Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File:                     ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier:          vX0esdFLj0eVVEXsOLk1jDw74ZGf7q/Id8AlcNBSG8c=
Subject key identifier:   D4:44:DD:5A:01:17:6F:D0:54:58:DB:DC:A8:29:76:17:65:88:E5:9B
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer:       /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial:       019760273E388AEF82BC93E4C8EDB9D76CC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number:          1220
Signing time:             Wed 11 Jun 2025 18:01:13 +0000
Manifest this update:     Wed 11 Jun 2025 18:01:13 +0000
Manifest next update:     Thu 12 Jun 2025 18:01:13 +0000
Files and hashes:         1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
                          2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: TWv+fW4kiIIUSLrzbxj6taWJemnunFXjXsnqsuj43WM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:27:3e:38:8a:ef:82:bc:93:e4:c8:ed:b9:d7:6c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
        Validity
            Not Before: Jun 11 18:01:13 2025 GMT
            Not After : Jun 12 18:01:13 2025 GMT
        Subject: CN=d444dd5a01176fd05458dbdca82976176588e59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:03:d6:fb:99:d9:1d:f2:1b:22:56:a2:1a:
                    88:98:22:ac:25:d3:ae:74:d2:b0:46:30:90:07:87:
                    9a:94:62:bf:d2:d7:a3:a2:a5:bb:b4:11:9e:bd:10:
                    80:11:1d:9b:42:b8:c8:44:64:ba:e9:c3:a8:62:58:
                    46:33:c6:31:9e:7d:66:9b:98:a2:02:50:6e:06:09:
                    87:21:3e:b0:29:2d:18:ed:c4:f7:97:63:d4:db:a5:
                    13:ec:6f:29:19:57:88:d0:e0:4b:6d:3f:47:7e:b7:
                    ea:7b:30:ee:40:50:05:04:e5:8e:cc:b4:29:3b:d5:
                    15:97:46:89:a5:0f:15:bc:64:e1:dd:f7:24:72:20:
                    a3:4d:dc:0f:7d:e5:19:ac:f8:32:02:4b:6d:8e:a2:
                    5c:65:a7:0d:7b:13:79:0f:9a:45:26:2e:55:cc:80:
                    83:e1:ad:06:5f:ac:a4:35:3d:b8:9b:07:4b:08:0d:
                    c8:6f:18:fb:5f:5c:cf:6f:7f:5b:f3:d4:73:85:7f:
                    07:30:e2:d0:c0:e9:e3:f8:e1:ce:05:a7:4e:7c:e2:
                    c9:fa:e0:69:48:89:93:72:38:85:65:59:97:36:04:
                    c9:79:0f:fb:a7:d7:ff:80:dd:a9:6b:1c:5d:ae:18:
                    2b:8c:61:9a:13:b3:5e:45:e7:d0:29:45:f9:d1:86:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:44:DD:5A:01:17:6F:D0:54:58:DB:DC:A8:29:76:17:65:88:E5:9B
            X509v3 Authority Key Identifier:
                keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dc:12:bc:32:27:a7:9d:aa:17:ae:74:4c:49:84:cf:fa:e6:
         e5:1f:a8:9a:a2:92:cd:0c:d1:a1:f3:bd:2b:e6:c6:a1:ce:b4:
         af:54:d4:52:d8:cb:7e:ef:34:be:26:0d:0b:bd:ea:ce:9f:af:
         1f:63:97:2f:60:45:0b:a7:30:2e:3a:cb:e7:e4:de:47:54:76:
         56:07:fe:9a:2c:a1:61:13:63:cd:99:ab:42:43:8e:27:b2:3c:
         11:e8:af:e0:27:3f:fd:3a:13:93:7b:68:56:27:3a:20:eb:64:
         42:47:a6:34:70:39:eb:ec:0c:69:05:0a:e3:dd:20:6a:dd:52:
         d6:49:69:aa:24:e9:91:94:a7:b2:14:2e:7d:6e:63:48:ac:2a:
         49:00:0c:1e:7e:04:94:6d:6c:81:51:90:74:70:bd:15:ba:a0:
         80:37:ec:e9:d5:ed:e7:3b:f4:4f:89:69:4f:47:68:aa:61:1a:
         d7:9d:f2:cc:4a:f3:60:b8:85:40:0e:70:62:37:d0:62:21:50:
         ce:88:36:f2:1f:dc:d8:54:0c:c9:91:47:d4:79:88:cb:29:60:
         30:55:77:bd:ef:05:6b:97:d1:f5:85:67:f2:8d:be:27:51:0c:
         c4:46:7b:4e:f4:bc:03:c9:6e:d4:40:bd:3c:5c:22:ca:ec:cc:
         80:c6:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:29:09 2025 by rpki-client