Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
File:                     8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json)
Hash identifier:          +rSb34bOT6jouJ2jXWUS60y8cjwm5YT7f/UG77U/SF4=
Subject key identifier:   BE:9A:B6:BB:AC:06:FA:EA:4A:FC:64:66:A4:BE:99:FA:76:DB:5F:03
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Certificate issuer:       /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial:       019677FBD4A5CE3E25938C8A7AAB118E5AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
Manifest number:          1519
Signing time:             Sun 27 Apr 2025 16:01:54 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:54 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:54 +0000
Files and hashes:         1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=)
                          2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=)
                          3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=)
                          4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: SxeBTEtKl6ubs4x1xJS0vptSuZkI/sx7Ep2kSlxI2n4=)
                          5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=)
                          6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=)
                          7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=)
                          8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=)
                          9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=)
                          10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=)
                          11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=)
                          12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:d4:a5:ce:3e:25:93:8c:8a:7a:ab:11:8e:5a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
        Validity
            Not Before: Apr 27 16:01:54 2025 GMT
            Not After : Apr 28 16:01:54 2025 GMT
        Subject: CN=be9ab6bbac06faea4afc6466a4be99fa76db5f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:46:c9:e0:b2:7f:ce:f9:bc:64:c0:f1:53:
                    c3:11:e3:41:56:f5:a9:83:21:98:dd:fa:70:63:de:
                    78:00:5b:fd:1a:31:06:1c:21:7b:de:73:34:94:50:
                    3f:b2:91:c9:36:c2:c1:9d:03:6c:d1:b6:d5:6f:ec:
                    fb:0c:c7:28:bf:f7:6b:93:69:0b:0a:13:51:89:a4:
                    d1:8a:e9:dd:d7:29:f6:c2:a5:88:99:31:01:e2:a9:
                    b2:4f:3f:5c:75:95:09:0b:2a:6b:fe:04:23:49:04:
                    d1:5d:bd:8b:89:9d:bf:91:05:9b:7d:6c:2c:33:33:
                    f7:d1:5b:44:1c:50:c2:d4:01:6a:23:cc:07:38:15:
                    8b:01:75:c9:4f:6d:64:e9:7a:2d:fd:75:89:f5:f6:
                    fe:f6:a4:9f:e0:1d:3d:e9:1f:fb:e8:aa:a0:19:15:
                    a9:d9:3d:41:11:76:91:b9:d9:18:d0:27:3f:3d:92:
                    2b:74:c6:b1:0d:d6:0e:db:4e:96:e5:a6:35:55:3b:
                    45:42:7e:73:14:e6:a6:82:e9:ba:55:d6:ad:c0:b0:
                    53:59:24:2f:36:3f:e9:29:56:99:f5:1c:3a:1a:80:
                    0b:5e:ea:f9:d0:26:36:da:2a:8e:4f:6e:61:8b:f8:
                    98:87:5f:87:7f:ff:4c:4a:6e:fd:2c:78:67:cd:1b:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9A:B6:BB:AC:06:FA:EA:4A:FC:64:66:A4:BE:99:FA:76:DB:5F:03
            X509v3 Authority Key Identifier:
                keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:42:a4:c6:10:70:88:05:2e:1d:4e:1b:ab:29:4c:56:1d:b3:
         6b:8a:eb:66:e2:21:92:06:8b:67:31:61:6c:0d:85:8e:f3:86:
         0b:94:e7:c7:09:f9:fe:8b:67:ff:e5:8f:e9:5d:1d:f7:e2:5c:
         0c:2b:c5:a8:56:60:1f:89:c3:12:93:f5:d6:8b:77:d1:1b:4e:
         26:d4:c5:fa:1a:78:8f:34:44:f5:94:4a:8f:44:35:ff:df:6a:
         73:07:94:fb:ea:8f:6d:39:39:83:be:bd:d0:65:af:cf:fe:ff:
         68:09:dc:8a:b7:b9:71:84:a6:1a:d1:03:08:e7:40:93:29:92:
         b3:89:8a:a8:a2:9a:40:1c:3b:c8:24:35:df:ea:a0:81:af:d0:
         a7:b5:e6:9f:55:bb:bb:11:a8:f1:01:c3:63:2a:7b:50:5a:67:
         37:5d:13:4c:78:dd:51:cd:5d:79:5e:a0:33:75:32:1a:61:43:
         69:bf:3a:8c:fe:04:14:3a:e8:22:77:f2:47:2b:d0:22:3a:bc:
         e4:72:21:44:ae:ec:64:d2:bb:af:94:0e:58:38:2f:63:6e:91:
         34:49:d0:10:7f:ce:50:3c:ad:57:c0:04:a0:1c:14:12:67:14:
         bc:ab:7b:6e:d2:7f:3c:5a:16:47:20:b7:81:fd:fa:2e:55:9a:
         96:6d:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:12 2025 by rpki-client