Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File:                     a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier:          d0XvVNxu+D9RB6OXtKBJP2Wey6rBHdjHC7sV80uhb/Y=
Subject key identifier:   1F:81:95:80:77:A8:21:14:CB:68:9A:58:FD:79:2F:C2:C9:67:BB:96
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer:       /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial:       01974B563878F59004071F8B6B3B408C1269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number:          0AD6
Signing time:             Sat 07 Jun 2025 17:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:31 +0000
Files and hashes:         1: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: uvW3RaRQeAUve96QD5Rz2l8v94GPJeWvgFQAFhbvlxI=)
                          2: ww5W_AzyvORyhz7R6e4M2kGu004.roa (hash: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:38:78:f5:90:04:07:1f:8b:6b:3b:40:8c:12:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
        Validity
            Not Before: Jun  7 17:00:31 2025 GMT
            Not After : Jun  8 17:00:31 2025 GMT
        Subject: CN=1f81958077a82114cb689a58fd792fc2c967bb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:93:50:52:c6:25:8e:3e:61:bd:74:3d:0f:
                    00:79:1a:bb:7c:9d:cb:f9:94:c0:68:a2:df:92:3d:
                    98:77:2c:8c:22:64:06:dd:aa:b1:9f:12:ad:11:52:
                    4b:03:f5:96:e5:41:c6:f8:e7:84:85:6f:e0:0a:82:
                    eb:14:4f:b9:f8:c1:4d:d8:f3:52:8a:7f:b6:b1:4c:
                    c0:cd:ba:25:a6:4e:96:1f:82:77:b0:a8:de:f5:78:
                    db:56:e8:e2:20:25:a5:7c:52:6c:65:dc:b8:ec:40:
                    ce:36:82:04:89:7c:8d:79:12:c3:b6:7a:dd:9d:78:
                    29:58:93:ca:00:c7:bb:6d:33:cb:99:95:90:6d:cd:
                    46:4b:0d:91:e3:4b:af:da:c6:f5:d4:e6:8e:1e:97:
                    b8:a8:60:dd:a2:b0:06:55:ca:16:5c:f6:36:ee:4c:
                    7a:ad:44:7c:ec:28:cc:39:88:96:95:45:df:24:66:
                    b7:42:4a:41:e1:35:1d:8d:cd:5c:d4:df:96:e8:ca:
                    db:f2:bb:5c:67:91:c6:04:43:27:74:6a:b0:fc:7a:
                    38:9c:d8:e7:bd:a8:fa:1a:40:fd:7c:28:1e:e1:0f:
                    f8:2c:07:2e:77:d9:a4:e3:9c:47:95:11:1c:5a:12:
                    4a:f7:b0:4c:cd:f3:9f:e9:ef:d9:40:51:ab:6d:56:
                    89:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:81:95:80:77:A8:21:14:CB:68:9A:58:FD:79:2F:C2:C9:67:BB:96
            X509v3 Authority Key Identifier:
                keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:66:97:52:81:10:09:86:6b:4e:1c:33:c0:03:8a:32:da:8f:
         68:7b:50:db:63:0b:5b:17:17:a8:7d:72:1e:f7:d7:17:13:d8:
         22:7d:86:ea:da:2d:f2:7c:d4:f4:57:ec:3d:be:3f:8d:f9:5d:
         98:ed:3f:e1:da:cf:4a:01:2c:f3:1d:42:79:15:e2:bc:1d:ba:
         0e:ca:c7:39:17:a9:2f:db:a5:af:43:c9:8b:bd:10:c0:76:87:
         ab:a4:16:c3:7c:0f:78:98:e2:87:5d:54:42:69:f4:56:66:44:
         44:dd:b0:f8:d1:78:92:26:49:63:1b:28:75:5d:4b:d9:e8:e3:
         4b:f3:4b:7a:15:2c:9f:e9:4e:01:3f:d2:af:96:2f:f0:d9:96:
         a7:1e:2c:2f:c6:0c:53:7b:e9:f6:ed:d6:ae:0a:8b:ea:94:fd:
         52:f8:aa:0e:39:44:ee:52:cb:c1:ad:42:8e:d0:c9:45:8f:c7:
         1e:dd:55:71:cb:d8:76:d2:13:96:7c:e1:aa:ea:89:f2:0f:06:
         70:d3:bd:e9:03:18:a9:c7:56:a3:d9:99:8b:23:a8:72:3e:1c:
         00:66:7b:5d:d7:c3:87:80:44:3e:d7:86:6b:c6:ad:46:88:2c:
         fc:26:9e:69:7e:ab:28:ee:b4:51:d3:1a:d3:61:c7:15:dc:9a:
         0f:2a:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:32 2025 by rpki-client