Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File:                     8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier:          IJp2xQImC9wQlxEtY6vUZI8JTbxlXduM4QpDHK5rxug=
Subject key identifier:   AA:27:19:B6:6E:47:71:5F:17:99:FD:FF:65:9C:37:49:CD:28:59:29
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer:       /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial:       01975EDD57E6CD7D6E8F27B9C5B7153BB0E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number:          0FED
Signing time:             Wed 11 Jun 2025 12:00:53 +0000
Manifest this update:     Wed 11 Jun 2025 12:00:53 +0000
Manifest next update:     Thu 12 Jun 2025 12:00:53 +0000
Files and hashes:         1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: k2DLsoPfXZFCYRaWRCLzASX/GFuNoEkpZoqI1HJkGzo=)
                          2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
                          3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:dd:57:e6:cd:7d:6e:8f:27:b9:c5:b7:15:3b:b0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
        Validity
            Not Before: Jun 11 12:00:53 2025 GMT
            Not After : Jun 12 12:00:53 2025 GMT
        Subject: CN=aa2719b66e47715f1799fdff659c3749cd285929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:22:cb:1d:c9:50:34:4c:fb:43:6e:55:a1:
                    b8:31:42:ac:5c:10:77:8a:db:90:41:eb:52:e3:ab:
                    a5:4c:28:f7:e2:fc:7c:12:1c:be:c9:7e:53:7b:bb:
                    79:24:4f:1d:4f:38:f3:85:38:a2:e7:9e:5c:9e:6b:
                    ca:32:b1:20:3d:8a:42:19:06:3c:cf:83:11:c2:63:
                    33:ca:e8:b7:04:7b:e1:9c:cd:81:56:db:e0:bb:ab:
                    42:17:2a:28:53:96:6e:3b:9c:f3:25:41:6f:0d:26:
                    a4:e3:67:79:12:7c:08:0c:50:cd:8f:a7:f1:e8:40:
                    4e:a3:12:c6:27:42:83:05:95:80:5e:e9:4a:0e:f6:
                    5d:37:8a:a2:ab:98:32:6f:99:81:10:4b:75:38:00:
                    12:e9:56:9e:1f:8f:3d:61:2b:72:a7:5d:ac:7e:55:
                    77:c6:d9:e2:19:80:29:8a:3d:7a:0a:c9:d1:6f:1c:
                    da:56:98:5b:95:97:22:03:6c:1c:d5:e9:a1:72:85:
                    e8:a8:09:e6:db:a1:9a:cc:85:05:ed:2d:7b:85:34:
                    47:00:e7:00:d0:df:c0:1e:e7:ad:da:7a:7a:b9:e1:
                    d8:6e:de:59:02:60:eb:fd:a7:56:df:84:b1:42:64:
                    04:8d:9b:b4:f8:55:75:72:c1:eb:b5:d5:71:b7:e8:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:19:B6:6E:47:71:5F:17:99:FD:FF:65:9C:37:49:CD:28:59:29
            X509v3 Authority Key Identifier:
                keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:b0:37:7e:6b:d5:a2:16:44:c7:f6:d8:9f:9d:f8:a6:2d:5f:
         1b:50:56:7f:54:fa:b3:ad:ed:34:15:f7:f7:75:41:84:d4:72:
         64:0c:9e:b9:ae:1a:ac:a9:a7:9b:b2:02:f5:15:cf:79:69:82:
         50:92:77:ca:18:74:bf:cf:46:4f:82:71:6c:63:00:00:89:23:
         3a:90:5b:a7:31:6d:0f:86:e1:18:ad:d8:20:5b:00:fd:76:94:
         92:7a:68:79:56:12:9d:de:87:fe:df:5d:90:78:e3:50:80:df:
         9d:ce:b3:e8:62:89:52:09:a8:58:08:db:54:0d:3f:a8:6c:91:
         33:20:70:82:8f:9c:76:f3:63:c9:99:4a:cf:5d:05:47:39:50:
         fc:08:b2:d0:d4:21:2e:6b:fb:0c:fa:ab:71:2f:f4:76:8d:59:
         7f:62:b9:5d:05:7f:32:8e:07:a4:d6:ed:ba:f4:fd:36:13:fc:
         64:a8:cb:c3:5d:d2:75:f5:46:70:30:62:2d:a8:61:20:6c:b4:
         18:db:f4:c2:13:c2:b5:81:94:4a:ca:9b:7d:82:4b:ab:26:db:
         31:f5:e4:60:71:f3:8b:ac:b8:ef:30:5a:75:0b:de:9d:e8:b2:
         2b:ae:07:a5:01:12:8a:e1:d5:c4:ab:86:4f:bb:cd:67:79:ec:
         e7:24:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:25:27 2025 by rpki-client