Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File:                     8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier:          9XIY5jJwuxDV3lgBg/pMSQKfnAB4tATWw894QbG2SK4=
Subject key identifier:   DA:7B:CF:BD:3F:56:FA:BD:55:DF:CA:EB:E2:80:B6:7D:58:9B:43:02
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer:       /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial:       019747E731FBB2A6D599133DE51A0EEE39D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number:          04FB
Signing time:             Sat 07 Jun 2025 01:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:23 +0000
Files and hashes:         1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: UkwXpeXtTi0QCXLfTXCeIPivJP4qzeiUNw8WK4BtdCQ=)
                          2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:31:fb:b2:a6:d5:99:13:3d:e5:1a:0e:ee:39:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
        Validity
            Not Before: Jun  7 01:00:23 2025 GMT
            Not After : Jun  8 01:00:23 2025 GMT
        Subject: CN=da7bcfbd3f56fabd55dfcaebe280b67d589b4302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:86:b8:94:59:fc:bc:04:19:a9:8a:91:0f:
                    24:fe:0c:3e:41:e3:9a:eb:be:41:54:49:83:00:4a:
                    0e:e0:0c:3f:46:41:ea:d1:fb:a4:7c:4f:58:fa:9b:
                    bc:8c:63:87:a6:56:b9:03:12:5d:ed:15:7f:b5:71:
                    4e:b6:8a:e2:2c:0c:a3:e7:18:cd:be:6a:03:d6:aa:
                    c0:28:1d:f8:d5:05:72:05:67:98:29:0c:69:1b:27:
                    19:8a:a8:c4:54:ff:21:83:74:2a:fa:fb:d5:06:ed:
                    2a:a3:aa:4f:a4:71:41:82:9e:a8:64:72:7a:94:05:
                    ed:81:a0:90:cd:dd:0e:a9:26:10:e1:91:2c:dd:eb:
                    3a:dc:56:68:8b:18:86:7c:57:d8:75:0e:12:bb:37:
                    4f:33:86:05:c7:0f:7d:cf:81:f3:77:3f:eb:4d:e6:
                    2d:16:c8:26:c9:5e:35:ed:d4:9f:e8:47:b6:82:a0:
                    02:39:e3:73:6c:99:77:57:fd:3c:6b:6b:df:7a:68:
                    e6:02:a3:c2:26:24:16:fb:e2:54:0d:a3:dd:d8:63:
                    ae:a3:39:04:f2:b9:d9:ed:cd:9d:ee:cf:7c:24:22:
                    52:09:5b:bc:4c:67:42:5f:2f:c4:64:5b:83:22:a8:
                    5d:e2:7b:74:6a:1d:68:12:4d:b6:40:19:e5:50:ad:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7B:CF:BD:3F:56:FA:BD:55:DF:CA:EB:E2:80:B6:7D:58:9B:43:02
            X509v3 Authority Key Identifier:
                keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:10:b6:77:f5:81:14:d9:c1:fa:76:ad:42:1e:ef:b6:fd:c3:
         34:7d:45:6d:90:05:d6:3c:55:c7:5a:56:15:57:c3:33:c4:18:
         09:53:24:0b:2e:fb:7f:a5:db:61:ff:e3:13:ed:f2:25:eb:c1:
         d5:c0:a2:cf:71:3b:5b:79:a8:7c:fb:d9:ea:c0:8b:91:e2:90:
         68:f2:72:2b:d5:16:35:7b:10:2a:e2:ff:b5:5c:5a:19:a8:48:
         87:96:90:4a:43:dd:61:52:73:21:df:0a:9f:2a:6e:d5:92:3a:
         1a:fb:bd:ed:f7:a7:9f:71:8f:b0:4f:74:af:c4:47:a2:51:26:
         cc:9b:c8:4f:a8:e0:1e:c2:83:60:7b:8a:ad:3f:5d:5a:d6:47:
         e2:33:30:7d:ca:44:86:0c:02:0d:d1:41:e8:8c:27:81:cd:60:
         87:37:45:70:b5:14:df:66:8e:65:64:79:19:9c:0c:9f:8b:1b:
         c5:16:d4:27:22:d9:c5:53:44:bd:24:84:c5:16:39:1a:c4:ff:
         d4:f1:a7:94:31:42:71:3b:12:e2:d9:2e:bf:d1:67:54:06:e5:
         85:11:85:35:ee:5e:97:4e:f0:39:34:f8:4c:65:5e:09:f9:a5:
         f3:84:a1:f7:c5:18:60:3c:36:e4:8d:49:cc:99:f7:2d:28:27:
         07:ed:e9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:42 2025 by rpki-client