Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File:                     9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier:          8yK2VOEYfDDp8BClRZ8M8xWVuwDjP4f2JiH/NPTSxQE=
Subject key identifier:   CF:EC:F6:7F:C6:B3:E9:B0:6F:F9:98:3B:56:F0:7C:CA:64:BF:8B:B5
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer:       /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial:       019747B10C8AB83F077134076A3588A9F575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number:          0136
Signing time:             Sat 07 Jun 2025 00:01:14 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:14 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:14 +0000
Files and hashes:         1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: HUbarLAdFALXj/I1IlzERag1cNr4nU7MrX9CF5k0tpY=)
                          2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b1:0c:8a:b8:3f:07:71:34:07:6a:35:88:a9:f5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
        Validity
            Not Before: Jun  7 00:01:14 2025 GMT
            Not After : Jun  8 00:01:14 2025 GMT
        Subject: CN=cfecf67fc6b3e9b06ff9983b56f07cca64bf8bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:58:c2:44:37:f4:55:7f:9e:ab:62:74:9e:
                    e9:fa:99:6f:d3:f9:3c:b7:05:91:9e:6c:44:e9:c8:
                    a0:c3:32:00:fe:e3:e4:c7:89:db:36:bd:8d:78:8e:
                    52:f8:c5:2a:76:da:b9:c8:35:b4:0a:8a:7c:66:25:
                    b5:af:e1:bd:ef:d8:db:9d:2a:95:3a:ad:7d:93:84:
                    04:80:87:1f:04:c7:24:69:a3:70:6e:54:6b:11:18:
                    39:ec:99:a6:e9:66:c9:19:4a:da:dd:72:c7:f7:92:
                    94:f3:dc:9c:d3:18:89:65:b5:30:3e:6b:40:48:ca:
                    dc:6f:8c:3b:32:9b:ad:68:d7:e7:c8:bb:e4:07:11:
                    1f:55:b7:65:d4:01:c0:be:06:a1:8b:2d:c4:fd:4c:
                    08:a6:4e:3d:f3:6a:60:72:ee:51:e8:5e:b4:57:b6:
                    36:99:fb:8d:84:a0:35:4c:72:57:e6:47:c9:30:19:
                    32:88:cd:63:72:3a:80:c6:96:6f:46:ca:89:1b:e1:
                    7d:1a:ae:3a:9e:88:fd:76:64:c8:b5:7c:47:b1:42:
                    66:38:e4:b2:3d:96:0d:67:e9:87:3d:97:12:aa:98:
                    c6:92:a1:be:04:5f:61:5b:f3:96:99:11:64:f3:5a:
                    71:a3:25:c7:c7:69:06:5d:42:24:63:38:af:12:09:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EC:F6:7F:C6:B3:E9:B0:6F:F9:98:3B:56:F0:7C:CA:64:BF:8B:B5
            X509v3 Authority Key Identifier:
                keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3a:f4:3b:c1:64:77:f0:d4:9d:fc:fb:08:5c:ae:11:30:8a:
         5d:b4:91:01:c1:14:2a:df:0b:67:79:e5:0a:2c:22:51:60:63:
         6c:52:37:9b:89:3f:48:43:0e:2e:15:c4:b2:0b:df:e6:1b:9c:
         ea:ff:bf:cd:ad:d9:76:e8:a0:eb:44:04:93:73:e4:e0:3f:cc:
         b0:e9:a5:ea:c4:f9:58:d3:3f:e7:05:e6:55:6b:57:10:00:00:
         83:b8:65:04:c8:66:da:0f:71:65:e7:d6:ec:df:60:99:99:71:
         17:de:3d:25:f3:51:75:33:09:32:4b:9a:f1:23:3f:9a:2f:7f:
         42:42:1e:dd:b5:ff:c5:86:16:fb:dc:33:a9:eb:52:a3:27:1a:
         b5:5b:5c:5c:39:5b:b0:ef:04:53:23:de:a2:0d:5c:8f:37:50:
         34:bc:97:67:7b:8b:c8:99:a0:de:92:04:95:e0:4b:9f:0c:7b:
         04:1f:e3:9a:d9:5b:51:6b:80:07:84:d0:06:bd:dc:e5:c6:b0:
         e9:22:a5:ef:bd:e2:ff:73:22:f6:11:3f:38:e5:71:07:b2:23:
         57:71:a0:69:7c:f8:5d:14:ef:be:d5:4c:e6:41:16:a2:3d:71:
         c2:d7:4b:f5:9e:cd:48:56:10:fe:fd:d0:24:12:32:c6:23:16:
         1e:a1:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:06 2025 by rpki-client