Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
File:                     8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json)
Hash identifier:          /w2r+gO3wBMuFgRF7/tcqhE+7A4vTn9Zb860KXcFl+Q=
Subject key identifier:   35:E5:1A:70:F9:2E:A3:F2:39:01:2F:B8:78:15:02:02:A4:2F:A6:89
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       019646694158EFBA88CB9BEFD0F5531B3362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
Manifest number:          14F9
Signing time:             Fri 18 Apr 2025 01:00:25 +0000
Manifest this update:     Fri 18 Apr 2025 01:00:25 +0000
Manifest next update:     Sat 19 Apr 2025 01:00:25 +0000
Files and hashes:         1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: IBkcsghxGGMsgmA3Nzx7sx4c8w1ab/VKUBdncQyNAkE=)
                          2: HCmwt2WAK-H7WYTy1icgaTefv78.roa (hash: +bS4/m9dhw+Ug0oj+WLZYyQxSyPJBlp+QZfTQscGHe8=)
                          3: Haz2dutrUVMMKz8DWDpTMKU7v-M.roa (hash: UYJn16zkfgLSDIIDhGPHhj8L2SfoMr/Jiya6AdzxVHU=)
                          4: lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa (hash: bq6a+K+pPXFxcaKzeiruinFGWe/rm0xE/5P0J11lvFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:69:41:58:ef:ba:88:cb:9b:ef:d0:f5:53:1b:33:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: Apr 18 01:00:25 2025 GMT
            Not After : Apr 19 01:00:25 2025 GMT
        Subject: CN=35e51a70f92ea3f239012fb878150202a42fa689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3d:79:27:f2:54:ca:cf:9d:60:ce:91:c6:16:
                    8d:7d:a4:a2:96:2e:98:26:68:e6:20:3a:0f:aa:5f:
                    22:b7:2e:27:eb:36:0e:64:3b:cc:e2:3e:ab:d8:69:
                    e7:91:ee:d4:81:bc:f3:2e:36:e9:a7:99:63:00:d9:
                    9a:83:83:1f:89:3f:85:92:1a:90:53:c0:84:e5:6e:
                    8d:bb:a1:3f:c8:37:41:a0:95:07:fb:f7:34:71:23:
                    83:48:ef:f5:e3:9f:27:77:9f:3a:e7:58:bc:8d:48:
                    4e:96:6d:f8:94:57:08:50:ff:e3:4c:a5:ad:60:f4:
                    e0:ab:9e:fd:bd:f6:74:04:98:5d:15:8a:1f:e4:49:
                    24:b6:70:1d:f8:24:c3:f0:1d:4c:68:78:bf:16:23:
                    76:d2:6a:30:16:a7:91:00:52:08:60:8a:9e:87:bc:
                    2e:84:20:a7:04:f5:ea:c8:ab:6f:0e:cf:ef:a2:f1:
                    09:2b:9b:5f:91:a2:f4:e5:b8:85:39:99:71:1b:ea:
                    85:3d:37:2b:4d:b2:60:92:3d:7c:34:30:04:6f:62:
                    ba:9c:88:5b:71:a1:47:97:ab:e8:3c:f7:27:52:27:
                    30:d7:4e:b3:d4:a5:29:e7:aa:8f:88:0e:84:bb:bc:
                    36:bc:bd:58:47:9b:6f:16:96:02:81:6e:e6:93:b9:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:1A:70:F9:2E:A3:F2:39:01:2F:B8:78:15:02:02:A4:2F:A6:89
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bb:82:8c:3d:76:ce:f0:8f:b9:32:3d:2d:5d:1c:98:9c:32:
         95:e2:d0:d2:a9:58:4c:8a:da:4e:bc:13:2f:f8:83:e0:0d:3d:
         d0:6a:c8:64:00:fa:71:6b:ce:ed:84:c9:6d:55:be:84:3f:91:
         f6:6e:72:6d:a0:c8:a9:c8:15:12:83:81:59:84:d2:e0:58:b5:
         c8:7f:4b:94:d2:1c:c0:cd:c2:0f:6d:eb:91:c4:3e:0e:93:91:
         d4:6a:c2:bd:ad:a8:4a:7f:bf:e5:4d:68:3c:5f:23:67:07:ca:
         44:23:13:bf:b3:53:79:d1:3e:b6:96:75:c5:bb:ec:28:f3:60:
         72:9d:bd:88:85:82:66:37:39:27:1a:d7:77:1b:63:49:f7:0f:
         ed:46:1e:7d:35:7c:3e:85:fe:15:7f:91:a2:6b:4c:67:f0:b7:
         29:ce:75:17:35:e0:76:20:ec:d2:57:cd:c1:3d:0a:93:ec:af:
         f9:a3:9b:a5:27:30:fa:d1:57:0f:8f:bd:fb:2d:77:25:84:ce:
         3c:74:32:1b:7d:6b:14:77:f1:ab:2e:90:f3:89:d4:f5:97:58:
         58:79:1f:2a:47:d5:72:08:d4:5d:a0:14:8f:56:1a:ad:5e:a4:
         39:ab:87:67:a2:c5:b4:ba:e4:cc:00:c3:0f:77:4c:b1:fb:cf:
         a4:40:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:49:35 2025 by rpki-client