Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
File:                     m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft (raw, json)
Hash identifier:          ideS4l8vKkTDvUAU/slcDnuYWoDg4RZ3UjiG+1lpiXM=
Subject key identifier:   9C:57:FF:BF:91:9E:28:2D:F6:3A:19:52:13:BE:18:E2:25:17:19:D6
Authority key identifier: 9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
Certificate issuer:       /CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Certificate serial:       01964AEB3E7421FDB318EE08FDB359EAD6F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
Manifest number:          0891
Signing time:             Fri 18 Apr 2025 22:00:52 +0000
Manifest this update:     Fri 18 Apr 2025 22:00:52 +0000
Manifest next update:     Sat 19 Apr 2025 22:00:52 +0000
Files and hashes:         1: 7dGZOPsa1FU0C36WBDwIw7gL1Bo.roa (hash: 5etpC4MaJX7LndBCS5De3y9ecFGJX8+EfQl3ZBJ8rb8=)
                          2: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl (hash: aPsH2UUSW3+jGx04f9IutDKJSlL5NhSCXy/ty0FRfEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:eb:3e:74:21:fd:b3:18:ee:08:fd:b3:59:ea:d6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
        Validity
            Not Before: Apr 18 22:00:52 2025 GMT
            Not After : Apr 19 22:00:52 2025 GMT
        Subject: CN=9c57ffbf919e282df63a195213be18e2251719d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:8a:4d:67:a0:d9:5a:c2:31:36:66:93:80:
                    57:fb:a9:2b:96:e0:30:7d:c1:56:5f:14:41:74:8a:
                    2b:ec:a8:6b:b8:31:89:07:53:57:66:d0:7a:22:db:
                    0f:fb:7c:24:fc:45:31:d3:06:f4:d7:ed:fd:32:7a:
                    a1:a5:23:eb:dc:0f:20:0b:85:dc:7d:8f:de:51:88:
                    f8:17:64:73:fb:f9:b4:53:b3:fd:7c:d8:c2:f4:3a:
                    1f:2e:04:fe:2f:fd:97:24:74:55:b7:1c:b3:b1:e9:
                    b4:72:e4:fb:fc:ed:d9:7d:ea:a2:98:36:5e:0c:b4:
                    2d:70:04:06:08:81:29:74:e6:65:70:b1:8f:a6:d0:
                    34:ee:4f:82:f2:8a:76:a0:48:4a:ff:6d:6c:9a:74:
                    b8:02:33:b7:5d:75:26:ef:f7:64:9e:fe:95:7a:e2:
                    fd:da:c1:47:76:25:ee:9c:99:22:ff:ad:05:cf:e5:
                    45:0a:28:76:7d:a9:4d:51:86:88:83:3a:91:fe:00:
                    bd:cc:0b:51:3c:db:07:d4:04:92:a9:87:da:2a:a4:
                    d8:ec:57:55:84:dd:43:ae:02:f4:c7:81:9e:f9:26:
                    83:7b:69:2c:95:25:55:38:f9:5e:21:9d:aa:5e:63:
                    1b:d6:33:89:3d:43:dd:34:82:7e:28:a7:b8:04:62:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:57:FF:BF:91:9E:28:2D:F6:3A:19:52:13:BE:18:E2:25:17:19:D6
            X509v3 Authority Key Identifier:
                keyid:9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4a:8a:0f:05:2a:90:33:4f:0f:56:d5:af:11:d9:c1:75:00:
         c8:fc:5b:e8:c5:71:0e:84:11:90:8c:d9:db:c0:97:6d:58:ad:
         87:ba:ef:e9:a3:74:07:6d:c3:7b:1a:79:8d:b7:55:b6:13:ad:
         9d:a6:ce:61:b4:e6:72:6a:17:f0:2e:6e:16:8b:b4:1f:47:4c:
         0d:71:ec:9e:61:67:f4:3d:2d:eb:f1:4c:e2:e3:04:6a:b9:73:
         5e:0b:02:6b:fd:37:19:b6:e8:32:34:0f:54:8f:ae:72:7f:50:
         87:f7:28:14:c0:ce:c7:5f:7a:22:8f:e2:18:fd:4d:0b:fb:25:
         72:41:ab:a4:6a:13:90:ce:33:87:36:8c:65:cd:90:6e:25:d5:
         3f:ac:f0:b2:b3:1f:f0:73:c7:15:7e:1f:95:8b:4d:22:04:40:
         f7:e4:ba:c9:c9:c1:03:52:d5:40:98:11:38:2c:8b:70:3a:c3:
         21:ee:8f:ab:fa:e2:1d:0c:d1:8d:d4:4a:3e:83:50:74:cb:b8:
         8a:75:d9:8e:98:1f:1f:c4:40:f8:6d:e7:a3:1f:8a:59:45:ed:
         8d:97:df:fa:7f:67:5c:c3:2c:7c:e0:db:32:65:6e:da:6c:cf:
         b0:72:1b:88:e8:b2:2c:86:d1:ed:ee:55:55:b0:6d:e9:78:00:
         36:98:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:06 2025 by rpki-client