Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File:                     ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier:          brWrwzEbXrOgzK3UzwHyimJ3xBJkjdFDxDHzovkgtkk=
Subject key identifier:   34:8C:9A:D4:5A:0E:E3:D3:F4:2A:23:A9:1A:E4:8A:B7:B4:70:E4:84
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer:       /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial:       019749D5BF9243FFF7D49DC6172708FC138B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number:          06FE
Signing time:             Sat 07 Jun 2025 10:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:34 +0000
Files and hashes:         1: DLubGHoQGgvM_j186blmZIGyLZM.roa (hash: TEMPnE8yGqVWn4gW4EZOnV9emzYVMGQtqJpNZOLj0Yc=)
                          2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: 0VyKedYibL67I5sD5ksdkcFignGo7kv/W82/GyhTHSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 10:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:bf:92:43:ff:f7:d4:9d:c6:17:27:08:fc:13:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
        Validity
            Not Before: Jun  7 10:00:34 2025 GMT
            Not After : Jun  8 10:00:34 2025 GMT
        Subject: CN=348c9ad45a0ee3d3f42a23a91ae48ab7b470e484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:65:23:79:8b:56:33:22:2a:5b:e2:fb:60:
                    35:35:5f:31:80:70:5f:84:48:17:73:bc:ee:f6:43:
                    cf:d8:57:f0:7d:2d:c1:32:e4:d8:0a:b2:84:18:7c:
                    b6:a0:13:c2:36:30:e8:62:fb:0a:00:11:c7:8e:44:
                    e8:48:38:88:00:b9:bb:85:8d:50:63:2b:58:41:ec:
                    48:e2:ec:60:6c:1c:a1:3f:ab:81:67:5a:12:05:63:
                    8f:a8:a4:4f:f1:98:22:39:57:1a:3d:62:c6:d3:5e:
                    78:32:84:a3:47:a3:7f:4d:44:cc:4e:48:f8:a1:95:
                    2e:87:bd:b4:35:95:ae:d4:40:9b:40:5f:a5:03:6c:
                    73:df:e4:d9:26:0b:ca:c4:67:f3:00:51:62:52:00:
                    46:b1:eb:ea:49:6a:6d:fc:a1:1a:79:d5:e9:50:40:
                    23:ea:45:4f:d9:c7:ad:c2:1b:52:5b:eb:45:8c:9b:
                    c4:41:08:39:d2:12:25:5c:e1:ff:bc:0d:10:d7:1c:
                    c3:3d:94:fe:1c:9c:5e:52:5a:12:be:f4:83:1f:7b:
                    11:25:18:9d:a6:90:79:f8:55:c6:94:c5:8b:20:f5:
                    93:22:e7:07:f4:bc:34:22:cf:d4:b2:c1:52:fc:20:
                    5b:14:82:d7:6e:2a:55:87:b1:e0:69:0c:d8:c0:b0:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8C:9A:D4:5A:0E:E3:D3:F4:2A:23:A9:1A:E4:8A:B7:B4:70:E4:84
            X509v3 Authority Key Identifier:
                keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:06:21:da:dd:a5:37:9d:21:3b:03:96:e4:1b:b4:51:16:e0:
         93:55:20:7f:8b:11:fb:2d:88:68:93:25:5e:f2:ef:fa:97:af:
         a0:01:43:ad:62:97:19:b1:93:b8:cb:c7:54:b8:b5:a2:93:c5:
         96:87:4b:85:b4:50:b6:86:40:01:ed:cb:db:88:1f:5e:52:c1:
         d7:f3:45:79:63:38:3a:5d:0b:c6:d7:88:45:a0:5d:35:9e:43:
         f6:2b:04:ec:c3:11:65:1a:4f:56:93:6e:cf:a2:74:7e:12:40:
         47:5f:83:c1:6c:e9:7a:cf:b8:ce:e3:19:0a:0d:a4:87:01:8d:
         34:77:ab:54:68:bf:a9:aa:0d:46:4b:b6:c3:cc:b5:06:b9:dc:
         23:5b:20:01:d7:56:20:27:d0:5f:32:9f:24:eb:03:82:f1:94:
         9f:49:dc:78:7a:8a:82:98:4b:99:09:04:e7:e2:da:ee:b8:d5:
         9c:ca:d0:90:67:0f:88:9c:a5:d2:51:6c:1b:e1:91:10:15:25:
         91:a8:3e:3c:b6:a4:5e:b4:4d:3e:e4:65:2f:b9:9c:03:56:1b:
         eb:b9:17:86:7a:b6:97:e4:8a:68:34:c9:38:cd:2a:96:9c:aa:
         e4:ae:11:8d:b9:16:cb:49:e6:51:8d:64:a6:aa:f9:60:3b:8d:
         28:ff:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:15:29 2025 by rpki-client