Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
File:                     uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft (raw, json)
Hash identifier:          S8LAj0DqPZkCTQzmsQyK3B/DFS6mlMOTazV3/RvnbNE=
Subject key identifier:   81:40:80:09:29:C5:D9:08:40:B3:1A:39:BA:72:16:57:2A:E2:19:65
Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
Certificate issuer:       /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Certificate serial:       01965191AFA0F2DB2DEC109E15A4F327342E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
Manifest number:          08FA
Signing time:             Sun 20 Apr 2025 05:00:24 +0000
Manifest this update:     Sun 20 Apr 2025 05:00:24 +0000
Manifest next update:     Mon 21 Apr 2025 05:00:24 +0000
Files and hashes:         1: FpN3CNrpC7an-iJQGSmMT_sDhCQ.roa (hash: IP5LQBH3slQY1vq5cW96oTpQwzobOGLQLnnmLh+kv0c=)
                          2: T2xZGAQ2utapiNKAxRkC6LvmPaU.roa (hash: wOG+SGzxtaS4DLVV01zxTU+InL0GZso9vp2F1RAwi2M=)
                          3: knjugsz4dO-GRlfWjJa4TPEo8dc.roa (hash: pgS04K1pxu870WaArIBezAQBjlsLTOobzOHJ29I84kY=)
                          4: uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl (hash: 4HAqb/CMvOdskLAtDQYf91E3Xiovq8zXEXl9ZfrG5a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:91:af:a0:f2:db:2d:ec:10:9e:15:a4:f3:27:34:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
        Validity
            Not Before: Apr 20 05:00:24 2025 GMT
            Not After : Apr 21 05:00:24 2025 GMT
        Subject: CN=8140800929c5d90840b31a39ba7216572ae21965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:32:eb:4a:be:36:85:e0:ab:af:90:ec:10:
                    9d:7a:d7:ee:33:48:f2:8d:3a:76:4f:a0:cd:2e:fd:
                    99:62:90:89:17:b4:6b:87:24:b1:5c:2b:06:2c:c2:
                    16:9f:64:2d:ef:fc:d0:1a:36:0b:95:dd:8b:40:9a:
                    10:3f:47:35:56:ce:dc:3f:7f:72:3d:bf:44:43:6d:
                    47:fc:6b:42:d5:9a:f3:bc:70:0c:60:5e:d7:98:79:
                    a1:a4:e3:02:c4:08:74:ec:34:2a:e5:4b:ef:4a:db:
                    9b:69:9f:64:26:ff:41:1c:1a:d2:fb:b4:0a:81:9b:
                    d8:15:4a:18:89:c7:5b:22:66:2c:ab:6c:46:dd:8f:
                    8c:2a:1c:89:09:20:53:eb:2e:c5:01:35:93:27:4c:
                    0c:25:88:28:b0:af:9a:14:4d:ad:c2:c3:38:f1:bc:
                    2e:a1:ab:6b:17:c0:2c:c5:21:20:cc:6d:cd:5a:9d:
                    c2:50:95:16:95:6e:28:c2:8e:d2:33:57:5a:45:59:
                    ed:7f:63:ec:f2:30:0d:98:7e:a9:fa:5d:08:e9:a1:
                    95:8a:ca:6d:10:3e:d6:82:76:12:8c:c5:5b:f7:1e:
                    a4:71:92:be:f9:d1:5a:ce:c9:9a:e8:f4:16:3b:58:
                    88:f4:2f:21:06:b3:d7:f7:7a:7d:f6:d1:e6:43:a8:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:40:80:09:29:C5:D9:08:40:B3:1A:39:BA:72:16:57:2A:E2:19:65
            X509v3 Authority Key Identifier:
                keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:32:38:ce:bf:cf:19:03:ef:4d:6b:f3:47:c0:2c:5d:6d:da:
         ea:92:89:c3:15:ab:aa:59:d9:8c:17:7f:53:de:21:37:ab:27:
         ed:3d:89:e8:9a:d5:00:2d:9f:2f:ca:01:af:b4:03:7e:82:b8:
         46:c1:b8:9a:47:7c:b2:9a:36:50:ba:d0:21:f4:08:32:30:6e:
         2a:0e:72:12:48:c9:61:88:5c:ab:79:3b:f0:b2:25:be:af:25:
         02:93:95:68:0a:64:86:ee:c5:54:92:b4:c0:5a:75:65:6e:d1:
         4f:86:57:a3:4c:f1:b4:3c:88:ca:d3:4a:b1:64:40:89:14:7e:
         f2:fc:37:fc:f3:85:20:47:00:cc:0d:1a:5f:59:06:94:ad:33:
         6e:5f:fd:3e:14:a3:14:05:e9:2c:e1:16:d3:25:f9:6c:1b:1c:
         43:ef:d4:2d:c5:18:bd:28:be:8f:69:b6:6f:d3:35:20:84:63:
         a7:90:a2:ca:55:93:ad:7d:4b:e9:99:58:ca:1c:88:9b:db:35:
         e7:cc:da:1e:32:d7:98:e5:90:cc:7a:32:e4:3c:a2:ae:b9:cb:
         96:89:ad:97:0e:46:7f:98:6f:4f:73:7d:39:92:8b:0c:61:7e:
         53:a0:6d:d6:8c:e9:48:a7:7a:fc:96:63:54:15:66:19:c0:3b:
         9c:59:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:15 2025 by rpki-client