Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File:                     j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier:          b94sY9O8Tgx9/zIQMDWX3/1frfhHOxJHKQt1S6Zd0YA=
Subject key identifier:   7D:D6:9C:4F:43:47:E0:51:3B:FA:A9:2C:6A:56:C0:33:DA:00:5E:19
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer:       /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial:       019768BBC8AA3227D4C57668C5F712EBC6FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number:          149E
Signing time:             Fri 13 Jun 2025 10:00:26 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:26 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:26 +0000
Files and hashes:         1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: H1BFO+4OPrsf8oVR7Eek+aiceiV6Si//ok9tkNBF/tA=)
                          2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:c8:aa:32:27:d4:c5:76:68:c5:f7:12:eb:c6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
        Validity
            Not Before: Jun 13 10:00:26 2025 GMT
            Not After : Jun 14 10:00:26 2025 GMT
        Subject: CN=7dd69c4f4347e0513bfaa92c6a56c033da005e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:99:5e:92:4e:ec:9e:e7:42:02:c9:b8:0c:
                    ef:9e:f7:0c:7b:b8:04:96:9e:f9:b6:10:38:f0:8a:
                    3e:36:6f:47:05:9e:4b:d7:ac:eb:17:f7:0e:cb:3d:
                    2a:f3:49:7f:1f:86:a1:ee:41:08:cf:ee:77:e7:f3:
                    a2:a2:a4:17:28:b1:a6:ad:90:fd:f7:40:c7:a7:4c:
                    cb:62:bc:24:15:66:18:d2:f8:7b:c5:40:b8:94:ed:
                    59:d5:38:ff:50:6c:77:86:dd:6c:45:3d:92:6b:20:
                    d7:54:9d:30:28:9f:36:1d:bf:cb:54:5c:af:64:64:
                    40:95:33:e8:2e:f1:12:d4:a5:65:89:7e:9f:8a:6d:
                    2a:c1:54:18:66:70:be:38:4c:98:36:e2:1b:7c:91:
                    81:51:d0:43:0a:87:ed:7e:b4:ba:13:c6:7f:ee:8b:
                    82:9e:53:f7:91:b0:dc:30:eb:2f:27:8a:be:20:17:
                    3d:ce:30:e0:81:91:d1:c2:05:bb:75:0d:53:38:c2:
                    59:a8:81:4d:e9:54:a6:3b:4e:fb:36:ca:49:e1:b4:
                    31:e5:a2:ec:30:69:ec:6c:a7:95:8a:7c:39:40:cf:
                    05:03:77:06:80:a6:ff:8d:95:0e:30:33:97:a9:4a:
                    29:83:e3:78:2a:32:1b:18:f3:0b:3b:5d:a0:3c:60:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D6:9C:4F:43:47:E0:51:3B:FA:A9:2C:6A:56:C0:33:DA:00:5E:19
            X509v3 Authority Key Identifier:
                keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fa:ca:f0:3b:05:2b:f1:37:ba:63:f6:55:d4:2c:ea:ec:30:
         25:03:2b:96:6d:34:b4:5d:89:0c:75:52:36:c8:14:ac:5e:52:
         b7:5c:46:a0:fc:90:f4:6e:79:54:0b:a6:0f:c4:a2:a8:cf:bd:
         b7:92:35:3a:d4:51:db:f7:90:2e:a8:af:98:0c:71:42:ea:bb:
         ab:7a:ff:16:74:b4:cc:5e:98:da:a5:e7:05:24:c4:c9:48:ab:
         dc:70:98:1c:53:c7:bf:13:a4:2f:05:b1:77:0e:7a:26:d4:5f:
         39:92:f8:78:88:21:7c:52:29:ef:d3:a5:2c:c9:ec:2f:ed:ee:
         d7:d4:16:74:0d:c5:e9:02:d2:cf:5b:b8:d1:8c:b1:4a:fe:c1:
         1e:85:bf:c1:05:00:fb:c1:23:25:40:13:c0:8d:6d:56:b4:5f:
         7d:da:3e:4a:4c:c6:57:95:5a:07:72:7f:6a:45:a1:b2:32:6f:
         0d:b4:61:af:84:53:96:7b:48:89:37:f8:24:b6:71:ad:5e:80:
         cd:57:56:ea:39:85:08:b4:64:21:fc:8b:d4:73:79:9d:99:a1:
         81:dc:1a:21:8c:14:f4:eb:f6:99:e8:24:79:76:ba:e3:d7:55:
         ce:44:83:68:d4:07:2d:fc:5f:8d:45:2f:97:30:00:e1:20:5b:
         93:d7:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:08:39 2025 by rpki-client