Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File:                     tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier:          30o1zNbnzn5mYJeM6KTm8kMeNH94Im6Q3v15VnmTnGg=
Subject key identifier:   50:CC:39:1D:BE:01:50:EE:E8:74:CF:0A:53:A9:A8:06:4B:D6:58:AE
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer:       /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial:       0197DC9B815BA25ADB026E59541E4F6F4E11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number:          15C9
Signing time:             Sat 05 Jul 2025 22:01:08 +0000
Manifest this update:     Sat 05 Jul 2025 22:01:08 +0000
Manifest next update:     Sun 06 Jul 2025 22:01:08 +0000
Files and hashes:         1: i7TTR0PMX6DAq8x2EEX7tvYEy2w.roa (hash: iWmz0ZT2uDCkIA/K5JDubPnWXPlf7zxHizjmswntW2Y=)
                          2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: GYzeQ/MMZmvymPAS2zbeTl/9GfHFMCOH13PAWVJBQ8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 16:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:dc:9b:81:5b:a2:5a:db:02:6e:59:54:1e:4f:6f:4e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
        Validity
            Not Before: Jul  5 22:01:08 2025 GMT
            Not After : Jul  6 22:01:08 2025 GMT
        Subject: CN=50cc391dbe0150eee874cf0a53a9a8064bd658ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:37:e9:b3:f5:e3:5f:b4:b8:32:f6:51:ec:51:
                    81:c3:21:f7:5d:82:a9:7b:3f:bb:d9:b1:f3:bc:4f:
                    d1:34:4b:61:ca:e6:d6:4d:7f:9b:59:21:4b:f6:a4:
                    84:c7:6c:52:e1:5b:48:20:d7:90:99:fe:dc:a1:44:
                    01:c9:8b:6b:33:55:14:1b:9a:92:0a:75:5b:eb:be:
                    cb:c1:e1:9b:9b:d0:e8:06:35:3d:e1:32:71:2d:29:
                    d7:21:7f:b8:f2:3f:d5:00:36:f3:cb:0b:b7:70:53:
                    b2:ff:ef:41:55:b3:fe:60:69:66:c1:ed:df:18:25:
                    f6:45:3f:86:a2:e9:6a:79:1f:1d:24:63:f5:8d:94:
                    93:5e:61:23:bb:b9:69:24:06:48:31:e6:c3:56:a5:
                    47:1c:57:35:35:58:08:a7:86:47:e5:05:2e:d8:da:
                    18:89:22:61:74:38:89:44:4e:65:3d:85:b0:95:94:
                    f0:79:2d:66:e8:17:b0:15:fb:cc:5f:37:b4:e7:7f:
                    4c:09:77:ac:39:4a:0b:fb:c1:61:70:74:a5:78:bd:
                    7c:b3:df:95:ab:4f:3e:3a:44:79:ec:40:08:86:e3:
                    dd:4e:94:fe:23:e4:96:39:98:2a:d8:76:26:a1:6b:
                    5b:86:ee:12:f1:d4:32:57:6c:9e:02:de:b3:24:f0:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CC:39:1D:BE:01:50:EE:E8:74:CF:0A:53:A9:A8:06:4B:D6:58:AE
            X509v3 Authority Key Identifier:
                keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ba:57:44:28:89:36:84:e9:65:b5:90:9c:17:23:55:e7:01:
         0c:79:6a:4a:2b:83:4c:18:f5:63:e8:e0:dd:10:89:b3:f1:68:
         f2:5f:c6:eb:67:93:53:3d:ed:68:23:f7:46:31:3a:0a:03:fe:
         ba:43:e6:b7:a0:ff:34:c0:ed:27:d5:3c:f3:4a:6d:b2:58:07:
         74:1d:f1:1d:ef:1e:fc:5a:41:ab:65:d8:51:8f:ea:ec:4e:f9:
         db:c0:98:5e:04:d2:62:46:20:3e:14:2b:01:e1:85:1b:bd:3b:
         cf:8c:ab:e8:1b:bc:aa:9d:a5:56:26:e2:e6:91:50:c3:22:88:
         2e:9c:f6:c7:31:27:80:ec:d9:69:79:e4:b5:fd:e7:1d:c9:73:
         e9:62:74:0a:da:99:16:0c:2b:c5:7a:12:21:b2:9c:a3:22:93:
         34:ce:4d:07:9f:f2:34:a9:b6:0f:b1:09:1d:00:c3:ed:9d:6b:
         f7:6e:3a:e8:f8:a6:7c:58:23:fb:07:fc:c4:75:fd:35:a5:a8:
         79:60:ee:40:61:ae:04:58:03:ca:4f:75:c9:1a:14:46:4f:a9:
         f5:1c:87:52:94:ae:44:a0:38:99:7e:17:90:c4:9e:09:65:e7:
         fb:ac:74:fc:8f:32:93:d9:be:18:c0:14:1e:82:26:aa:c0:79:
         7d:f4:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:35:06 2025 by rpki-client