Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File:                     X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier:          o7uIAQe1lGtqtDnSaMpLh9JUgQwjR+JiyekO8QhjS3I=
Subject key identifier:   31:99:ED:95:81:F0:45:53:16:A3:71:E6:37:F3:6F:D3:B0:23:44:8B
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer:       /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial:       0196410C13712F120DBA36BD3B717660755B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number:          027F
Signing time:             Thu 17 Apr 2025 00:00:32 +0000
Manifest this update:     Thu 17 Apr 2025 00:00:32 +0000
Manifest next update:     Fri 18 Apr 2025 00:00:32 +0000
Files and hashes:         1: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: 4VCMQOiBZvWsxqv618O8v7D63BbCw8ZLHlgqHZfb31I=)
                          2: ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa (hash: fwgZ3FgELKfh9d5JZWpb+7kZ9OlNjMIWIM8CDC2wbXE=)
                          3: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:0c:13:71:2f:12:0d:ba:36:bd:3b:71:76:60:75:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
        Validity
            Not Before: Apr 17 00:00:32 2025 GMT
            Not After : Apr 18 00:00:32 2025 GMT
        Subject: CN=3199ed9581f0455316a371e637f36fd3b023448b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:88:69:28:d4:9a:18:70:69:2f:89:60:70:f2:
                    61:87:63:93:d1:af:f8:87:c9:9a:7e:e2:14:e1:72:
                    ad:e9:12:68:9a:f3:9a:54:ed:7a:7d:29:14:06:f3:
                    71:fa:01:9f:bc:65:8d:2d:62:f3:4f:d4:68:e9:33:
                    45:91:af:6f:d8:29:b6:6d:2c:a9:13:09:81:ac:94:
                    15:ce:b7:53:2b:02:7a:44:b7:09:1c:ef:78:11:f7:
                    9a:22:2a:8c:22:0b:29:01:8e:e3:94:93:ee:df:3e:
                    78:38:d2:ba:af:5a:e8:8f:79:3d:a1:21:44:09:60:
                    39:ce:99:87:03:32:7f:43:cc:10:45:a6:64:82:3c:
                    ee:d3:8c:85:54:92:e5:72:f5:e4:50:2a:ed:c5:fb:
                    bf:f8:af:2c:c3:7b:ff:80:ca:f7:d9:85:33:bb:20:
                    eb:c9:fc:4a:24:c5:9b:b4:35:8d:2b:83:42:42:2f:
                    b3:6b:df:1d:2b:4c:69:2c:58:00:9a:ac:7b:c0:29:
                    3b:b5:08:23:28:d6:99:30:07:df:6f:02:72:c9:38:
                    46:76:24:fb:5e:23:e5:fc:da:21:f2:86:d7:86:87:
                    55:c9:06:0b:d5:44:d4:8e:a4:66:50:42:6a:c7:42:
                    a8:09:58:18:b4:9f:7f:8e:30:db:54:a3:04:c6:5f:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:99:ED:95:81:F0:45:53:16:A3:71:E6:37:F3:6F:D3:B0:23:44:8B
            X509v3 Authority Key Identifier:
                keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:82:c8:42:ee:a2:69:5b:e3:d4:be:46:a6:39:aa:7f:65:2e:
         5b:4a:bf:f7:c4:02:7d:c8:0e:8b:71:dc:e5:90:35:0b:96:a0:
         84:7d:d4:b1:02:78:f4:ff:71:8d:1f:ca:11:3f:ef:fa:06:d7:
         4f:03:9e:a0:cb:18:b4:c2:59:c9:df:8a:b1:f8:86:b7:5e:57:
         b8:b9:db:93:e1:5f:ae:3d:a6:69:c4:e9:79:39:0c:8d:06:1f:
         da:df:aa:23:47:32:e9:aa:be:9c:88:d7:45:84:2e:64:4a:07:
         65:fb:0b:4c:0c:99:78:34:7e:fb:de:0e:f0:92:08:6a:da:31:
         55:30:b4:77:44:29:08:dd:67:d1:04:3c:5f:8a:08:34:6d:38:
         3c:4e:c8:1c:5e:82:4e:82:2f:60:1b:91:27:32:51:c4:8f:fd:
         67:d3:f2:b5:4b:eb:b2:9b:5c:d0:07:05:e9:c3:ea:f7:f6:a9:
         4b:05:7d:fd:61:63:0f:98:27:94:57:7d:52:93:9a:da:fe:b4:
         7d:90:f1:99:2e:2b:1f:ae:a3:db:fe:35:c0:5b:8d:32:bf:4f:
         5a:08:fd:45:0e:dc:85:1a:36:29:7f:bc:97:50:7e:cb:08:0e:
         19:bb:60:7f:7d:d6:53:51:21:7b:22:b1:c2:00:46:84:5d:c1:
         c9:09:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:31:12 2025 by rpki-client