Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File:                     8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier:          BznM3Z+1cgopEt75xr/BkvYxU6qUcaidMaNaswhg4oE=
Subject key identifier:   B6:FD:B6:C3:E5:E9:E8:F1:12:49:97:24:61:E5:28:77:2C:7A:42:A3
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer:       /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial:       01976102B0BA4CEA5E43D9F1E4F132652F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number:          100A
Signing time:             Wed 11 Jun 2025 22:00:55 +0000
Manifest this update:     Wed 11 Jun 2025 22:00:55 +0000
Manifest next update:     Thu 12 Jun 2025 22:00:55 +0000
Files and hashes:         1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: 5La6y/arhGq/y79g4ZhB77wlfRe4sw0l4HTsXl7vbJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:02:b0:ba:4c:ea:5e:43:d9:f1:e4:f1:32:65:2f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
        Validity
            Not Before: Jun 11 22:00:55 2025 GMT
            Not After : Jun 12 22:00:55 2025 GMT
        Subject: CN=b6fdb6c3e5e9e8f11249972461e528772c7a42a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:06:1a:bc:40:12:41:7f:38:37:9c:6e:99:
                    70:6a:51:e1:c1:a8:25:e1:eb:c1:3a:af:e1:13:52:
                    46:dc:7f:9b:29:88:0c:de:41:5c:16:52:76:44:0b:
                    44:76:ce:67:52:21:f1:fe:4b:9b:69:20:ed:49:2a:
                    b1:2a:95:9b:4f:ac:60:e1:bd:1a:0c:f9:13:3e:79:
                    e0:e5:a8:60:44:ca:63:0e:71:ae:71:67:ef:9f:67:
                    73:b8:04:36:d7:04:fa:8e:75:0a:9b:da:60:a6:21:
                    42:2f:a5:d9:84:d1:e5:b5:3f:1b:8a:cb:eb:5f:76:
                    dc:b4:e2:63:17:30:9b:04:ef:38:43:b7:78:79:88:
                    04:18:e1:ba:50:84:30:47:c4:43:a9:99:70:6d:57:
                    6b:44:0b:88:fa:3d:46:bf:98:5f:9a:c3:d9:d3:91:
                    d6:17:43:e1:81:73:c6:8f:21:a9:15:f3:da:33:2c:
                    2a:4a:43:50:62:bd:ff:cc:72:9f:fc:40:b5:0e:ba:
                    46:6e:c0:f3:ae:b7:b6:6d:98:92:30:be:ad:1e:22:
                    15:40:65:a2:31:be:66:37:de:fc:c1:e2:4d:e2:64:
                    b3:47:57:f6:8e:68:e9:84:0e:f1:f9:df:c5:a3:86:
                    70:7a:4f:61:53:13:eb:b3:9f:3c:54:db:46:c3:55:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FD:B6:C3:E5:E9:E8:F1:12:49:97:24:61:E5:28:77:2C:7A:42:A3
            X509v3 Authority Key Identifier:
                keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2c:e1:5f:b6:d7:c2:9a:e9:7c:7a:c8:85:7c:81:1b:46:dd:
         63:d4:a6:81:69:d0:be:e5:8a:d1:f7:a1:47:96:c1:53:37:7f:
         03:ae:8c:de:94:d2:cb:6c:ce:b1:dd:68:a6:e0:57:5f:e2:cf:
         9e:f7:48:ef:94:dc:74:c6:e7:c0:7a:f9:60:27:1e:be:db:5b:
         90:8f:bd:9c:bd:c0:54:37:30:77:ab:fc:03:a1:54:61:86:34:
         41:4b:d2:4d:9a:0c:fc:0a:fa:8c:7a:2e:3b:5e:b1:48:b0:ef:
         ac:c1:0a:22:39:c2:9b:a6:92:f5:0b:1f:fd:f3:32:1d:5a:34:
         ad:c3:cc:48:ea:91:20:ef:f7:03:86:d4:14:56:43:e1:d9:25:
         71:71:37:9f:95:00:aa:b8:8c:d4:da:c9:c4:56:ee:2b:49:11:
         a8:03:3a:6c:8a:6c:72:c6:c3:d9:a2:39:1a:86:47:11:a8:32:
         7c:53:92:65:43:76:08:3c:53:77:08:dd:52:bd:7f:9c:97:d1:
         55:2e:f6:8f:97:a1:0e:4b:35:69:87:39:b0:3e:98:13:b2:47:
         57:33:81:36:54:53:bc:93:99:3b:37:2e:6c:d8:4e:77:ad:b0:
         99:e2:7f:a3:1c:6d:10:a9:b0:0c:8c:b6:f5:bd:4f:e0:88:5f:
         79:8e:d8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:07:19 2025 by rpki-client