Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File:                     jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier:          DoafUcI+QVMPLKu9KKSWNW6a+xKeTy8lK0X9uPPzB+U=
Subject key identifier:   62:61:1D:2B:A3:19:14:B9:DD:F6:90:C8:A9:14:65:F7:2D:B9:DC:D5
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer:       /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial:       0197458BA7E9F894A0BBC1B72600DD95756D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number:          08EB
Signing time:             Fri 06 Jun 2025 14:01:09 +0000
Manifest this update:     Fri 06 Jun 2025 14:01:09 +0000
Manifest next update:     Sat 07 Jun 2025 14:01:09 +0000
Files and hashes:         1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: 9tKuVcgaAsDE3alCwajklN2RLx68fO1WmNiV/L13xbo=)
                          2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:a7:e9:f8:94:a0:bb:c1:b7:26:00:dd:95:75:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
        Validity
            Not Before: Jun  6 14:01:09 2025 GMT
            Not After : Jun  7 14:01:09 2025 GMT
        Subject: CN=62611d2ba31914b9ddf690c8a91465f72db9dcd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:b1:71:44:07:15:08:36:1d:5e:95:6c:4d:
                    96:2f:b6:63:67:40:50:bf:7e:55:a9:2a:59:d6:f8:
                    a5:dd:a6:88:50:53:f4:13:d3:51:8a:8c:9c:00:1a:
                    fa:dc:38:ec:ee:ef:87:df:03:18:2c:ae:73:ad:a6:
                    2e:ed:7f:b7:59:13:78:90:13:a0:9b:74:e4:23:62:
                    6d:f8:e8:71:2a:61:8c:cc:20:9c:98:66:d2:e6:b4:
                    c9:5c:61:1f:b5:37:20:01:92:db:34:83:f3:1b:42:
                    f7:be:9c:92:5d:e0:39:8b:89:69:16:37:09:06:ee:
                    76:00:59:bb:19:6d:ca:36:e5:88:98:c6:51:34:ed:
                    d9:4d:87:37:fb:94:25:55:f9:b9:ba:21:17:b3:da:
                    a1:72:7b:2a:b5:1c:6d:0c:e6:61:0c:58:cb:40:f3:
                    e2:2a:bc:53:10:31:8b:69:55:15:36:e2:e9:16:a7:
                    99:a6:55:cf:02:b4:b7:96:bd:51:fe:9f:de:cf:bc:
                    1d:dc:93:70:a0:f2:9f:77:c7:d8:b5:49:cf:53:84:
                    fb:b1:28:71:47:51:1d:06:f2:cb:27:0e:80:5c:e0:
                    f4:af:ec:64:87:97:6e:e3:4c:1e:74:9c:28:aa:da:
                    ac:3a:42:5b:77:c7:09:87:4d:8b:7b:4c:97:6d:9e:
                    48:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:61:1D:2B:A3:19:14:B9:DD:F6:90:C8:A9:14:65:F7:2D:B9:DC:D5
            X509v3 Authority Key Identifier:
                keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:63:05:38:9f:0f:f0:f6:ca:39:93:a9:76:c6:f7:29:0f:1f:
         c7:ae:b8:bf:8e:35:7d:b9:5d:9b:bd:a8:5f:f3:62:0d:8a:1d:
         80:e2:e4:46:8e:d9:67:ff:e4:14:8a:b9:f5:59:e9:5e:81:ba:
         0a:19:f2:f6:20:b4:b6:75:57:97:03:3b:10:b2:8f:77:ab:48:
         65:ed:15:37:d5:94:6d:87:c2:c0:83:20:4a:c4:88:e0:22:14:
         fe:2d:31:35:f4:11:6e:70:a9:ca:48:84:54:e3:83:80:8b:cb:
         c5:51:ea:bc:2a:38:95:f3:59:62:8b:7d:9d:4a:69:36:1d:14:
         c7:7a:51:19:85:da:1d:4d:18:94:1b:a0:8a:72:43:6b:4a:b7:
         03:e5:3b:a1:eb:c7:62:49:a2:de:ab:52:80:b1:7a:18:de:d8:
         16:b5:4a:74:8d:6e:d0:06:f5:c8:b4:e5:ac:a1:70:a0:26:17:
         fd:92:3e:ba:55:70:a8:58:f4:ad:03:39:77:aa:e0:52:0a:f2:
         a5:c2:13:34:42:17:b3:58:82:e2:75:aa:87:66:89:7d:5a:a6:
         7a:91:d1:71:a2:87:2b:21:07:16:00:65:41:2b:38:03:a2:81:
         72:20:92:7e:46:5d:c0:a2:05:0e:f6:17:f0:e8:42:bc:68:2f:
         de:0a:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:19 2025 by rpki-client