Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File:                     7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier:          DKPl6cRGwbNFf2nRFGRGCvFs4OKV8aJSqy5Wb1J0yh0=
Subject key identifier:   96:4F:33:03:6A:51:05:15:3A:34:F0:08:43:2D:11:B3:0E:04:4C:B6
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer:       /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial:       019747B081534DD56F9C062C6534468A22F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number:          14F6
Signing time:             Sat 07 Jun 2025 00:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:39 +0000
Files and hashes:         1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: nVILF9x/vs4x407/5HBgatVLEX4JX3iMriBvvjDORNQ=)
                          2: YeFUZsaHfHTPpiu7f2dFmo68C7E.roa (hash: VFJqwzLzDH7CjnLQbhz/bJw/ANPrHjYMaDgoQuDyxDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:81:53:4d:d5:6f:9c:06:2c:65:34:46:8a:22:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
        Validity
            Not Before: Jun  7 00:00:39 2025 GMT
            Not After : Jun  8 00:00:39 2025 GMT
        Subject: CN=964f33036a5105153a34f008432d11b30e044cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:df:d5:2e:bc:96:a1:72:db:ad:f1:6a:0b:63:
                    c5:1d:e5:d5:2b:8d:5f:b2:2d:d7:b5:35:db:b3:91:
                    66:77:1e:da:fc:4a:1e:a0:bf:b8:d7:c2:85:c8:f5:
                    51:9a:aa:48:4e:15:bf:7d:88:68:7a:47:4d:89:c6:
                    e1:9a:4e:fd:82:9d:e8:b8:fb:19:d7:5c:8b:23:5b:
                    fd:7b:81:43:ab:17:69:2b:1d:56:ff:51:e4:85:db:
                    18:95:e7:d7:1c:06:9d:32:da:e8:c4:9a:8d:d4:00:
                    9f:32:85:77:d2:44:9a:f3:d7:0f:6f:33:ee:76:a0:
                    1f:f7:c7:39:ab:58:59:bf:14:9b:1d:98:c2:65:5e:
                    97:35:7d:91:12:85:31:b3:3a:3e:e5:f7:ff:d0:b3:
                    be:ed:2d:c7:99:02:12:d6:46:10:a1:1d:6e:53:b5:
                    35:14:d5:98:a5:2c:04:3a:ba:31:06:99:0e:ec:08:
                    23:20:c2:08:01:ee:6c:d2:cb:fe:96:9c:e3:44:16:
                    03:2f:d1:55:52:84:b5:38:fa:1a:90:90:0c:d7:28:
                    7a:d7:6a:4c:0e:c7:50:41:f1:6f:68:8d:8b:58:57:
                    da:78:51:69:29:98:c1:08:1f:8a:c5:60:b8:0d:41:
                    9c:a9:41:49:11:00:62:89:2a:33:ca:98:3f:05:36:
                    c8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4F:33:03:6A:51:05:15:3A:34:F0:08:43:2D:11:B3:0E:04:4C:B6
            X509v3 Authority Key Identifier:
                keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:93:fb:92:34:28:bc:fa:2f:48:a3:4e:2f:fc:cc:20:04:b3:
         05:5f:4b:5d:87:98:21:43:a2:32:9d:1a:28:6f:97:54:70:c7:
         a5:aa:20:8f:d7:a8:fc:4c:ab:46:cc:52:95:d4:c3:83:a7:c5:
         0e:7a:8f:b7:e6:38:e1:1a:56:28:fa:d9:2c:41:09:2e:1c:6d:
         2d:52:01:2f:76:c5:7c:42:19:6c:73:12:31:50:c7:51:1c:9b:
         06:42:a7:0f:ca:f3:55:ea:ea:70:a6:29:d3:aa:b7:9c:dd:44:
         df:55:5f:cc:a6:a0:f0:f1:fe:f3:6b:4b:70:bd:e1:52:82:ed:
         bd:34:ff:88:b3:6e:81:98:2f:7e:48:a3:35:de:9d:28:a5:c2:
         8d:9a:b0:bc:b7:12:15:77:b2:e5:ad:52:b2:b3:8a:33:27:88:
         11:4d:a8:2a:1c:d3:29:af:f5:fe:f2:8a:31:91:4b:b6:b9:85:
         59:11:13:83:ae:65:b4:8c:4c:bf:53:93:8b:10:a3:19:5c:9a:
         13:ea:40:3e:ae:39:63:ca:41:79:23:c6:e2:85:32:56:23:20:
         fa:b0:3c:c2:59:b8:97:7b:e8:5c:2e:ce:36:be:f4:a2:09:5c:
         00:28:55:74:6b:4d:0c:b7:0a:99:34:ce:ca:59:b7:34:83:e9:
         86:7e:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:51 2025 by rpki-client