Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File:                     BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier:          xQ7XOIPgMA+3NuE0DeQS1jSp3mgtzRRbGxbv/wO/oXI=
Subject key identifier:   89:A1:26:9F:A0:BC:26:25:2E:8F:F9:8F:4F:DB:1B:15:1A:24:2D:46
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer:       /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial:       01974D0E3CBD3F84258D6B9D88A3ED465A7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number:          037D
Signing time:             Sun 08 Jun 2025 01:01:08 +0000
Manifest this update:     Sun 08 Jun 2025 01:01:08 +0000
Manifest next update:     Mon 09 Jun 2025 01:01:08 +0000
Files and hashes:         1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: SoSYUjDsCk5OUyScdxV52wH/b3U3XRbUTtLm4WyuTTE=)
                          2: J8Ib4FQqHMHCvKM2y1SUnog9X74.roa (hash: f8Ibq/aTG18/pniIFSUAU4E687jQnL2EjkQj6M5lHl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:3c:bd:3f:84:25:8d:6b:9d:88:a3:ed:46:5a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
        Validity
            Not Before: Jun  8 01:01:08 2025 GMT
            Not After : Jun  9 01:01:08 2025 GMT
        Subject: CN=89a1269fa0bc26252e8ff98f4fdb1b151a242d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:58:37:11:f6:b4:3c:75:a0:23:fe:5d:70:
                    f4:6b:8c:b5:c7:ae:5f:e5:d7:df:f5:e6:21:e3:0b:
                    d2:63:ed:77:d8:39:6d:c2:69:91:8b:59:7f:a2:cc:
                    25:84:4d:2b:22:a4:65:e6:d5:19:8c:4e:c2:bb:d1:
                    4d:5c:05:bf:3f:2a:a6:23:9c:f1:8e:86:82:1f:ca:
                    62:5c:0e:36:06:57:1d:21:bc:88:d0:f3:ce:9b:4a:
                    60:0f:c9:c6:af:3c:1e:08:0f:e2:ec:0e:fa:ce:38:
                    d5:18:f2:83:7b:81:3d:0a:2e:47:e6:cd:ee:d2:9b:
                    a5:0b:c1:52:5b:f4:43:05:5f:2c:de:f6:5b:e3:b5:
                    f4:d2:cb:a9:55:7d:ee:61:72:c3:38:97:f9:7f:9a:
                    bb:d8:20:c3:96:e2:f4:0b:cd:b9:04:99:90:82:bd:
                    1d:5b:08:d3:7a:c1:0f:18:7f:06:d3:e1:50:f6:67:
                    28:0f:af:f7:7e:e7:9b:be:6a:77:97:d5:e4:0e:fa:
                    01:1d:60:69:61:3a:ad:93:58:61:43:fc:42:b5:1a:
                    eb:01:4b:e3:1a:35:09:63:6c:84:0d:9e:ad:a2:4b:
                    b6:19:a2:44:d1:27:20:78:a2:5e:8a:80:b7:ef:99:
                    1d:e3:39:17:90:fc:f7:f5:1c:9a:c9:df:41:99:68:
                    57:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A1:26:9F:A0:BC:26:25:2E:8F:F9:8F:4F:DB:1B:15:1A:24:2D:46
            X509v3 Authority Key Identifier:
                keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:a1:a0:8d:d4:97:2e:a5:6f:1f:00:ab:3b:3f:c4:9a:f6:
         88:18:23:74:b6:70:c9:e5:7d:a4:c6:60:2a:b4:87:cc:b3:61:
         1c:1f:cb:81:ec:8b:33:a9:6a:47:76:f5:95:67:6a:ea:31:0d:
         87:49:53:b3:57:26:df:39:10:d3:f7:d4:13:f0:bf:56:e9:fa:
         4c:1e:89:c2:7f:82:21:e2:88:49:6d:8d:31:86:47:da:c8:eb:
         e9:d9:c0:c0:82:dc:52:d7:23:77:54:7b:73:b1:ca:6a:d5:37:
         60:1c:d3:96:57:90:7b:4f:c8:90:85:fc:14:ad:bb:6f:1e:cf:
         cf:50:32:4c:77:62:de:72:14:93:ae:f6:37:2c:63:8c:5a:3d:
         76:07:ac:d4:f2:a6:fa:d1:bb:76:bf:3e:08:94:4f:74:7e:e3:
         8a:d5:13:8c:4c:86:23:ff:5e:70:7e:62:7a:05:88:8b:87:b0:
         d4:b9:f2:4b:e2:4d:87:69:0e:a1:2e:4e:04:f4:20:3f:d7:24:
         ab:21:74:5c:a7:de:3a:ff:8f:0a:8c:a2:45:a8:2e:c3:4e:1e:
         f0:62:51:16:b2:06:e3:ef:bd:79:ac:8c:a3:cf:41:ec:ae:bc:
         02:69:a4:a2:65:71:2d:b1:17:c0:87:ef:1c:47:70:c8:c7:bd:
         18:8e:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:36 2025 by rpki-client