Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File:                     T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier:          T6YHzjqxLGFVr6mpJ9uEuL3cCqZbQzPIYb2HTZitvQk=
Subject key identifier:   71:91:9B:3E:B8:12:9C:E1:EB:2F:4C:5F:0F:0F:47:B4:26:91:7E:B6
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer:       /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial:       019751589D1B9A82C60C8E3C758FCFAFFF42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number:          0EE2
Signing time:             Sun 08 Jun 2025 21:00:51 +0000
Manifest this update:     Sun 08 Jun 2025 21:00:51 +0000
Manifest next update:     Mon 09 Jun 2025 21:00:51 +0000
Files and hashes:         1: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: 2sVihnG43ndrwE7/Y0vJILIb8utsXjdQ5WRi2KqATDw=)
                          2: g8aVgQMBCBvrswyPJiarAr7VpUM.roa (hash: 5HrRjfLYW0OBZJTQk2MmBVB6mxhIUJtfwo5zMV6ZrEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:58:9d:1b:9a:82:c6:0c:8e:3c:75:8f:cf:af:ff:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
        Validity
            Not Before: Jun  8 21:00:51 2025 GMT
            Not After : Jun  9 21:00:51 2025 GMT
        Subject: CN=71919b3eb8129ce1eb2f4c5f0f0f47b426917eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2a:7d:c2:33:87:22:30:fc:c0:61:44:37:ce:
                    74:96:00:56:b6:96:5a:08:47:93:17:68:e2:bb:37:
                    10:99:60:4b:37:16:95:26:ee:c6:01:ee:02:ec:c5:
                    c8:ba:6c:60:7d:53:32:cd:a8:13:64:28:fe:30:18:
                    3a:8a:fc:b1:40:5b:37:32:bb:6b:2d:c1:c8:bd:51:
                    d0:29:0b:8b:69:4f:fd:c3:a8:be:7b:6d:d1:da:6a:
                    a1:e0:14:53:fe:a2:68:97:37:31:39:7a:56:f4:d3:
                    22:78:74:f6:a4:3f:bb:a1:2c:1d:6f:e7:12:e0:58:
                    77:0a:d4:be:cb:9f:a7:8e:3a:81:f3:b3:5f:04:e6:
                    6b:f4:67:d7:4e:82:37:62:85:90:9b:95:5e:b9:7c:
                    7b:be:5b:06:d6:77:16:be:82:0e:a0:67:ba:a7:e3:
                    3e:78:83:d9:a7:ae:29:79:fa:1b:5f:46:66:12:00:
                    b2:be:37:7b:4f:e4:8b:d3:30:bf:64:a8:67:2e:4d:
                    fd:23:66:8b:db:23:01:a6:37:28:90:43:43:bb:47:
                    9f:58:6d:4b:5d:5c:02:3a:3e:a8:91:8f:6c:d0:19:
                    f6:3b:60:9a:08:6b:67:04:63:ac:70:1e:7e:c6:ef:
                    52:8f:55:c1:55:57:30:2f:9e:56:de:b3:9f:ef:83:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:91:9B:3E:B8:12:9C:E1:EB:2F:4C:5F:0F:0F:47:B4:26:91:7E:B6
            X509v3 Authority Key Identifier:
                keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:05:b7:fe:a1:1e:e6:ca:d4:87:e4:29:38:2e:36:75:70:84:
         2e:d3:4a:58:80:6d:92:76:f6:4d:de:5a:7c:50:81:48:71:79:
         3d:af:f7:3a:82:6a:f3:84:a3:52:ff:67:42:22:2a:d0:1d:46:
         fd:97:7f:d5:2c:f9:2a:ed:a3:da:a5:4e:63:57:d4:42:9d:e9:
         16:3e:a7:74:6c:82:75:3b:00:67:02:ee:d2:43:78:2e:8a:c7:
         60:ff:11:fa:63:a4:ab:9a:1a:8f:e7:8c:b5:35:2e:23:b7:bc:
         72:61:0f:49:f4:b5:76:e5:c0:81:62:59:84:d2:e0:d6:cd:03:
         b7:d8:df:30:60:fe:05:f4:a6:fe:1c:1d:b9:84:77:35:52:97:
         06:1a:31:6d:0e:78:0c:f8:f1:25:e2:28:c4:82:34:61:14:9b:
         7e:cd:d8:18:00:8e:ba:9d:5a:7f:c1:c9:dd:06:96:f2:45:d9:
         d2:6a:e3:e0:23:cc:74:f4:39:30:bc:ec:c5:fa:9e:f4:31:ff:
         be:dc:43:a0:93:19:79:4e:5a:eb:78:cd:2d:6f:b6:a0:3e:21:
         ce:77:33:2b:e1:34:e3:e1:7e:1a:1b:f1:29:24:c3:c5:d3:d9:
         dd:65:ec:b3:0b:fb:62:f7:a4:66:39:eb:45:54:0b:02:05:83:
         6b:63:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:14 2025 by rpki-client