Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File:                     1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier:          mfeJI879zvhMa4lMY2mK1E8WinLLiaBCTVPX6Q5ahVY=
Subject key identifier:   DF:C2:53:42:BE:39:38:0A:D2:C2:9D:8F:58:C7:C9:B3:AB:54:0D:BC
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer:       /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial:       01963F1DF136435ED9FEDC1D75BD69156F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number:          11A7
Signing time:             Wed 16 Apr 2025 15:00:48 +0000
Manifest this update:     Wed 16 Apr 2025 15:00:48 +0000
Manifest next update:     Thu 17 Apr 2025 15:00:48 +0000
Files and hashes:         1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: Fhk9hWEdW4vFoO+egozIOIcocDgcaYVCixK5u+oiurQ=)
                          2: 9L_1mBjt99zXF40qYr_O6y2QbsE.roa (hash: k7FuYkV59HauSqsnOjmzLVNUp/bLC0YBxaQpGdWAgEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:1d:f1:36:43:5e:d9:fe:dc:1d:75:bd:69:15:6f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
        Validity
            Not Before: Apr 16 15:00:48 2025 GMT
            Not After : Apr 17 15:00:48 2025 GMT
        Subject: CN=dfc25342be39380ad2c29d8f58c7c9b3ab540dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:b2:6a:64:73:b6:ed:f3:b9:3c:79:a9:60:
                    41:70:cc:86:a2:1f:23:5e:ae:10:c5:ce:2f:c4:58:
                    98:08:50:b2:b7:59:f8:e4:b6:33:b6:3b:23:e4:16:
                    a0:ed:06:75:91:d9:ac:8c:92:46:46:36:2e:e3:45:
                    92:41:2f:76:03:8b:2b:e6:8f:fd:39:1e:91:13:36:
                    7f:02:a5:ea:2e:4d:7f:99:04:1e:54:2b:6f:eb:fe:
                    1c:03:07:2c:fc:d0:c1:61:2c:50:7c:15:42:b0:68:
                    61:62:78:8a:1a:6f:90:20:ee:e8:e2:9d:db:7e:de:
                    7a:d5:8e:fd:be:5b:6e:b8:42:fe:f9:09:35:db:9e:
                    9d:2d:16:59:da:58:73:33:44:4b:cb:63:fb:ae:2f:
                    e5:66:00:d2:1f:66:33:69:9d:ba:c4:df:b2:cf:a8:
                    9b:91:5f:9d:33:f0:73:2c:ef:54:1c:29:9a:5f:73:
                    d7:fe:94:96:98:d8:b3:37:7f:d6:75:d1:b3:ad:1b:
                    be:f9:b1:ba:db:db:36:f8:0f:bd:2e:5f:6e:0c:60:
                    26:bd:f5:7d:ba:40:91:da:8d:fe:a5:f2:cd:b6:df:
                    b0:fc:1e:0e:97:01:83:e8:e6:0c:11:c9:3e:b5:45:
                    34:db:4b:60:27:34:2e:0f:fa:cc:82:92:2f:96:01:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:53:42:BE:39:38:0A:D2:C2:9D:8F:58:C7:C9:B3:AB:54:0D:BC
            X509v3 Authority Key Identifier:
                keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:44:fc:0e:ea:0f:02:70:22:73:24:38:1d:5b:fe:79:54:53:
         9e:f3:42:80:0b:b8:49:f3:d6:30:fc:0a:6a:73:a6:14:6d:79:
         4e:17:08:6b:82:6c:58:c7:e2:f7:62:24:79:45:e9:13:5a:62:
         f1:a6:e8:83:8b:40:2f:e9:3a:7f:55:4b:da:d0:1a:31:1a:c8:
         ab:ba:ee:a7:97:d9:8e:35:b3:6f:91:94:38:c7:91:77:94:26:
         13:68:2c:1b:31:f2:f3:7e:de:c1:a4:9e:94:86:e4:bb:6b:5d:
         51:04:ab:b1:7f:14:36:2a:d8:03:27:2a:d4:69:80:d9:77:03:
         37:98:d1:d7:dc:d6:29:b8:3e:ac:d5:db:67:c1:9b:a3:40:21:
         6d:22:d0:84:52:f0:3b:d4:8c:c4:db:dc:9e:0a:d5:ff:92:e9:
         14:08:23:1f:2e:33:f5:fa:86:f9:a6:b7:96:16:3e:b3:d5:39:
         2b:98:f5:0b:f7:a9:41:a2:f3:6f:9a:b0:96:fe:54:c4:86:99:
         17:ad:35:dd:0c:70:d3:2b:f1:1f:e4:ac:10:3e:35:79:36:92:
         ec:18:4c:06:3e:36:a5:87:8d:f4:bd:74:d5:77:e0:2c:fd:66:
         d7:7d:08:11:53:40:7c:44:36:fd:2f:2e:91:98:b8:87:20:38:
         8b:89:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:54:54 2025 by rpki-client