Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
File:                     n8IY9nJDtH2gIf2j_rRBR0s865Q.mft (raw, json)
Hash identifier:          +YQL994OwJy0HO4NYZ+GoLQHei7FET+CEIYe0NL1exg=
Subject key identifier:   D0:C1:FA:1B:F1:6E:0D:8E:05:01:1C:77:02:74:C8:56:E1:C4:22:58
Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
Certificate issuer:       /CN=9fc218f67243b47da021fda3feb441474b3ceb94
Certificate serial:       0197469DB88E47FB7772725354BF1BF273BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
Manifest number:          157A
Signing time:             Fri 06 Jun 2025 19:00:30 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:30 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:30 +0000
Files and hashes:         1: n8IY9nJDtH2gIf2j_rRBR0s865Q.crl (hash: F4RYhbjEJ0zc41zAWGCFiBCMwo42ICQffM9Lc/h/ifw=)
                          2: sYA6KeIU16Bd58c84OvJJaCKPKU.roa (hash: tX4ZljxiPaFmNoY3hS/p0i7eqE1TuxWDswzU5ZDhiFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:b8:8e:47:fb:77:72:72:53:54:bf:1b:f2:73:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94
        Validity
            Not Before: Jun  6 19:00:30 2025 GMT
            Not After : Jun  7 19:00:30 2025 GMT
        Subject: CN=d0c1fa1bf16e0d8e05011c770274c856e1c42258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:97:62:d8:83:e0:3e:f9:32:bd:b2:c7:50:
                    4a:f7:09:e9:9d:93:b9:1e:cb:73:a0:a0:5e:60:12:
                    eb:8e:52:ed:ce:7f:6c:26:e3:7b:c0:f2:5c:92:6a:
                    eb:c8:4c:af:10:7a:a6:49:da:51:eb:a1:75:b8:55:
                    00:1e:9c:fa:6d:55:aa:e1:32:fe:ce:fd:f7:81:36:
                    dd:8d:03:3d:ed:4a:28:b5:ac:14:9f:be:bf:2f:6d:
                    96:27:eb:9d:5a:4d:93:32:0c:23:71:9a:d5:d5:fa:
                    9c:87:1a:7c:49:db:9e:87:09:1c:2b:51:8a:8e:66:
                    fc:99:c6:67:47:79:57:5d:de:57:8c:73:ea:e0:92:
                    df:8f:df:de:8f:53:dd:3f:29:56:04:89:d9:03:12:
                    3b:75:1f:e6:93:16:72:11:57:37:fd:46:3d:45:aa:
                    da:20:59:c5:a8:5a:73:26:47:f5:0d:54:9a:a8:8f:
                    2a:0f:bc:c0:12:a7:3a:60:fb:b4:2a:ee:2f:8f:63:
                    79:fc:ab:20:59:3b:09:06:38:2c:7b:bc:d7:b7:aa:
                    32:53:19:4d:f1:8e:26:bc:88:2b:6b:e3:02:66:61:
                    27:dd:42:cb:c0:68:b7:6b:67:d9:99:c8:98:d3:9b:
                    54:63:17:fe:d9:5c:40:43:fa:ea:c0:19:be:87:c1:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C1:FA:1B:F1:6E:0D:8E:05:01:1C:77:02:74:C8:56:E1:C4:22:58
            X509v3 Authority Key Identifier:
                keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:4a:2d:23:9f:5e:98:f2:73:95:42:d3:0d:cc:3b:e4:a1:
         88:4b:9d:b4:f7:d2:55:ac:e8:64:b4:68:c4:0d:88:0b:30:de:
         7b:45:ce:6f:4c:36:29:95:15:0f:61:56:cf:73:6a:92:f0:4c:
         b9:77:c5:6b:10:69:50:88:3a:0e:9d:39:c0:b9:b3:1b:aa:81:
         46:f6:c8:99:57:8e:03:29:9b:f6:a8:09:aa:a9:fe:90:2b:6f:
         7a:04:03:47:da:fb:ca:58:98:7e:4c:85:a3:b9:c5:37:de:ce:
         a6:62:48:d0:c9:0f:0c:8e:9c:ee:8c:44:58:4b:b7:22:e7:09:
         78:be:27:e6:22:cb:88:1a:52:aa:d4:bd:60:89:b8:51:00:e8:
         9f:5c:c0:63:24:cd:c5:ec:93:d5:08:e7:62:01:82:4b:3f:d7:
         b6:5e:5d:c5:ed:7d:9a:03:35:41:8d:de:94:02:35:fb:57:0d:
         d7:ec:04:16:2f:b2:bd:2f:6c:52:7e:29:ed:ff:1a:21:81:13:
         a3:ef:b6:d1:4c:0a:f2:3e:d6:2d:ea:20:a1:cc:aa:d9:d0:17:
         5c:e4:65:ea:35:ea:31:9a:92:b2:a8:0f:74:c6:6b:c0:7f:94:
         2a:49:52:c3:d9:76:27:12:a2:66:4d:67:1b:73:14:15:42:1c:
         e0:f2:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:49 2025 by rpki-client