Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
File:                     R8VBw62lOmIHxADI-fOkhurrubA.mft (raw, json)
Hash identifier:          m3E5KMomaVu7+3fx0cQBYj/OatZ05Gn2j8yuAKtLCdo=
Subject key identifier:   78:13:A9:A6:90:0D:D2:5B:34:10:86:7D:64:53:D8:79:BE:83:AC:EB
Authority key identifier: 47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0
Certificate issuer:       /CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
Certificate serial:       019748FA3CF107DA1FF7C1865304397754DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
Manifest number:          0216
Signing time:             Sat 07 Jun 2025 06:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:48 +0000
Files and hashes:         1: R8VBw62lOmIHxADI-fOkhurrubA.crl (hash: oaqK6mNgeYgFK71Qa+nSBJMbezuoWODf8aNylBMxHlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:3c:f1:07:da:1f:f7:c1:86:53:04:39:77:54:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
        Validity
            Not Before: Jun  7 06:00:48 2025 GMT
            Not After : Jun  8 06:00:48 2025 GMT
        Subject: CN=7813a9a6900dd25b3410867d6453d879be83aceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:ce:ae:cd:45:c2:4a:e0:b1:57:6d:6c:f7:
                    55:07:51:d3:f7:31:f1:19:55:9d:fa:c2:fd:ae:31:
                    15:8d:60:bc:90:aa:6e:3a:31:68:7b:75:e3:1a:27:
                    33:49:66:8f:be:bb:8f:79:51:e1:dd:8c:aa:f5:14:
                    f0:e2:80:e1:64:9c:6a:7a:bc:3a:b8:76:29:1e:85:
                    b9:29:9a:6c:13:e0:46:86:02:17:60:ea:d3:0b:c0:
                    ea:a3:b3:cf:5a:d7:67:bd:66:5f:53:0a:6a:b7:41:
                    9c:33:80:92:db:f8:74:28:2b:0f:f2:0f:21:a1:a4:
                    ee:2c:99:1a:c7:99:b0:0a:f4:8d:94:fa:46:2c:36:
                    1c:12:07:5f:ec:f6:71:57:a0:4b:b0:0e:50:be:76:
                    b6:6b:cf:f4:59:2e:f3:1f:33:a8:d1:e2:40:77:3d:
                    30:d7:cc:18:58:5e:f7:9b:c6:c9:34:22:0a:ad:60:
                    09:80:f1:c9:38:16:50:23:34:2d:36:57:83:c4:81:
                    b1:57:09:76:eb:00:cd:26:b6:1b:49:67:02:3f:23:
                    a7:65:78:81:64:f4:01:85:01:c9:18:43:f7:a0:59:
                    41:a9:62:fe:78:df:55:21:b7:a3:b4:86:94:65:d5:
                    92:d9:d9:42:b0:ca:6f:ac:f5:47:4b:4e:50:70:b3:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:A9:A6:90:0D:D2:5B:34:10:86:7D:64:53:D8:79:BE:83:AC:EB
            X509v3 Authority Key Identifier:
                keyid:47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9a:90:fc:a4:5f:0c:43:9e:87:58:80:d8:d2:17:cb:32:cb:
         cd:cd:60:32:75:4c:4f:fb:3c:df:b5:70:14:bd:5d:82:f3:04:
         2e:3c:e1:80:58:e6:2e:fd:c0:7e:bd:fd:6c:81:de:dc:5a:f8:
         66:cf:85:49:4d:e8:ea:8e:69:f0:b1:a3:3e:2e:3b:5b:0e:3a:
         56:f3:ea:23:b3:57:76:be:88:67:07:8f:00:f9:b3:f7:d3:4c:
         71:98:98:98:dd:3f:09:a3:d3:e6:8a:c7:27:84:e3:be:ed:f2:
         16:7e:d1:68:1d:38:a1:56:94:ca:1d:1d:25:17:51:b0:38:4f:
         59:10:11:c0:47:4a:26:9c:0c:c1:2e:02:1c:89:ee:de:93:b8:
         84:e7:84:bd:22:2b:33:3c:be:7d:66:1d:1b:94:7f:d4:c4:b8:
         21:ed:74:c3:a0:39:29:c5:02:7f:db:4d:4e:b6:60:7e:25:23:
         59:ad:2f:27:b2:8b:cc:12:47:bc:72:c6:35:a3:f7:dd:e4:ee:
         2e:4b:0a:bb:2c:29:69:3d:91:25:0c:b5:b7:25:c9:78:43:49:
         60:80:14:3b:e8:de:35:62:7a:3b:d4:3e:f9:34:62:38:af:5b:
         67:29:dd:dc:b5:bd:b1:a7:c9:4f:fc:e2:8a:48:b2:c1:90:5e:
         3c:0d:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:34 2025 by rpki-client