Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File:                     SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier:          fuyZYOfyT6HR/OcA8FnWRCsLGphcT8/4gQIbVy0SEFY=
Subject key identifier:   77:52:7D:42:C4:3B:DF:7C:D3:6B:45:7D:56:D4:C0:DE:89:94:80:82
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer:       /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial:       0197B6A119AB6E3572F57FA149D4ED66C7CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number:          1177
Signing time:             Sat 28 Jun 2025 13:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:40 +0000
Files and hashes:         1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: u3LfczElxIjC1adS+1Noi2S7S9q+5eO99fY697ccACg=)
                          2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:19:ab:6e:35:72:f5:7f:a1:49:d4:ed:66:c7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
        Validity
            Not Before: Jun 28 13:01:40 2025 GMT
            Not After : Jun 29 13:01:40 2025 GMT
        Subject: CN=77527d42c43bdf7cd36b457d56d4c0de89948082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:a7:1a:d1:e8:75:92:ea:5b:19:9c:d7:cf:
                    23:4c:17:fc:f6:6c:d8:be:c6:1f:48:86:8e:da:bf:
                    df:7d:53:e5:1d:ee:99:0f:27:70:40:c6:ac:0c:d3:
                    b6:44:74:8a:7f:47:08:99:fd:df:96:ac:1d:c8:80:
                    e4:d7:b2:c5:6d:78:6e:62:5f:af:8b:b8:b0:4d:eb:
                    4a:68:92:34:16:cd:d5:10:d7:bf:ac:d0:58:36:66:
                    ad:f6:e0:71:e6:fc:ec:36:db:3f:50:95:00:03:22:
                    d8:fc:17:0f:c0:96:0d:4f:35:f3:af:2c:81:89:8d:
                    03:cc:76:5a:1c:07:ac:db:42:b0:a9:43:fe:04:1c:
                    71:2f:10:04:81:37:5c:99:85:41:05:7d:52:e5:92:
                    d7:88:16:94:93:e4:11:e3:bb:b1:d2:ed:e7:ff:52:
                    4c:e5:dc:ab:32:14:33:8d:7d:a8:12:14:66:a5:62:
                    02:53:3b:bc:07:de:0b:dd:67:80:fc:7a:4b:d5:d8:
                    42:c3:cd:d4:f1:28:4b:cd:db:4e:b7:84:34:cb:c6:
                    cf:6b:fe:34:49:0e:81:10:05:99:c7:71:9c:6c:95:
                    28:35:8a:ea:85:16:d4:a7:1e:7c:bf:f3:02:c0:c6:
                    bc:07:b6:99:da:45:64:96:e4:40:32:f9:c2:a5:d9:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:52:7D:42:C4:3B:DF:7C:D3:6B:45:7D:56:D4:C0:DE:89:94:80:82
            X509v3 Authority Key Identifier:
                keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:91:2b:34:65:f4:5d:0a:9c:34:50:bb:09:04:6a:4f:28:6c:
         5d:4c:c2:bb:14:ed:3b:9a:f3:ff:f4:ca:f4:8e:09:55:cf:44:
         7d:b7:0e:e4:fa:2a:be:72:dd:4e:2a:9c:1a:cc:c8:3c:70:72:
         cd:e9:40:1e:80:ae:f8:76:73:bb:63:c8:61:dd:82:37:d2:13:
         fe:7b:c4:14:96:a5:7c:8f:8a:0b:0a:52:19:b5:e2:77:8f:cb:
         21:8e:38:1d:1b:43:d9:c4:9e:c5:a8:34:e7:0e:34:22:c6:45:
         8a:9e:3b:66:eb:b9:5e:8d:7b:88:29:3a:4f:3a:dc:9f:a4:d9:
         b0:4a:2b:c8:37:83:19:f3:e1:77:c7:15:80:b4:f3:73:98:24:
         86:b6:dc:82:89:68:43:ed:9f:95:43:37:37:df:ec:ee:73:be:
         8b:46:43:10:34:2c:91:25:16:1d:d9:66:26:89:55:8d:b3:34:
         71:01:5d:eb:99:1f:06:c9:70:24:e8:04:d6:33:32:e5:d7:94:
         72:00:6e:cd:4c:a1:80:7f:f4:d1:35:6d:a6:0a:c3:7e:7a:c7:
         2e:e1:21:97:fd:b0:76:0f:c1:15:42:e4:c8:4b:26:ae:39:8d:
         20:b4:d2:35:37:7f:a2:e3:da:c3:43:9c:d3:bf:f3:d0:a9:16:
         84:26:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:25 2025 by rpki-client