Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File:                     8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier:          0dUe+AsummRVSJ7jf2kg7p1lQAtsnAgZL28e0yYvcMs=
Subject key identifier:   9B:DF:25:2D:76:FD:CE:23:C3:C8:4A:F0:33:76:8D:90:70:BF:B3:32
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer:       /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial:       01974967C23232A1223D9C608642BE15348D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number:          0D21
Signing time:             Sat 07 Jun 2025 08:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:26 +0000
Files and hashes:         1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: HQrYssrpNBjsvzu2veoSJqgM4sK8OjbLRQryhTpNusY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:c2:32:32:a1:22:3d:9c:60:86:42:be:15:34:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
        Validity
            Not Before: Jun  7 08:00:26 2025 GMT
            Not After : Jun  8 08:00:26 2025 GMT
        Subject: CN=9bdf252d76fdce23c3c84af033768d9070bfb332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:51:c4:d7:71:24:0b:ea:70:40:a2:89:f5:cf:
                    fe:5a:16:19:37:3f:7f:08:7f:93:0d:96:5a:f4:f3:
                    a0:64:80:0a:a7:ed:65:fa:d6:19:81:09:c8:b1:4b:
                    65:21:d4:33:43:94:63:ef:0e:05:64:1c:d6:4b:80:
                    86:4c:06:76:57:a4:0e:e4:2d:a4:04:95:f6:ba:66:
                    bc:40:26:31:2a:20:a2:10:1a:0e:57:69:d2:d5:86:
                    63:ea:0a:6d:41:66:bb:06:7e:93:34:89:54:bb:86:
                    b6:c7:3c:44:e9:28:5d:3c:72:ff:80:06:cd:1f:b9:
                    3a:d5:9f:ee:b7:4e:17:46:b4:f9:b8:80:a7:93:d4:
                    8b:1e:a5:70:5f:bc:82:ee:2d:7c:d7:cf:9d:0e:c3:
                    26:27:97:b0:13:3a:0f:77:48:d8:a1:66:df:df:6e:
                    fd:f9:04:b4:8f:45:80:59:b5:d1:49:d7:34:e3:30:
                    ea:14:c9:4f:64:13:a6:da:d2:c1:cf:ea:72:52:21:
                    79:87:22:ec:4a:49:75:7b:1d:06:88:92:08:60:51:
                    98:fb:b3:c9:86:8b:e7:4b:c3:2f:44:8b:19:5d:b0:
                    62:2b:8f:90:15:a7:d2:d2:5b:6e:54:14:ca:08:0a:
                    4d:ca:f1:00:a6:57:db:51:61:95:1d:80:56:ba:82:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:25:2D:76:FD:CE:23:C3:C8:4A:F0:33:76:8D:90:70:BF:B3:32
            X509v3 Authority Key Identifier:
                keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:d3:e1:78:0b:8a:84:aa:b0:b1:cc:8a:6f:59:6e:4d:4a:
         f4:ab:98:98:7a:a9:95:c3:f4:1a:ac:cd:3a:6d:4c:a5:47:ee:
         85:f8:db:b4:7a:7a:01:91:b9:e6:fb:ed:0f:ed:02:0d:f0:ed:
         d9:db:e2:75:01:49:92:ea:bc:12:da:6d:21:a5:5c:c8:51:f2:
         de:24:8b:b3:3b:0a:e1:69:84:dd:e3:53:95:94:8a:47:8e:9d:
         91:65:7f:ba:42:4d:83:13:2e:1c:f4:18:c5:ff:67:cf:77:b4:
         36:c5:fb:c1:d5:c1:1b:68:72:c9:66:c5:ef:7a:47:0a:1c:51:
         c7:6c:63:11:10:40:7a:ad:90:53:0f:ac:c9:aa:b1:fb:f1:e1:
         47:d2:d4:35:44:06:07:79:7a:5e:2c:2c:e2:11:17:75:f0:be:
         47:8d:60:f6:59:48:ce:cb:46:4f:44:63:a1:de:2a:5f:4b:a5:
         30:0f:de:55:ba:7e:45:d8:82:9b:9a:e1:2a:10:3e:cd:2f:01:
         c3:b7:a3:3f:bd:4b:fd:79:ad:f4:49:7e:27:21:26:27:ca:e9:
         e1:f9:49:bf:94:60:bc:70:f1:b4:fc:df:24:84:e0:0d:3a:ab:
         2e:a4:99:56:49:e4:df:4f:e2:7b:87:24:b3:38:21:1b:6c:ca:
         2d:b1:24:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ8IyMqEiPZxghkK+FTSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyM2VmZDRiZDkyN2I0Y2VhMzMxMjBhMjFiNGY3MzE0ZGNi
ZWExNzkwHhcNMjUwNjA3MDgwMDI2WhcNMjUwNjA4MDgwMDI2WjAzMTEwLwYDVQQD
Eyg5YmRmMjUyZDc2ZmRjZTIzYzNjODRhZjAzMzc2OGQ5MDcwYmZiMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lHE13EkC+pwQKKJ9c/+WhYZNz9/
CH+TDZZa9POgZIAKp+1l+tYZgQnIsUtlIdQzQ5Rj7w4FZBzWS4CGTAZ2V6QO5C2k
BJX2uma8QCYxKiCiEBoOV2nS1YZj6gptQWa7Bn6TNIlUu4a2xzxE6ShdPHL/gAbN
H7k61Z/ut04XRrT5uICnk9SLHqVwX7yC7i1818+dDsMmJ5ewEzoPd0jYoWbf3279
+QS0j0WAWbXRSdc04zDqFMlPZBOm2tLBz+pyUiF5hyLsSkl1ex0GiJIIYFGY+7PJ
hovnS8MvRIsZXbBiK4+QFafS0ltuVBTKCApNyvEAplfbUWGVHYBWuoIbfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvfJS12/c4jw8hK8DN2jZBwv7MyMB8GA1UdIwQY
MBaAFPI+/UvZJ7TOozEgohtPcxTcvqF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTIt
ZDJjOGE2NWFhY2ZlLzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTItZDJjOGE2NWFhY2Zl
LzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7rT4XgL
ioSqsLHMim9Zbk1K9KuYmHqplcP0GqzNOm1MpUfuhfjbtHp6AZG55vvtD+0CDfDt
2dvidQFJkuq8EtptIaVcyFHy3iSLszsK4WmE3eNTlZSKR46dkWV/ukJNgxMuHPQY
xf9nz3e0NsX7wdXBG2hyyWbF73pHChxRx2xjERBAeq2QUw+syaqx+/HhR9LUNUQG
B3l6Xiws4hEXdfC+R41g9llIzstGT0Rjod4qX0ulMA/eVbp+RdiCm5rhKhA+zS8B
w7ejP71L/Xmt9El+JyEmJ8rp4flJv5RgvHDxtPzfJITgDTqrLqSZVknk30/ie4ck
szghG2zKLbEkgg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:43 2025 by rpki-client