9:2E:F7:47:54
            X509v3 Authority Key Identifier:
                keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c5:04:f1:d9:05:c2:27:78:aa:64:48:13:17:ba:3a:79:15:
         86:f4:a2:6a:3b:32:21:6b:a1:35:04:d1:61:b9:c4:9e:8a:9f:
         80:43:de:a2:b0:ec:2c:25:83:6c:ee:06:87:f9:69:47:b4:f8:
         73:52:19:35:83:5a:0b:16:96:b2:8f:ac:99:34:cf:38:e1:b2:
         42:e5:e2:c4:cf:e3:d7:88:58:ab:19:66:b5:f0:1d:d0:8b:7f:
         38:e6:c1:dc:f0:61:6f:97:89:98:18:78:17:1a:8d:3b:6c:30:
         11:8d:79:ac:e9:72:a4:45:6e:56:b6:02:fe:f2:52:27:71:bf:
         bd:e9:78:b5:07:40:4b:ab:73:d3:1b:0c:a5:ff:95:c0:8a:03:
         d6:52:2e:f5:79:3e:37:33:ec:06:d1:be:d0:f5:d0:a2:4b:2b:
         f3:12:90:8b:d7:3e:12:81:52:7d:2e:61:6d:c2:a7:da:8a:96:
         1c:ca:62:c4:ff:e7:1d:e6:9c:03:09:85:a2:56:42:c1:5b:bf:
         9b:36:21:df:df:88:05:56:77:c7:7e:02:45:f4:fe:01:0a:5d:
         d1:57:27:bd:b2:41:0d:a6:9a:15:35:9e:e3:f1:6c:3b:62:bb:
         83:18:b9:ab:31:5e:69:1b:b0:58:6f:4d:8a:b0:f5:e0:71:c7:
         60:30:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:08:28 2025 by rpki-client