Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File:                     1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier:          LVazHT1I8ZEtrJJ4VLk3okQXbu4CK5UZp2D97ZIHp/w=
Subject key identifier:   63:41:E8:26:4A:41:C8:73:B7:D1:D2:06:22:94:9D:BE:6E:F7:88:05
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer:       /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial:       01974A0C867AAB8E79C09156704BFE21BF8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number:          0592
Signing time:             Sat 07 Jun 2025 11:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:24 +0000
Files and hashes:         1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: ew1cN9T+ypJfXcjSqc+oAVPlrC5fi6vDSJv9Jffz0IM=)
                          2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:86:7a:ab:8e:79:c0:91:56:70:4b:fe:21:bf:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
        Validity
            Not Before: Jun  7 11:00:24 2025 GMT
            Not After : Jun  8 11:00:24 2025 GMT
        Subject: CN=6341e8264a41c873b7d1d20622949dbe6ef78805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:93:a0:0a:7b:f0:d6:69:59:9e:69:a5:ae:d9:
                    61:76:f8:05:5d:0a:d6:1c:87:34:b3:6d:69:53:1a:
                    c4:dd:a4:65:ac:20:10:90:00:92:55:52:49:c6:72:
                    85:ec:5a:2c:f7:49:70:38:ce:70:b8:50:d4:15:35:
                    03:cb:6f:28:f0:bd:cc:26:67:9e:76:18:4b:01:94:
                    9e:82:a1:f7:63:07:b7:a8:b6:5d:e8:a8:d1:ee:a3:
                    56:27:03:76:e3:26:2b:f5:b0:7c:25:83:c8:e7:d5:
                    21:46:30:d4:92:20:9b:da:66:85:b4:28:42:84:90:
                    ba:fa:e2:2c:18:c5:c7:cd:93:6a:f5:9f:58:0d:df:
                    b8:e1:80:ec:20:f2:f1:d1:3a:8a:a2:aa:03:1c:f0:
                    89:60:20:59:2f:4c:f4:fc:a7:fd:b7:ee:3f:ab:e2:
                    8c:24:f3:e4:58:82:53:e1:da:a1:6e:e4:d1:52:37:
                    1b:93:07:86:41:29:3b:fc:e7:38:8f:eb:e3:fc:a7:
                    5a:02:08:f9:ba:69:a9:f6:76:37:3e:02:28:8e:4d:
                    a5:4f:b3:03:80:50:a1:16:1a:8a:84:cb:27:95:35:
                    93:c6:29:75:14:dc:8f:fe:d8:95:30:8d:bd:e3:9c:
                    3b:d7:5d:0e:0c:3a:d7:5a:ec:0b:e8:02:44:0d:47:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:41:E8:26:4A:41:C8:73:B7:D1:D2:06:22:94:9D:BE:6E:F7:88:05
            X509v3 Authority Key Identifier:
                keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d3:2a:ec:f2:86:00:d3:25:3d:b8:39:92:1a:8f:56:bd:15:
         90:00:32:6d:97:18:74:cf:c8:c6:97:49:f9:9c:8c:b3:32:e2:
         5f:b6:8c:eb:b6:b1:60:82:9c:3b:7e:a3:a4:e6:fb:16:5d:4e:
         45:e9:95:fa:da:4f:2f:6d:fd:01:71:a7:b8:e5:7f:2f:50:50:
         0d:6d:e1:ab:28:23:f7:c8:af:31:e4:62:08:14:3f:c3:36:5b:
         1b:65:cd:19:e6:d9:8e:69:de:ac:bd:4d:33:19:62:d8:7c:3b:
         fb:f1:e3:7a:d7:09:c8:c4:fb:13:eb:34:c9:e0:62:7d:94:1a:
         fd:5a:c6:54:5b:44:5a:71:36:08:a2:0e:b0:43:90:8a:53:b3:
         e4:18:32:73:30:d4:36:32:6d:97:ac:d3:05:f0:6d:9b:e9:97:
         5d:2b:60:d1:13:88:1d:68:bf:4d:d7:8a:83:81:2e:82:8f:f6:
         20:1f:dd:c0:02:23:e6:20:f8:ce:68:78:e8:d0:5b:f5:85:c6:
         5a:c9:f7:8f:82:ca:39:f3:27:e3:e0:0d:05:89:1a:44:8d:c0:
         f4:6b:f9:6a:66:ed:25:ee:9f:b0:1a:2c:7e:b9:60:55:73:d5:
         be:9b:aa:c1:d1:12:81:d2:06:ca:50:b9:e8:9b:90:34:b6:da:
         c8:0a:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:23 2025 by rpki-client