Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File:                     Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier:          uVu7d3TYSt+tBpR+VEyUyWMzLHJerVpYoFVIDi/lp7E=
Subject key identifier:   A9:12:00:91:1F:B0:F1:3B:C6:DA:DF:2A:DA:32:49:11:5A:02:2A:37
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer:       /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial:       0197666002F5D67B1740DEB50D097945EA46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number:          07D8
Signing time:             Thu 12 Jun 2025 23:00:57 +0000
Manifest this update:     Thu 12 Jun 2025 23:00:57 +0000
Manifest next update:     Fri 13 Jun 2025 23:00:57 +0000
Files and hashes:         1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
                          2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: Vd2v/QUW06ID7MghVmgS/97hn8Ib+CfpcEcW5a1xAT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:60:02:f5:d6:7b:17:40:de:b5:0d:09:79:45:ea:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
        Validity
            Not Before: Jun 12 23:00:57 2025 GMT
            Not After : Jun 13 23:00:57 2025 GMT
        Subject: CN=a91200911fb0f13bc6dadf2ada3249115a022a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:41:2d:d8:ca:6f:ca:4f:a5:02:51:5b:df:
                    11:ae:5a:c6:0f:db:44:ab:97:80:c4:0e:51:e0:f7:
                    fa:b6:62:a8:42:e7:9d:1b:78:d5:21:06:a1:98:19:
                    3b:4e:5a:8d:68:79:c0:19:ec:6e:a2:1b:3c:07:f8:
                    03:90:bf:4d:49:c4:2a:36:d8:3d:2d:07:77:cb:8a:
                    c5:3e:5c:e5:0a:60:9a:89:0f:8f:0f:0b:59:02:d4:
                    24:cc:30:2f:cb:cb:02:a1:6a:13:15:94:1c:fc:7a:
                    13:b5:fa:6d:ee:db:71:2e:b8:25:91:3f:17:06:9c:
                    01:c7:79:da:aa:5d:26:2f:ee:85:ec:19:1c:66:84:
                    b2:fe:53:aa:a3:40:96:fe:58:51:8b:7c:5e:dd:c9:
                    9c:3a:de:cd:16:5c:43:46:29:ae:b4:d5:b4:2f:10:
                    93:da:51:52:b4:d0:ad:b4:09:ce:b1:21:2f:c9:a0:
                    44:fb:42:6f:42:45:23:45:2c:b1:a6:d8:9d:24:d3:
                    5b:ec:9d:aa:8e:18:cb:40:8f:44:61:8f:e8:ac:16:
                    a9:36:98:8a:ef:68:55:20:dd:a7:86:24:e1:09:fb:
                    60:20:71:11:e6:0b:66:f1:42:a0:ba:30:2a:ac:56:
                    90:13:af:7e:66:eb:05:84:7b:97:0b:47:a7:56:9f:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:12:00:91:1F:B0:F1:3B:C6:DA:DF:2A:DA:32:49:11:5A:02:2A:37
            X509v3 Authority Key Identifier:
                keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8c:c3:52:ba:a3:4f:4e:42:bc:e6:a2:9d:2b:de:59:84:85:
         4e:78:fb:39:a3:d4:35:4e:8c:e6:42:f3:81:e5:3f:2e:1d:7c:
         47:84:63:0a:c4:3a:00:46:9f:61:90:c0:8b:a5:ce:46:4e:a0:
         c3:69:b4:44:69:d4:d2:21:b5:d9:e9:42:5c:ea:6d:ad:a9:1e:
         ec:1b:fc:34:f4:77:e0:92:c4:16:66:15:39:0b:f1:3d:68:cb:
         79:89:fa:39:f2:e5:82:b9:2b:9d:ae:a6:88:f7:81:89:3c:2f:
         61:84:4e:70:db:39:65:91:49:15:2f:42:71:b0:2f:b7:87:fd:
         7f:cb:96:ee:5d:0e:8a:66:c4:53:77:eb:a7:cf:31:7d:c6:c0:
         a1:21:86:50:76:1e:ab:aa:8f:b4:2f:a4:f2:31:e5:64:15:ff:
         41:ed:4e:d3:f8:6c:1f:fb:64:c4:8a:62:16:c9:31:07:0c:98:
         bf:95:41:f8:aa:5e:15:7d:9c:d7:8d:81:fa:f5:e0:1e:7d:fd:
         45:fb:2b:58:01:d8:da:6d:09:35:cd:ea:1e:cd:cb:a6:a4:4f:
         50:00:27:81:b1:6c:4a:de:09:8d:32:a3:2b:c6:dd:55:8a:a4:
         9c:c2:a0:53:75:83:a9:34:14:65:c1:b0:b1:a4:a1:95:18:8f:
         f4:27:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:31:53 2025 by rpki-client