Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File:                     B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier:          i4VZPc0FFZ1t3y8Blw6B/b1I98i9P/7nv4Rw6K145gw=
Subject key identifier:   80:04:58:27:AF:F1:D9:D4:55:61:5E:EC:86:9E:27:A4:B5:CB:D8:86
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer:       /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial:       01974FA0E82D8942A663E6CC4F3A3A2EE059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number:          08BA
Signing time:             Sun 08 Jun 2025 13:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:34 +0000
Files and hashes:         1: 8XyUaz5PxPLue0CrUchlRmHnqJs.roa (hash: KMSpxL6wtJUNFCJFnfAUFjLMRmLQ4Dcv8f1856Q+IkY=)
                          2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: HsKNhsMk5x3Z5iItfsyNhZLtIKczO9VZ5G4TFJezexQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a0:e8:2d:89:42:a6:63:e6:cc:4f:3a:3a:2e:e0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
        Validity
            Not Before: Jun  8 13:00:34 2025 GMT
            Not After : Jun  9 13:00:34 2025 GMT
        Subject: CN=80045827aff1d9d455615eec869e27a4b5cbd886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:06:5c:26:81:58:30:68:e0:47:c3:0a:b8:
                    5f:8c:0d:9f:97:03:a9:f1:82:76:fe:20:7d:ad:3d:
                    14:b2:f5:95:27:d9:8c:d5:88:ba:5d:a3:c3:71:0f:
                    b7:f0:f7:ba:54:cc:81:d4:2b:b8:f6:d8:19:55:cb:
                    79:f4:1c:34:52:00:8d:cd:76:fd:59:b7:3a:31:69:
                    2b:2a:87:0b:18:83:45:5c:cd:f6:1b:3f:1a:2e:56:
                    7f:fd:be:1a:15:43:86:04:1e:1a:89:e4:a3:b1:63:
                    6f:d2:27:6f:dd:28:18:2e:39:9e:e8:36:06:1c:88:
                    18:23:d0:57:4a:a2:94:23:b5:b5:ab:f3:ae:36:35:
                    95:03:21:55:61:24:5e:f2:0e:9c:dc:ad:48:4b:8a:
                    f1:b7:e4:66:af:76:ae:c2:98:3f:71:40:e3:cc:ac:
                    29:dd:3e:cb:f8:2c:64:2d:d6:da:5f:0f:36:0f:1c:
                    15:19:3f:03:38:5e:64:a6:01:54:f7:06:b8:23:7e:
                    96:ca:2b:9e:0e:95:1d:48:75:d8:c1:29:aa:6b:29:
                    66:47:56:e4:1f:0b:28:d2:2d:f9:93:c6:ba:40:64:
                    78:97:5d:5d:f4:b4:8c:91:d0:95:35:45:8e:51:35:
                    b5:b6:b8:5a:fd:67:e9:34:99:56:5c:0d:6b:a8:02:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:04:58:27:AF:F1:D9:D4:55:61:5E:EC:86:9E:27:A4:B5:CB:D8:86
            X509v3 Authority Key Identifier:
                keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:98:0b:00:eb:0f:bb:6d:8a:25:ca:9e:00:27:46:4b:f9:65:
         c8:f7:96:26:ff:66:6e:1d:84:da:27:e3:37:d1:87:4e:f9:14:
         c4:0c:da:ed:52:e5:b5:80:f0:cc:fd:27:15:0c:46:97:7d:cd:
         37:c6:66:e7:b1:97:fd:b0:ad:a2:fc:0c:cf:b3:36:de:e2:75:
         31:f3:31:11:ae:e8:73:1d:93:f4:ba:de:05:f5:68:0b:b8:13:
         14:b3:8c:88:86:f2:0c:ee:e1:3b:17:b7:63:97:c9:c2:a7:ec:
         57:86:aa:fb:3f:ba:a5:81:14:18:ce:8e:67:18:37:23:f3:74:
         e7:8b:d6:c8:d0:aa:7e:8e:b6:e3:df:1d:75:3a:84:27:5b:58:
         35:60:4c:c1:36:2e:f3:16:ac:63:87:b7:b1:d5:0b:78:88:36:
         d0:91:24:00:5a:95:57:8a:7b:1e:99:a0:da:33:d6:39:bd:27:
         42:07:52:eb:01:3c:74:7f:35:0a:2a:7c:3e:85:dc:ab:56:1e:
         62:50:32:71:d3:4f:6e:16:a3:ca:4a:e3:ba:12:98:84:87:28:
         6e:d3:19:72:27:73:36:7c:a5:3b:82:c5:1d:b9:16:d9:3e:38:
         9a:84:ec:89:a0:e7:bd:02:de:29:f2:c2:c0:7c:a9:f7:77:d8:
         48:5d:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:08 2025 by rpki-client