Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
File:                     y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json)
Hash identifier:          8URBt3BZwxA6VXVXZELrMxlOFnk8yaAEAX9ZLaPit6s=
Subject key identifier:   4B:DC:56:1C:93:03:9C:49:F8:12:97:E5:BC:0E:87:E0:01:68:58:F5
Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Certificate issuer:       /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Certificate serial:       01976583B106F526F54A1EBB0EE0AFA244E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
Manifest number:          03ED
Signing time:             Thu 12 Jun 2025 19:00:18 +0000
Manifest this update:     Thu 12 Jun 2025 19:00:18 +0000
Manifest next update:     Fri 13 Jun 2025 19:00:18 +0000
Files and hashes:         1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: iL16vEG8pOAbQ8uuT88RMflIDzoHaIKDUG/tE62NWSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:83:b1:06:f5:26:f5:4a:1e:bb:0e:e0:af:a2:44:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
        Validity
            Not Before: Jun 12 19:00:18 2025 GMT
            Not After : Jun 13 19:00:18 2025 GMT
        Subject: CN=4bdc561c93039c49f81297e5bc0e87e0016858f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:a0:7f:42:47:06:11:c8:2c:e0:a2:a0:12:
                    b6:82:d5:73:a1:8d:80:98:16:fa:7b:a7:aa:c0:be:
                    7f:74:1d:95:10:e7:b1:03:af:1a:a9:6e:e2:43:4c:
                    62:e3:68:96:f0:fb:cd:0b:c8:1f:60:79:44:93:18:
                    72:e6:d8:02:71:a2:fc:08:e1:bd:f0:38:89:83:47:
                    1e:c8:1e:9a:24:e6:54:6f:95:46:3b:75:64:c1:6f:
                    c1:87:45:f9:ad:25:22:d5:70:60:f1:75:67:e3:e6:
                    95:b2:16:dc:57:49:3f:58:86:0c:e7:84:0e:c2:1e:
                    e9:d8:ea:0d:81:b4:d3:5e:3c:e7:cf:fb:b2:79:ef:
                    87:fa:e6:fb:5a:62:3b:d3:ac:1f:33:bd:3b:f5:f1:
                    f2:2a:d1:5b:ed:36:fb:a3:4c:74:44:f2:66:c6:49:
                    d3:c7:f6:34:af:61:4f:ab:31:4b:5c:15:80:ea:9a:
                    6e:bb:94:6d:43:21:62:85:47:00:9c:67:c2:f3:a3:
                    04:84:a7:37:f6:58:73:00:cd:8b:52:a2:40:69:79:
                    f8:61:74:89:f7:a7:ee:8b:ca:d7:bb:7b:fe:b8:b6:
                    ae:9e:a4:92:b9:4d:6d:1d:67:f7:49:f0:d6:d7:24:
                    f0:ee:8f:f4:73:1d:c6:02:81:ca:36:ba:a6:4d:05:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DC:56:1C:93:03:9C:49:F8:12:97:E5:BC:0E:87:E0:01:68:58:F5
            X509v3 Authority Key Identifier:
                keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:43:08:17:f6:ec:74:c6:19:4a:eb:7a:1b:fe:79:26:9b:d3:
         30:9d:59:26:c4:15:ac:cb:e4:f3:9f:0e:85:81:27:51:15:26:
         90:65:e1:f0:a0:af:55:17:11:1d:b4:2e:d6:34:f7:83:89:f5:
         f6:a3:c2:83:ab:2a:9f:2d:7e:b9:74:f9:6a:da:0d:d7:3c:03:
         af:9c:47:dd:53:80:be:df:46:ae:37:72:38:8a:f4:9a:60:7f:
         1a:cf:75:da:b6:b7:3d:cc:83:35:c1:e2:25:18:a3:73:17:bb:
         ff:c7:93:62:5e:92:d5:08:d8:f2:4d:d2:a2:bf:85:a4:a7:72:
         7d:87:7f:25:fd:8c:5a:ea:3c:da:88:ad:6a:b3:71:06:a5:39:
         8b:23:55:4f:c5:cf:8d:f3:db:81:9b:0f:4d:92:21:c6:34:5c:
         58:10:fd:87:04:09:82:1c:8c:1f:94:b4:49:c7:b5:f2:7c:48:
         83:ca:2c:c1:2b:86:32:51:8b:21:61:39:3e:8e:3f:6e:f2:84:
         bd:83:ea:a9:48:88:91:a9:93:66:52:dc:3e:ac:1e:7a:10:54:
         6f:65:66:f5:2e:1e:b0:07:17:5b:20:dd:74:54:9f:c6:49:b4:
         04:8e:b4:d9:68:1a:53:df:a7:5a:a5:d6:29:04:f7:6e:41:7e:
         e5:06:21:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:01:34 2025 by rpki-client