Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft
File:                     7f4_b22YcU4B8IxzsmRDaHdOhmA.mft (raw, json)
Hash identifier:          /e6WG8NfYETDFcOdJ3+J2jfrCAuepSDEf88QWrO2AeU=
Subject key identifier:   D8:97:DB:AB:56:27:90:40:BB:15:30:21:99:76:1F:BC:42:5A:3E:58
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Certificate issuer:       /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial:       0196059C991FD78A07722E57F1B5533F4F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft
Manifest number:          0817
Signing time:             Sat 05 Apr 2025 11:01:10 +0000
Manifest this update:     Sat 05 Apr 2025 11:01:10 +0000
Manifest next update:     Sun 06 Apr 2025 11:01:10 +0000
Files and hashes:         1: 7f4_b22YcU4B8IxzsmRDaHdOhmA.crl (hash: Nqxa2nvCto9bck9nSg1W3FR7ngZ61fjeMgiP3BKKtYw=)
                          2: C33JEEkzeUPfbth7teviRKyxbuE.roa (hash: bhxYSOeRjG5Bc/CRRVr1eQSS4+raxx1XaOAQhc1D4HU=)
                          3: TvNorktNlarz-Fx5A-JvtYbjN1o.roa (hash: Jt3Gta94f81hrjgeEGTgQ09/pyVEiIlyWVZAsZeXQYU=)
                          4: aU0Ly4vlCl2a1AlU8b88V0QZMpw.roa (hash: i0WEsyrwOUpXjeH2PBX2MXTKTehmIYecmcGg2/8/obc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:05:9c:99:1f:d7:8a:07:72:2e:57:f1:b5:53:3f:4f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
        Validity
            Not Before: Apr  5 11:01:10 2025 GMT
            Not After : Apr  6 11:01:10 2025 GMT
        Subject: CN=d897dbab56279040bb15302199761fbc425a3e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:e3:01:9e:a8:e1:2f:15:97:a4:2a:a0:4c:
                    68:27:b3:79:48:4e:ab:2d:97:a4:ca:fe:ec:70:a3:
                    d8:4e:96:ea:6a:5f:d7:d2:4a:37:42:c1:fc:7b:b5:
                    bc:ae:88:eb:6d:05:82:f4:5d:1e:ad:d9:69:80:67:
                    43:83:b4:55:a7:b8:e7:41:7b:44:ae:98:2f:4a:9a:
                    44:de:de:ae:3d:18:4f:e7:3d:b1:11:77:2a:3d:d0:
                    e3:4e:01:34:0c:3f:9d:3e:1e:c8:9c:b0:0d:f1:96:
                    84:5b:af:98:40:5d:bc:5f:5f:97:06:2a:f1:ab:c0:
                    f5:db:36:6f:78:f3:ea:e4:12:a2:fa:36:55:b0:41:
                    57:f8:f5:ab:ed:15:e7:5e:e2:9b:e0:61:c4:20:de:
                    12:cb:45:bc:47:6a:54:91:34:ca:91:7f:20:ad:04:
                    f6:e7:24:b5:5f:10:b2:fe:29:cf:6f:6a:7b:ea:ce:
                    a3:e4:59:cc:72:02:b2:1e:88:01:bf:12:06:3a:24:
                    53:2b:77:96:b4:d8:8d:3a:d0:33:b7:00:d2:8a:f9:
                    0b:39:7e:89:9f:e6:87:e6:27:00:34:ab:8f:3b:d5:
                    ab:f7:1b:46:8a:73:29:6e:1a:68:87:44:bf:7b:c6:
                    b4:f5:3b:bc:37:d5:0f:d1:77:58:9a:16:91:ca:d9:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:97:DB:AB:56:27:90:40:BB:15:30:21:99:76:1F:BC:42:5A:3E:58
            X509v3 Authority Key Identifier:
                keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5b:d7:49:cb:a3:24:6d:13:9b:73:f6:fe:4b:13:c5:81:df:
         16:69:bd:06:07:8f:17:fd:7e:c6:ce:bd:c4:06:f0:15:bf:70:
         f2:1f:7d:19:86:75:64:46:4a:e6:89:a7:fa:41:00:b2:0b:98:
         91:c5:ca:e0:5a:9b:58:7e:19:9f:37:1a:3d:4f:7d:0f:80:9c:
         3f:db:7b:62:b0:a0:92:65:87:33:bd:d0:34:ae:4a:67:99:cd:
         80:13:b2:27:f1:5e:ed:32:66:ff:c8:02:ea:f6:f2:0f:e5:24:
         ba:f0:fe:ab:ec:e5:3f:c3:90:0b:fc:0c:0c:93:80:14:cf:1b:
         88:7d:f7:a8:f6:e7:61:34:34:8e:55:9c:89:e0:8a:18:23:50:
         a9:ef:76:85:98:59:21:5e:5e:84:1a:ab:cb:f5:00:6a:b2:af:
         72:e6:f9:be:07:38:0b:ec:9a:00:f4:34:c5:56:cd:96:23:ef:
         91:31:86:fe:15:15:0b:e7:96:9d:5c:a9:0f:4c:b5:73:ba:99:
         c3:4d:80:3d:8a:84:db:77:dd:d5:ab:2c:57:9a:32:ad:ea:08:
         bc:84:80:80:37:64:06:12:87:7d:49:4a:15:3f:6c:8f:bb:8a:
         b2:df:4b:42:e9:26:fa:3c:d0:6b:e2:32:89:a2:c8:73:59:b5:
         2f:ac:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:28 2025 by rpki-client