Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File:                     8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier:          mx4fl3g37CRgpPEiXV7JIOCycfp3lkISJwzm4l+1c9o=
Subject key identifier:   6A:25:B6:A0:CF:83:05:A8:A4:5C:7E:7E:93:70:E8:11:33:91:AD:48
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer:       /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial:       01974BC4442F2569EC048A0A325A3949E929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number:          077D
Signing time:             Sat 07 Jun 2025 19:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:43 +0000
Files and hashes:         1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: 4uAUTlkN+Zo5Vg20OjIxbRS/eUK1NOMLoFsTR2tEaF8=)
                          2: jB8O0EexbXRJ48aM1Kli0Ktl1vI.roa (hash: IcThWozF746RiVAe4jDaPPGv0zWnJg0lyhHJVcObykM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:44:2f:25:69:ec:04:8a:0a:32:5a:39:49:e9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
        Validity
            Not Before: Jun  7 19:00:43 2025 GMT
            Not After : Jun  8 19:00:43 2025 GMT
        Subject: CN=6a25b6a0cf8305a8a45c7e7e9370e8113391ad48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7d:d3:dd:d9:7a:40:88:93:05:c6:9f:f4:46:
                    b5:33:0a:9e:97:8a:f6:4c:a0:4b:8a:60:f5:1b:58:
                    e8:cb:f5:38:7e:e5:b6:2b:1d:07:d9:b1:20:2a:60:
                    65:fa:b8:9e:37:ae:0f:00:4a:56:d5:26:eb:ad:1b:
                    5a:5c:f3:3c:65:d1:98:d7:d7:bf:13:4f:43:7d:fe:
                    4f:2b:54:5e:a9:49:92:87:4c:eb:5a:4f:99:da:fe:
                    2c:88:87:f6:a1:c6:07:6c:c0:90:dc:4b:9f:e2:d3:
                    1c:bb:bb:ff:52:23:42:c0:81:87:c8:2f:27:82:c9:
                    66:c7:ec:1c:ab:c1:50:3f:45:7d:0b:16:84:3d:9b:
                    b6:7e:3d:d2:0c:1f:1b:8f:08:93:ae:3a:cb:f5:62:
                    c0:4c:89:89:c7:2f:68:dd:7e:11:7e:a0:e1:ed:a2:
                    84:11:0c:d6:5e:e9:89:84:84:e2:fe:24:25:1e:94:
                    5c:f6:6c:67:5f:79:d5:c6:2c:56:b5:e0:f6:21:9a:
                    a3:b5:31:41:3d:53:c8:9c:e3:4d:b1:40:d9:df:98:
                    c6:d8:6d:14:ee:85:24:a9:e2:2e:f4:cf:da:01:69:
                    2a:90:6f:fe:47:f6:d2:e3:7d:1c:f6:a5:57:e8:d4:
                    7d:d8:84:a4:e4:75:39:85:46:30:47:fe:2a:0a:07:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:25:B6:A0:CF:83:05:A8:A4:5C:7E:7E:93:70:E8:11:33:91:AD:48
            X509v3 Authority Key Identifier:
                keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:15:fe:cb:84:a4:90:bb:f8:0b:6c:ab:16:f4:31:9c:c3:9c:
         f3:f7:8a:db:b2:f3:03:1d:85:88:97:28:7b:07:63:95:ed:44:
         1b:ef:5a:b6:69:3f:31:1f:2e:b2:70:26:a5:0d:3c:51:65:dc:
         93:f8:6c:15:38:6f:a1:5e:c1:44:13:e7:e4:bb:41:8f:5a:c9:
         d0:b0:4f:6d:dd:5d:e4:ea:63:5e:ad:81:20:3a:2c:c2:d0:a0:
         ed:57:60:1c:8c:fb:63:42:ba:6e:87:2b:4e:b9:82:5c:4d:b1:
         95:0f:d0:b4:db:ef:93:0a:ff:29:cf:71:35:ec:ec:a6:22:41:
         4a:bd:2c:73:a7:fa:d3:c7:53:2d:a0:f8:9c:39:1e:76:c8:6b:
         d1:db:db:04:53:89:75:28:9b:4e:c4:40:6b:24:04:af:5f:1c:
         b2:d9:dc:7c:5e:da:f8:70:82:4d:39:62:2b:fe:5a:d3:8f:a9:
         6b:72:ef:0c:db:22:06:57:22:e8:e3:60:6c:73:68:9e:52:ba:
         51:19:cb:48:56:96:25:dc:b6:ef:4f:d8:be:8c:0a:95:4e:f2:
         c3:da:a1:df:5b:32:7d:8b:75:30:26:b5:00:3f:24:fe:a9:a9:
         2d:1a:25:5b:df:65:f0:5d:24:d7:fb:b9:0b:07:bb:1b:f9:ba:
         52:94:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:20:45 2025 by rpki-client