Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File:                     dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier:          aDIDQZvj8792OiT9rd2szJDNrKR9q0gComTRF+aIhNs=
Subject key identifier:   E1:CC:8B:CD:E9:16:3E:F9:D9:1A:71:67:75:F6:C6:08:24:49:44:4A
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer:       /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial:       01974742C2EA5CAB032E99CD66867270A27D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number:          0691
Signing time:             Fri 06 Jun 2025 22:00:46 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:46 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:46 +0000
Files and hashes:         1: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: ZGHtxPC45vFEqiMpaYxx4IIrii1qtnycUL7Mh+WS4mM=)
                          2: dHoLxhcoAEUuRvCDtuAMppchNpk.roa (hash: u7XKc4RK1KVYd/fCuO1odA9687+dNJirNjEcVK4j3l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:c2:ea:5c:ab:03:2e:99:cd:66:86:72:70:a2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
        Validity
            Not Before: Jun  6 22:00:46 2025 GMT
            Not After : Jun  7 22:00:46 2025 GMT
        Subject: CN=e1cc8bcde9163ef9d91a716775f6c6082449444a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:e5:2f:15:12:5f:b7:94:10:61:0c:37:cd:
                    68:b9:79:cf:24:fc:25:ce:b2:ff:ad:84:e6:78:52:
                    81:c2:68:4b:60:d0:34:76:c3:cd:4e:1a:d4:b0:0a:
                    f9:da:28:08:53:e4:6a:62:79:d7:3c:6a:5d:d8:ca:
                    ac:17:b4:3c:b7:e0:22:06:04:63:86:b8:26:6e:2a:
                    e3:64:06:93:11:c1:e6:aa:2b:84:8f:f1:c7:9b:4f:
                    d8:1d:77:64:f3:d2:e7:e8:52:39:6b:fe:38:a0:3b:
                    51:a2:cc:e8:53:d7:1d:28:7f:05:d9:e7:df:5a:6c:
                    c3:48:e3:44:ec:14:91:c5:d1:b6:49:99:2f:c9:7d:
                    45:9c:b6:4d:82:3c:95:f3:26:3a:4f:b6:72:16:15:
                    f5:3a:00:a0:a0:08:f6:be:06:2a:b4:75:39:40:b8:
                    84:a7:57:ea:3d:58:f9:f1:4e:0e:63:99:73:a4:05:
                    d5:2d:6c:b1:c4:7a:7c:05:f6:c8:a4:11:bd:3f:f3:
                    38:56:41:a9:c4:3c:67:80:5f:b7:65:6a:cc:5f:7d:
                    d6:ac:fe:09:5d:6a:57:8d:0c:d6:91:9c:ac:8f:59:
                    62:4e:5a:6a:68:a2:3a:4f:a1:30:27:f0:ae:4d:30:
                    98:d8:40:b2:a8:9c:ca:de:d6:95:f3:20:f5:84:0e:
                    4d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CC:8B:CD:E9:16:3E:F9:D9:1A:71:67:75:F6:C6:08:24:49:44:4A
            X509v3 Authority Key Identifier:
                keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:39:4f:0f:3e:fb:b6:9b:f5:10:0a:bb:4a:42:59:c0:02:
         27:95:36:41:42:d1:fb:f2:f3:a5:d5:5f:14:23:e0:82:9d:b0:
         e6:4f:60:8a:25:7b:0a:b5:ca:8d:04:10:c5:eb:9b:3a:a3:1a:
         1a:1d:73:3b:42:7e:79:0b:5d:f3:20:e0:33:c1:70:25:f7:2e:
         c2:09:93:c2:68:04:b2:97:d4:42:b7:15:e3:ce:ae:a2:a7:e5:
         2c:40:5f:d4:24:1c:4d:bf:47:00:57:46:c7:7d:10:66:8d:15:
         bc:96:b4:e5:71:7a:3d:cb:75:86:8d:37:e2:af:ea:3f:15:e0:
         df:d2:f9:aa:d8:4e:e1:98:10:b4:38:14:25:72:e5:6e:d7:96:
         00:7d:c8:e9:65:ce:0b:d3:40:5d:5d:5c:1c:9b:18:34:7f:f4:
         48:51:90:cc:a9:43:8a:d5:e4:18:60:2d:48:d4:1c:12:f4:99:
         a8:59:03:95:81:c0:5e:39:47:cf:ce:40:d4:e0:c8:66:df:3e:
         4a:4e:e3:cb:57:04:15:17:99:f0:43:df:e3:04:79:5c:05:24:
         96:f0:00:1d:8d:65:ed:91:5d:cd:27:86:d0:b7:0b:98:6e:1e:
         0a:7a:5c:0c:40:dd:4c:64:fc:38:5c:14:95:ac:92:81:c6:82:
         a2:08:b0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:47 2025 by rpki-client