Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File:                     iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier:          X6sKL0CTnGsVJMgA54vGP8ClucScgMrqqRm7TBTUNTQ=
Subject key identifier:   EB:34:03:57:61:8B:46:93:71:CB:D5:F3:78:C5:AA:18:7C:1C:F7:0C
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer:       /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial:       01974B56320B08B3443B696EB368C7734353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number:          098B
Signing time:             Sat 07 Jun 2025 17:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:29 +0000
Files and hashes:         1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: a3hkB6XGFjyM1wP8pHKiRWxzi4cZFJ6OKFIB+RFCNio=)
                          2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:32:0b:08:b3:44:3b:69:6e:b3:68:c7:73:43:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
        Validity
            Not Before: Jun  7 17:00:29 2025 GMT
            Not After : Jun  8 17:00:29 2025 GMT
        Subject: CN=eb340357618b469371cbd5f378c5aa187c1cf70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bf:5c:0d:5c:b6:ac:f3:6f:65:64:e9:a5:6f:
                    8c:dc:c7:d3:ad:2b:66:1f:ce:d1:c3:38:49:00:6b:
                    8c:1e:c3:13:37:00:25:be:11:f9:92:4d:f1:b5:9b:
                    cb:8f:1d:52:dd:d4:e5:48:70:fe:cd:04:bd:9e:51:
                    f7:66:47:04:8b:f2:4e:3d:97:8b:5c:6c:6d:a5:85:
                    ea:6b:cf:45:ca:da:c0:36:c6:15:28:1a:a6:43:97:
                    57:4d:bc:c4:40:2e:e2:cb:48:57:bd:00:f6:8f:55:
                    07:51:2e:4a:58:f0:a7:48:51:0f:f9:08:c5:98:b3:
                    02:a4:8f:57:bc:4c:b1:94:f2:c9:db:f4:5f:96:4e:
                    a2:f5:14:a1:19:9e:ac:9d:66:c9:8d:96:73:c1:cb:
                    c5:87:f3:84:bf:94:8f:1d:12:f3:85:f4:07:04:5d:
                    8c:e0:4c:c3:30:7f:47:a8:25:6a:af:c9:32:32:82:
                    09:ae:62:d1:57:75:3a:2c:78:5f:35:47:60:46:f5:
                    37:8d:ea:e3:50:0f:58:88:df:af:d0:b5:a1:ac:ca:
                    32:8b:97:80:0b:98:0a:56:6b:8e:5e:2a:d8:38:c7:
                    3f:0e:a5:cc:85:db:bf:66:5b:85:45:b4:92:2d:ce:
                    8d:4b:ff:d2:24:0b:78:46:5a:6f:49:b3:fb:9b:ea:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:34:03:57:61:8B:46:93:71:CB:D5:F3:78:C5:AA:18:7C:1C:F7:0C
            X509v3 Authority Key Identifier:
                keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:2d:57:a0:7d:6e:e1:e9:0e:67:c6:3f:21:d5:c4:2a:2c:
         f5:20:14:19:fa:6c:2d:b7:85:7f:87:37:1d:70:ae:20:13:c5:
         87:32:ff:15:63:99:79:14:61:1c:f6:ad:16:d3:cb:64:21:52:
         c7:a0:c9:2e:55:0d:95:48:7c:70:77:81:e4:f0:79:7e:31:24:
         45:1b:e7:1e:66:d2:72:fe:f8:3d:ae:c6:94:8e:4c:0d:d1:d1:
         79:e3:4c:f7:ab:cc:59:12:78:52:3f:cd:69:cb:35:25:df:f5:
         c2:05:11:b8:13:d5:d4:21:5c:7f:fe:0c:9b:12:82:29:d4:6d:
         f2:89:9f:65:5b:96:af:36:b7:03:3c:f7:01:cc:42:de:d1:98:
         aa:44:c4:0c:27:e5:a8:fb:33:14:eb:65:c0:82:ac:da:1b:d6:
         f1:34:6b:a4:54:b2:95:2c:95:72:63:28:3d:d4:84:34:03:40:
         07:b8:94:26:98:d0:70:60:5f:9c:d8:c1:67:49:8a:8d:79:a1:
         e7:40:77:bb:b9:fc:3b:3e:a7:80:97:4a:c8:39:0d:24:92:ce:
         49:c7:c9:44:d7:11:d1:d7:8a:03:ca:0a:34:ad:d9:27:4f:6e:
         84:98:70:14:51:29:e8:d4:80:24:5a:7f:b3:f1:ec:02:8f:ea:
         f3:cf:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:27 2025 by rpki-client