Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File:                     8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier:          SGbGF5fOyg++4oaQ49P1YcteidnudnJwZw1r7Zv8Rac=
Subject key identifier:   A9:53:08:44:54:4A:5C:30:6D:89:1D:36:45:99:38:87:91:AA:F1:5D
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer:       /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial:       01964F6C33118CD9F978D33AE28471B9E7EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 19:00:13 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:13 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:13 +0000
Files and hashes:         1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: uFXAmKKJ4xrY4fgOkpXnUF12px0w2aaUeUR/Uo/O+rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:33:11:8c:d9:f9:78:d3:3a:e2:84:71:b9:e7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
        Validity
            Not Before: Apr 19 19:00:13 2025 GMT
            Not After : Apr 20 19:00:13 2025 GMT
        Subject: CN=a9530844544a5c306d891d364599388791aaf15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:da:32:96:15:8f:10:78:3e:a8:21:bb:cd:
                    46:36:46:0d:09:62:d7:15:39:2a:d8:ee:56:48:71:
                    28:d1:b7:1a:2d:bf:b1:2d:36:09:92:09:c9:4c:9b:
                    7a:cb:71:85:67:fe:b2:14:c2:86:de:27:7c:0f:af:
                    1b:08:44:a9:52:12:4a:28:aa:39:77:9c:ff:af:80:
                    24:c7:96:f9:27:4d:38:21:7a:4a:a3:b8:f0:dd:38:
                    44:62:bd:1d:a8:dc:f0:56:85:0d:73:ad:81:8b:bb:
                    e5:61:4f:58:06:ab:af:26:4c:00:b3:5b:78:05:7a:
                    10:20:ec:0d:d6:55:eb:a5:50:95:64:b0:01:2b:cd:
                    a3:89:6f:4e:9b:84:f0:e8:7d:3d:c3:8e:9f:f8:57:
                    72:ea:08:ef:12:6d:a5:9c:e8:f8:26:ff:7a:21:56:
                    f2:c3:78:7c:58:9b:53:6b:0e:92:92:73:0e:5e:f4:
                    7c:65:fb:73:35:7d:69:55:96:a9:a5:13:12:09:c3:
                    33:f6:4f:38:53:33:6c:ba:cb:c0:f3:4b:c1:f0:6f:
                    ec:f3:15:37:1d:b0:e1:5c:14:d0:38:4f:65:78:df:
                    b9:8d:88:43:71:93:d0:3a:97:be:a0:2b:9c:13:aa:
                    7e:85:93:3e:04:9b:85:2a:5b:c1:68:3d:20:4d:9d:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:53:08:44:54:4A:5C:30:6D:89:1D:36:45:99:38:87:91:AA:F1:5D
            X509v3 Authority Key Identifier:
                keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:66:94:ac:81:36:92:92:ef:c2:71:a7:7f:6b:eb:61:32:ca:
         77:34:80:7f:2b:fb:11:07:96:64:18:46:99:9a:d2:52:67:ee:
         69:a2:64:67:d9:52:da:db:06:0a:a9:38:e7:b9:f8:ef:a0:b9:
         2f:81:35:b4:fd:06:05:e5:2d:62:12:e8:e8:ef:7d:c0:f4:b4:
         04:68:79:bc:b5:6f:5c:98:4a:a4:4e:d5:24:4e:8c:e5:dc:0d:
         34:86:79:ef:01:77:62:5c:b0:f5:d8:b3:35:8b:af:46:37:d4:
         1c:40:c8:6b:5c:b6:cd:8a:96:cc:03:93:ff:32:4d:d4:49:d4:
         5d:fb:95:07:42:e1:8a:49:71:4b:7b:9a:05:e2:37:8f:a1:b1:
         9e:bb:8d:7c:50:ca:87:a8:e3:a9:db:4f:83:75:2b:01:1f:96:
         9e:49:9a:01:22:24:cb:86:dc:ed:ad:eb:b4:0d:72:fa:bd:e2:
         89:a0:43:bd:65:35:85:10:07:d0:c6:7f:4c:19:3e:48:44:a7:
         04:eb:78:6a:2c:0e:6f:67:f3:8d:4e:9a:eb:0d:26:3f:3a:32:
         60:92:f3:21:b9:df:1d:ff:33:91:4d:0c:af:38:98:f5:dd:76:
         41:d9:34:e1:c4:8a:87:0a:fb:1c:d4:54:d0:a1:c6:e4:7c:9d:
         56:23:67:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:42 2025 by rpki-client