Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File:                     9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier:          MVm/FWxXhe/5jypziYmiR4aMYvfRt4lwSfgYzxgpBIA=
Subject key identifier:   4D:90:CE:77:0D:A8:E3:1C:B9:08:81:C1:93:F4:0C:9D:27:8E:F8:51
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer:       /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial:       01974E584B3003696E0E0C4D38A7707E66F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number:          08B1
Signing time:             Sun 08 Jun 2025 07:01:38 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:38 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:38 +0000
Files and hashes:         1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: LQr7n80tv4XVQDwUMBvDcRBhSd5uRlo3r7TE2WjXf9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:58:4b:30:03:69:6e:0e:0c:4d:38:a7:70:7e:66:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
        Validity
            Not Before: Jun  8 07:01:38 2025 GMT
            Not After : Jun  9 07:01:38 2025 GMT
        Subject: CN=4d90ce770da8e31cb90881c193f40c9d278ef851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b4:e4:01:44:2e:81:69:08:b1:88:3a:7b:da:
                    04:8a:91:60:36:04:87:f5:45:88:32:f0:52:38:a1:
                    36:ed:ca:5a:da:ed:63:17:7c:45:13:ef:71:25:19:
                    d1:2a:db:c9:c7:e1:d4:96:cc:c5:10:0d:2b:5c:0f:
                    f2:44:32:21:23:88:e4:83:8c:dc:77:b6:2f:33:9c:
                    e4:79:7c:0b:b5:d6:f6:7f:a6:99:c2:aa:a1:19:2d:
                    d1:cc:f0:0a:56:75:d2:63:ca:e9:d7:5e:09:a9:24:
                    34:f1:0c:77:93:7d:d0:f4:9e:9e:9f:a5:db:44:6c:
                    d1:46:87:24:44:1a:6c:96:d9:d0:2a:5a:78:3f:9e:
                    1c:53:72:64:ae:70:7d:55:00:7d:02:01:f7:38:60:
                    f0:f5:22:ba:85:8c:14:d2:59:a3:a9:81:df:0a:86:
                    a9:dc:2b:61:fa:5a:a4:f9:07:4d:48:77:1b:02:bb:
                    4b:9c:85:44:fb:2b:3f:af:22:06:47:12:f5:4b:03:
                    9f:87:db:35:84:41:5e:36:30:b4:a4:e8:4f:76:3e:
                    8b:fb:23:b1:9e:d5:2f:e6:67:25:16:ab:2b:e3:03:
                    71:55:4e:a4:51:1d:c7:5c:05:f9:e7:ff:ff:21:19:
                    88:76:15:b3:e1:06:9c:a6:dd:cc:48:57:f2:0b:46:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:90:CE:77:0D:A8:E3:1C:B9:08:81:C1:93:F4:0C:9D:27:8E:F8:51
            X509v3 Authority Key Identifier:
                keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:57:7e:8b:07:d3:02:4b:a3:b8:11:40:a6:80:b1:0a:8d:74:
         64:9d:d2:ef:d0:6f:45:0a:f0:1a:01:b2:a1:0c:a2:7b:47:b2:
         4b:a6:1e:e1:fe:ec:6c:1c:1f:9e:b9:2d:35:5a:da:e0:95:b4:
         9f:01:09:c8:4e:eb:e5:65:9c:4f:22:b6:2d:36:9a:ad:07:e6:
         f6:07:0e:74:03:99:df:41:ab:a8:a4:8e:7d:e4:56:6e:93:97:
         45:34:1b:7c:2d:6f:43:ac:73:c2:4a:15:44:0e:2c:30:b9:94:
         91:14:62:ff:86:bb:99:b7:6d:5f:af:dc:98:92:e3:50:fb:af:
         3f:20:d1:9e:79:ae:ac:cd:12:06:62:b1:ba:bb:fa:89:20:37:
         79:a0:ee:dc:5a:4d:cf:d1:4f:20:c7:d7:43:ee:d2:a7:ff:54:
         1a:12:9d:a5:a1:72:c2:39:3b:61:62:07:2b:da:c0:f6:16:8b:
         ae:b7:1d:20:76:62:ef:36:a8:ce:89:60:2f:82:43:4e:a1:37:
         cb:9a:f3:90:c6:07:48:d6:1c:f4:3c:46:98:8e:96:37:ab:cf:
         04:8c:8e:20:a8:6f:72:1e:f7:24:29:4a:e0:97:5f:61:13:8a:
         25:c1:1c:75:03:70:44:d3:f1:37:a3:a1:2e:cf:2b:59:f8:8d:
         3b:e5:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:42:52 2025 by rpki-client