Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File:                     j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier:          xrHhfr0B0AcDLqA/EvsTOpUegaucN2c/cq+yUFkOHfE=
Subject key identifier:   6C:0D:5B:C1:56:FF:AA:77:54:8B:8A:F4:9E:EA:5A:39:CF:AC:0E:EF
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer:       /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial:       019660294E39F91116B4610E68CC022B9B22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number:          1415
Signing time:             Wed 23 Apr 2025 01:00:41 +0000
Manifest this update:     Wed 23 Apr 2025 01:00:41 +0000
Manifest next update:     Thu 24 Apr 2025 01:00:41 +0000
Files and hashes:         1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: 6hbRSLeYeXl6mbJJQOVSjmW3ThgrWR9ZlkgC1dYXgyc=)
                          2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:60:29:4e:39:f9:11:16:b4:61:0e:68:cc:02:2b:9b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
        Validity
            Not Before: Apr 23 01:00:41 2025 GMT
            Not After : Apr 24 01:00:41 2025 GMT
        Subject: CN=6c0d5bc156ffaa77548b8af49eea5a39cfac0eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:a8:a9:82:35:31:6a:0a:7f:e0:ae:a2:ae:
                    ba:f6:e0:2a:3a:5c:94:aa:4f:89:c7:9a:37:b0:de:
                    fe:2e:38:19:39:fb:fe:82:3b:e0:77:85:29:6f:76:
                    fc:04:cb:4b:73:33:14:e0:42:1c:6c:a8:eb:f4:3e:
                    71:bb:b8:ae:55:46:32:26:31:5c:29:04:77:46:db:
                    e8:62:05:56:8b:c4:da:dd:34:3c:35:f2:e7:fc:3a:
                    8c:a3:12:d9:ea:ab:4d:59:bc:16:3a:dc:56:93:2d:
                    6a:4f:44:19:b2:e2:60:be:4c:7a:8e:7b:c8:57:c5:
                    3b:9d:d0:c4:7b:d2:7d:71:8e:86:11:c0:40:7f:1b:
                    a6:0b:55:a3:09:4b:2f:7f:e3:d1:d7:fe:c4:de:e8:
                    86:a2:fd:4b:5b:b5:7d:e1:84:5c:9d:31:ff:33:08:
                    77:54:83:73:b3:f5:db:69:1c:fe:a4:bd:5f:0b:b6:
                    4a:15:36:c3:09:74:46:77:05:be:6f:89:d4:73:d1:
                    74:a1:ce:50:5e:07:6f:f3:8d:9f:54:ba:06:70:40:
                    bc:95:75:8e:d2:9e:59:33:22:33:a2:ce:6b:64:08:
                    5a:e8:40:0e:4f:58:bd:ae:45:c7:3c:75:be:f1:a3:
                    4d:ec:72:f1:2d:10:7a:ee:1e:94:9e:c5:88:a0:21:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0D:5B:C1:56:FF:AA:77:54:8B:8A:F4:9E:EA:5A:39:CF:AC:0E:EF
            X509v3 Authority Key Identifier:
                keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:69:23:6c:d7:e3:f5:9d:90:2e:14:9a:7a:f1:16:f6:e8:a5:
         9e:e7:16:35:16:5b:53:d7:69:d4:4a:cf:b9:72:9c:f5:44:d2:
         19:8f:7a:05:e0:0f:44:da:11:97:63:84:19:f8:40:3f:24:46:
         9e:a7:0d:67:05:b4:45:dd:d0:4e:76:d4:f6:7d:29:18:19:66:
         84:05:02:19:ec:15:94:96:48:36:c1:94:e4:c7:bc:2c:35:04:
         60:08:9a:58:9d:7c:dd:86:e3:00:b8:31:87:01:e2:ed:8a:e6:
         c2:f2:58:de:73:e7:2e:07:c8:9d:6d:36:71:c2:91:a4:42:77:
         a9:3a:28:ec:ff:c7:ab:41:00:ef:dd:f4:65:6a:c9:f0:95:a1:
         0b:d0:84:87:43:f1:69:fe:08:74:7e:d5:ad:8c:8f:e1:22:f7:
         61:71:1d:fa:c6:98:1b:8f:f8:21:f6:7a:11:12:14:da:d6:33:
         79:58:f4:5f:18:b2:81:c5:93:3c:f2:69:ac:bc:4e:cc:c3:43:
         30:97:aa:e6:d0:59:a9:3e:ff:7b:35:ab:a3:64:0b:6c:7c:6e:
         75:78:bd:28:5a:f2:59:44:f4:51:1e:13:eb:01:1d:90:3d:bf:
         76:5a:9c:d3:88:c9:c5:32:0b:33:53:9e:a7:63:1a:a4:d4:06:
         f0:1f:3e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:56:58 2025 by rpki-client