Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File:                     8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier:          YUbVvS3uRkKmN4LrAP/J6DV+jRJP1UXceZh93kyMTHk=
Subject key identifier:   AC:1A:D4:80:AF:C4:B6:F2:F0:C6:33:B3:88:CF:FA:1F:82:59:8B:9B
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer:       /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial:       01975E01B501AAF4F412231C53AAB8140050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number:          1179
Signing time:             Wed 11 Jun 2025 08:00:59 +0000
Manifest this update:     Wed 11 Jun 2025 08:00:59 +0000
Manifest next update:     Thu 12 Jun 2025 08:00:59 +0000
Files and hashes:         1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: AW1ex1XyDJatptlOfMLilFaXewrCrZhDgIK/BONonaY=)
                          2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:01:b5:01:aa:f4:f4:12:23:1c:53:aa:b8:14:00:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
        Validity
            Not Before: Jun 11 08:00:59 2025 GMT
            Not After : Jun 12 08:00:59 2025 GMT
        Subject: CN=ac1ad480afc4b6f2f0c633b388cffa1f82598b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:8d:28:da:d2:8d:62:12:1a:fd:93:dc:58:
                    cb:76:bd:1b:63:7d:68:42:13:f9:71:ed:dc:ba:99:
                    19:52:de:df:31:57:45:1c:99:88:7e:df:2b:91:a8:
                    eb:26:dd:e1:e2:b1:c1:40:7e:16:e4:fe:94:ac:d9:
                    20:03:40:2a:5c:fb:a7:9d:a3:06:22:e1:46:0b:46:
                    c4:6c:50:6b:77:3b:f3:85:34:7d:91:ef:f4:88:7a:
                    cd:1e:d1:96:5d:67:1a:67:b4:96:14:60:b2:27:9e:
                    d2:e2:7f:ba:b6:c6:da:48:90:de:95:fd:61:b6:8a:
                    90:08:96:86:06:39:12:a2:5c:bb:43:c3:96:ea:c0:
                    05:4e:a5:48:52:e3:f4:4c:4d:20:d0:d6:f6:f9:76:
                    eb:4a:a5:fe:10:75:d8:8a:d0:6a:8a:ac:86:ed:ce:
                    d0:59:5a:9e:e8:ab:fa:7c:32:b9:8e:67:2c:e3:8a:
                    54:47:c0:50:95:f3:f3:fe:c9:42:58:a9:96:79:59:
                    72:ef:e0:d6:a9:77:3e:ab:4a:52:39:df:3a:60:0b:
                    70:ce:7f:2c:05:d9:4a:f3:75:a9:84:b3:6f:55:07:
                    74:90:39:72:9e:7d:ec:47:b8:ac:71:e0:63:19:86:
                    4c:02:df:71:48:99:09:e5:a1:c6:ff:e2:cf:f0:b9:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1A:D4:80:AF:C4:B6:F2:F0:C6:33:B3:88:CF:FA:1F:82:59:8B:9B
            X509v3 Authority Key Identifier:
                keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:bb:e6:08:09:45:8c:51:fa:14:ea:b1:b0:e4:28:1f:fd:25:
         0d:df:d4:9d:7e:fd:e8:2a:82:2c:f6:2f:c3:23:12:08:82:92:
         73:a8:52:53:a2:7e:37:e0:20:fc:95:27:93:84:1e:21:f9:67:
         0d:4d:63:f2:11:ac:54:62:70:6f:6e:bf:71:0c:1e:f5:35:32:
         d0:4f:7f:fd:01:56:64:75:9f:6f:9c:e0:71:60:3e:46:a3:e6:
         06:68:9e:72:88:5b:60:74:ef:0a:65:c6:17:95:83:ad:a0:31:
         4f:d9:81:af:4a:7b:07:82:fc:0f:5a:2e:d7:7b:f6:ed:8e:65:
         ce:65:40:15:d5:66:44:90:93:da:08:6c:a6:b4:c2:65:8c:cd:
         8a:6f:46:90:25:dc:7e:56:d7:ea:38:07:f0:26:75:95:f5:d5:
         50:62:43:d2:21:a8:4c:b7:2c:62:ac:00:8e:1b:b4:fb:89:ed:
         57:fa:a7:ee:9b:e2:bc:1a:2e:81:99:e8:c2:dd:1b:86:db:e2:
         8f:51:af:5b:47:6c:e1:b8:f5:34:24:63:96:ad:e5:01:19:db:
         83:c0:11:58:a2:ca:e5:12:10:c8:50:38:15:90:19:d3:b7:9c:
         7c:af:fc:c7:3e:17:60:0c:bb:5e:37:87:b8:0e:b1:2f:ea:c0:
         5b:fa:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:39:18 2025 by rpki-client