Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File:                     80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier:          WEyDUfgh3nq8SMR+8VU8XLOxj7KGR8Gfx3RgAlknx1c=
Subject key identifier:   F4:AB:D6:C6:08:24:1E:00:3A:57:17:18:DE:C6:45:0A:72:B6:8B:0C
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer:       /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial:       01974A0C886E0DB22B8C977870434BA901A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number:          0B2E
Signing time:             Sat 07 Jun 2025 11:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:24 +0000
Files and hashes:         1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: fvi0/y852CSfgcEdv2aR1T0lxa3hHMz/vJJgrCaHTNA=)
                          2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:88:6e:0d:b2:2b:8c:97:78:70:43:4b:a9:01:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
        Validity
            Not Before: Jun  7 11:00:24 2025 GMT
            Not After : Jun  8 11:00:24 2025 GMT
        Subject: CN=f4abd6c608241e003a571718dec6450a72b68b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:88:81:1a:f7:32:03:3c:ef:1d:ff:24:52:
                    7f:02:05:5e:53:5b:6f:24:f2:38:b2:55:f3:99:26:
                    01:ca:c4:e1:11:f6:81:99:61:d6:c1:fc:9f:aa:e8:
                    f0:99:99:d5:14:67:ee:4c:2e:34:6d:f8:a7:20:7a:
                    d1:3b:e5:94:bc:3a:84:ff:98:ed:01:0a:5a:76:ad:
                    75:eb:c0:62:55:69:ee:28:c5:b2:fd:46:0c:50:b1:
                    57:31:1b:4f:fd:d7:ea:b6:3c:1e:58:5e:d7:9e:20:
                    40:3b:70:4f:0b:1a:69:2f:34:7d:28:d1:ad:ae:d8:
                    b9:95:67:33:60:ee:a2:68:21:c3:84:23:fb:de:df:
                    b2:1f:30:3b:e6:b2:e0:5a:32:ed:38:7d:2e:bb:cc:
                    30:48:fb:ee:06:93:2a:53:ea:9c:02:40:f6:e8:86:
                    43:21:6d:fa:87:2b:ec:ec:ba:7b:1b:fa:c9:cf:68:
                    6c:7d:05:33:8e:86:52:d9:9b:46:af:ad:21:c8:c4:
                    f1:cf:7e:15:bc:92:ee:68:e1:e7:fc:ab:4b:9f:7b:
                    f6:b2:6e:84:de:4a:d3:4d:9d:b4:25:d2:03:93:4a:
                    29:a6:a7:96:b8:d7:29:9c:27:46:6f:6d:88:96:95:
                    a5:7c:f9:ac:d4:21:09:41:54:e1:20:bc:f1:f2:b4:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AB:D6:C6:08:24:1E:00:3A:57:17:18:DE:C6:45:0A:72:B6:8B:0C
            X509v3 Authority Key Identifier:
                keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6b:c9:e9:93:73:29:81:27:cc:64:81:bc:2b:22:2a:59:a6:
         3d:6e:ca:6f:fb:db:45:de:eb:4d:33:09:f1:7f:5e:6a:eb:3a:
         91:4d:2e:a4:85:ce:0c:f9:f6:d2:4a:2f:96:b6:68:39:20:fd:
         2e:e9:ec:69:77:60:f8:d7:ea:71:63:34:68:c0:b4:d7:36:56:
         49:43:a7:d2:4b:4e:a3:c9:34:b8:61:ea:2c:bc:88:6d:e8:76:
         b1:ed:92:ce:9c:d5:bc:8f:17:3f:17:5c:db:59:a5:97:4a:ca:
         17:6b:3d:02:74:03:ce:e0:dc:2d:d4:c7:91:58:05:d3:93:47:
         46:2c:8e:06:69:80:4c:15:ea:52:42:15:84:39:65:8f:14:b8:
         e5:23:0d:d3:ca:a4:69:7a:97:9b:64:72:b9:ca:9f:28:74:8c:
         af:65:51:f6:db:e3:82:14:33:f7:d1:8c:da:06:81:62:40:59:
         b1:5f:00:a7:0b:2e:2b:ba:c0:25:75:f4:72:3d:76:3c:ef:66:
         a4:03:64:4b:a7:33:04:c3:25:c7:c5:f3:fc:7f:1b:ed:ef:a3:
         46:07:0f:e8:bd:d4:e6:97:15:83:bd:91:77:36:01:d4:1f:42:
         f8:ca:ac:4d:63:45:af:75:ca:f7:1f:fb:0c:34:97:5c:ec:18:
         7b:e0:22:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:26 2025 by rpki-client