Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File:                     MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier:          rVs+R6roL7Hr10nBXPYVWeHKFZ6wIBs7kpEvXz7Cu5w=
Subject key identifier:   1B:33:B0:82:4A:FD:2F:C5:75:0A:BD:9A:8E:13:66:C3:8A:43:12:09
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer:       /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial:       0197B6A0EBC0A27286B8B79F75F5CBF4E666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number:          0BD2
Signing time:             Sat 28 Jun 2025 13:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:28 +0000
Files and hashes:         1: 8q_1sdbmWayLtmP8mTZB8kLpDTw.roa (hash: uQTkc3VWGLAWZhJNFH53PtzgfyjjEyHOxqo6DRrQtqk=)
                          2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: 6ke4jagB4YSsDNngnb4MitvRkM+GMquDYWInVLrnZsY=)
                          3: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (hash: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=)
                          4: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (hash: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:eb:c0:a2:72:86:b8:b7:9f:75:f5:cb:f4:e6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
        Validity
            Not Before: Jun 28 13:01:28 2025 GMT
            Not After : Jun 29 13:01:28 2025 GMT
        Subject: CN=1b33b0824afd2fc5750abd9a8e1366c38a431209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:34:fe:df:30:f7:a5:11:db:d2:4b:bb:39:
                    4f:f3:67:ba:a9:c9:9c:b2:c3:ed:fd:67:d6:d2:4b:
                    9e:97:9a:48:8e:02:0e:c9:f8:f4:59:3f:9c:79:88:
                    69:54:2e:b9:12:bf:47:01:02:51:d6:47:12:0d:b6:
                    83:8c:1b:b8:63:b7:b1:39:04:f2:7f:66:df:94:7f:
                    16:c6:2f:71:c5:77:06:19:9a:86:5d:51:5c:e9:a5:
                    ae:2f:e4:d0:ba:46:09:c2:5c:28:f7:be:14:57:bd:
                    2b:79:67:c4:77:41:4f:ac:ff:27:07:0d:f5:af:61:
                    56:83:14:fd:0f:b2:ee:4f:79:74:2e:47:9a:2d:b3:
                    65:ae:48:82:a6:99:b9:db:48:bc:b2:71:8d:c3:cd:
                    83:7a:10:6a:f4:a9:18:b9:87:a9:e2:16:f3:d3:be:
                    05:01:bc:01:9d:93:06:5b:e2:80:9e:1d:35:d8:75:
                    8d:79:07:bc:82:69:fe:71:14:1c:fe:c4:b0:a0:59:
                    a7:21:87:1d:54:46:6f:a4:ff:2a:0c:f3:d6:b4:6a:
                    f5:a9:91:28:2b:c6:f6:17:d6:10:3e:aa:66:ec:e4:
                    6f:63:ff:68:74:ba:2e:03:81:52:bc:f0:45:ee:d2:
                    ce:9c:f8:c7:22:10:73:3c:f2:2f:96:ad:20:3b:0c:
                    59:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:33:B0:82:4A:FD:2F:C5:75:0A:BD:9A:8E:13:66:C3:8A:43:12:09
            X509v3 Authority Key Identifier:
                keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:37:f9:d5:c8:d9:14:ee:2d:40:27:39:7c:8c:86:fb:ab:b4:
         74:14:17:d7:77:63:7f:fc:38:9f:0d:c6:4a:c9:ab:93:16:bd:
         e6:42:f3:b3:b0:d4:0b:72:d5:1e:fc:47:3e:55:8b:7e:d9:c4:
         ce:8d:44:3c:f5:30:a6:14:1a:a1:5f:01:41:64:30:e7:67:08:
         89:7b:fa:15:a8:70:8c:f9:17:f0:3d:cc:11:3f:6e:6e:4b:90:
         1e:6a:84:f1:99:80:d4:a9:8c:08:70:93:ee:fd:bf:9f:34:2d:
         eb:d1:f9:a5:f4:d0:e6:1e:6a:1a:b4:02:b7:3b:3d:ae:d8:4a:
         95:cf:6a:94:4c:d3:fa:69:f5:b5:a5:e2:0c:cc:6a:7f:c2:f0:
         55:5f:67:de:7f:99:e0:5c:e0:25:25:3e:b4:61:55:57:84:ea:
         9f:3e:26:41:98:3c:bd:b3:64:19:fd:b1:29:ed:e6:51:48:f0:
         0c:23:a6:14:22:05:db:12:7d:f5:5d:33:01:54:b9:53:c7:01:
         38:29:6f:c5:28:ff:f6:09:55:64:33:0f:f9:84:4f:da:90:f6:
         a6:35:2a:7a:d4:28:32:01:76:7e:a0:d3:80:a5:09:59:3b:a5:
         ff:e8:93:16:71:fc:ae:9c:21:41:5b:49:b1:9b:d2:43:f2:91:
         82:4e:8d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:13:59 2025 by rpki-client