Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File:                     8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier:          ++5A4XTTlSQPf8n0UMeP/Qp0kQh0BlKzpyPdSg3d9Zw=
Subject key identifier:   CD:8C:82:89:50:EB:17:98:E8:E0:6F:B4:73:3C:04:40:CE:BF:F0:ED
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer:       /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial:       019758366993559E6BAE594EEE320895DD1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number:          1176
Signing time:             Tue 10 Jun 2025 05:00:50 +0000
Manifest this update:     Tue 10 Jun 2025 05:00:50 +0000
Manifest next update:     Wed 11 Jun 2025 05:00:50 +0000
Files and hashes:         1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: PxJmX1lvbLL0MjBThP7Ld4gpXdIlbOnzbh/pRLr4N28=)
                          2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:36:69:93:55:9e:6b:ae:59:4e:ee:32:08:95:dd:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
        Validity
            Not Before: Jun 10 05:00:50 2025 GMT
            Not After : Jun 11 05:00:50 2025 GMT
        Subject: CN=cd8c828950eb1798e8e06fb4733c0440cebff0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b7:6f:3e:bb:db:38:5a:a2:a7:b7:d1:0b:86:
                    36:bd:31:72:6b:82:a4:8e:b0:e1:5b:22:67:3c:9c:
                    2c:d1:44:00:34:de:3b:41:02:10:aa:9b:2e:e9:79:
                    74:36:68:26:90:70:35:bb:37:2a:07:86:cd:f8:3d:
                    28:da:57:7e:32:ce:ae:40:8d:c1:55:f0:c9:90:58:
                    b1:40:a9:5d:5a:bd:aa:ff:cc:af:bb:0d:41:68:d2:
                    50:8a:ec:fb:9d:d9:c3:c3:f3:19:90:d9:a1:68:97:
                    7d:ad:fd:b6:e9:80:15:4a:3e:b6:b1:cd:62:b5:77:
                    43:37:f8:de:f7:f6:3e:9f:61:9c:c9:f6:61:ba:91:
                    ce:b8:f8:da:7b:83:0f:7f:98:79:d1:1a:32:3e:b8:
                    4b:ee:f3:42:eb:fd:0d:80:d5:02:ce:7d:69:2f:4a:
                    22:ae:a1:dd:47:3e:d7:7e:60:12:b4:bf:44:99:08:
                    76:22:19:f1:38:3d:3c:9b:cb:e8:7c:d2:a9:f5:d4:
                    d0:4c:be:f2:2f:28:3b:60:24:07:c5:11:9e:79:f9:
                    4d:f1:6c:70:11:76:8f:01:d7:5f:44:fd:c0:a5:29:
                    30:56:0a:27:e8:98:75:64:d4:05:d9:cd:f2:71:44:
                    37:17:7e:a2:a3:a8:95:30:6e:2f:ee:c3:2c:92:fc:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8C:82:89:50:EB:17:98:E8:E0:6F:B4:73:3C:04:40:CE:BF:F0:ED
            X509v3 Authority Key Identifier:
                keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b2:12:2a:f9:da:dc:a0:98:ae:17:f6:26:c0:d1:c3:9f:3c:
         72:25:06:0c:55:75:63:40:07:89:ee:57:f1:2f:40:a7:ae:f8:
         52:66:32:89:4d:7c:f7:fc:84:31:fe:1a:63:ad:57:da:3e:fd:
         5a:64:ae:a1:9d:00:3f:61:94:94:f3:e0:a6:b4:d5:21:60:36:
         77:19:1f:c5:dd:90:63:9c:7d:7d:dc:42:91:30:b0:8b:08:17:
         a9:39:76:c3:f8:28:59:b7:a0:95:ff:2f:3a:dd:32:8b:59:ab:
         5f:5c:48:d8:1e:5c:cf:d1:df:22:c1:71:d1:de:6a:63:c9:7e:
         21:03:20:29:47:df:1e:b9:1b:28:83:db:a7:4d:90:39:43:06:
         fd:b6:03:9a:13:73:29:64:f9:77:37:27:ac:4b:43:1e:67:74:
         ba:31:af:eb:bc:d6:95:f2:3f:82:a6:48:64:2f:1f:65:b4:a7:
         21:7a:0c:4f:f5:78:8f:f3:8b:95:02:48:33:f4:82:c7:38:06:
         b8:1e:36:d5:b7:cf:96:b0:09:bc:2a:43:41:6c:e9:99:2e:cb:
         a8:e3:49:b3:c3:3e:70:3f:b9:54:19:d5:4f:e6:72:b5:82:17:
         2a:a4:c6:d1:26:25:69:fc:96:79:2c:be:21:4f:5b:b1:18:2b:
         a1:5d:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:45:47 2025 by rpki-client