Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File:                     i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier:          nELiYuzEvt87ZjQzMwzgq2YCNs+p+DpjiG/QwGjcnKw=
Subject key identifier:   88:E5:01:3D:31:B5:2D:49:19:67:D4:B1:8E:F8:8E:4A:A7:11:EE:CF
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer:       /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial:       01976139866F12AE61D426C32F8ED7275229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number:          1355
Signing time:             Wed 11 Jun 2025 23:00:49 +0000
Manifest this update:     Wed 11 Jun 2025 23:00:49 +0000
Manifest next update:     Thu 12 Jun 2025 23:00:49 +0000
Files and hashes:         1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
                          2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
                          3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: RM/E5km/HG2l+3CBISve67QRdrh9YrOA1MavFUI/oZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:39:86:6f:12:ae:61:d4:26:c3:2f:8e:d7:27:52:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
        Validity
            Not Before: Jun 11 23:00:49 2025 GMT
            Not After : Jun 12 23:00:49 2025 GMT
        Subject: CN=88e5013d31b52d491967d4b18ef88e4aa711eecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:f9:62:55:10:19:19:df:30:2c:34:ec:5a:
                    36:ed:31:ae:f8:24:e8:46:fe:0e:a0:48:23:1b:32:
                    e6:21:f7:52:5d:45:f9:c7:3a:54:b5:28:8b:7e:da:
                    ca:f9:1c:ed:0c:4e:1b:d3:98:0f:95:78:96:25:48:
                    d5:75:4f:61:45:01:6c:94:36:de:86:92:93:3f:cf:
                    1f:b9:86:70:96:7d:89:60:a2:2d:dd:24:c2:96:ad:
                    51:14:0d:29:ee:bd:30:3b:b0:62:6b:ca:95:ce:41:
                    39:fa:a3:27:40:ee:19:29:16:36:c9:fc:35:8f:73:
                    86:a3:d2:9e:e8:5c:61:5d:48:0c:05:b6:84:3c:95:
                    62:ba:c1:f7:c5:57:30:e1:13:bc:46:99:d5:7d:6d:
                    09:c4:ad:45:9e:59:c4:71:cf:1a:5e:f7:97:e5:02:
                    97:a4:ac:18:88:5a:4f:60:9a:fd:98:18:e2:86:1f:
                    3b:3f:53:42:18:2f:28:b9:22:a8:30:40:d3:8a:66:
                    5a:1d:5d:9c:ed:07:58:c3:6d:6a:13:c6:2e:24:b9:
                    eb:23:3b:56:32:30:78:b3:41:31:fd:e6:42:20:ec:
                    9b:fa:b7:25:45:03:b3:2d:04:54:0c:e0:80:f9:46:
                    ae:cb:9f:40:25:ad:b3:0a:76:e3:ff:3e:45:3f:8a:
                    7f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E5:01:3D:31:B5:2D:49:19:67:D4:B1:8E:F8:8E:4A:A7:11:EE:CF
            X509v3 Authority Key Identifier:
                keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ee:a2:2f:27:40:b6:7a:fa:f8:c8:08:81:21:02:da:75:7a:
         28:ef:20:fc:c0:f5:63:1a:ac:d4:26:c4:76:00:48:89:c4:ba:
         c7:35:fd:68:f5:82:d6:a6:95:27:1b:c4:4e:2b:fd:e8:7e:57:
         75:b7:92:c3:6f:59:aa:d6:36:f2:03:2f:30:1c:82:10:01:fa:
         24:23:08:92:07:c9:d2:2f:9a:8a:c3:07:29:31:50:1c:92:12:
         c6:46:05:33:3a:3e:69:7f:6d:b8:4c:4f:fd:db:88:10:ec:4b:
         9b:a8:59:ec:5b:14:b7:98:4e:e8:cf:72:5c:d8:ba:b8:6c:ea:
         4d:83:6e:5e:63:c8:4f:fe:b2:0d:25:25:f3:ca:2f:99:a1:f5:
         b3:91:2a:ca:22:74:01:87:1f:9e:d6:aa:f7:89:c3:20:5a:3d:
         cb:7d:b3:92:66:aa:9b:4b:1e:1a:35:a8:d2:52:3f:60:28:4d:
         7c:d4:0e:93:db:00:8c:15:ad:52:6c:26:18:96:47:57:38:fe:
         3e:82:c3:fe:97:16:a6:c9:4f:b8:ab:7a:18:b8:8d:17:0d:1c:
         39:d7:6e:4c:51:4d:ed:c9:3c:9a:ff:18:fe:08:f1:d0:9d:17:
         a8:82:92:e3:ca:63:82:7d:71:1f:b0:b9:e1:cb:a5:29:d1:28:
         78:13:19:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:24:45 2025 by rpki-client