Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
File:                     BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json)
Hash identifier:          QC5xVw/XqSdDuokKj1OyZ9kIN/fSNvbKRyNu86WKqmc=
Subject key identifier:   08:95:91:B8:F3:39:6E:E7:53:0B:23:71:78:79:22:8A:F3:CB:E7:E3
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       0197C42894722195FAD039B88A7A7DF8B79E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
Manifest number:          01B9
Signing time:             Tue 01 Jul 2025 04:04:43 +0000
Manifest this update:     Tue 01 Jul 2025 04:04:43 +0000
Manifest next update:     Wed 02 Jul 2025 04:04:43 +0000
Files and hashes:         1: 8-yw9B2nPkCfG0ri-05wxbzK95I.roa (hash: D9ViM4Gvio4pjQlbZ1UG+yr83bOB/c4pGt/sWMwpAIo=)
                          2: 8h_JebN18U-DQLa7g_VNQTnzmD4.roa (hash: qaZfGE5JnXlAKOoOZ4NfG/E3st+EoiejWrngTgnqPGg=)
                          3: 8l5FYwYGOqxUaWVSlUjVKFQRq9o.roa (hash: iKbO3HNza0VQ3VY9N8HdJ3BiSCs2zhs5feby4QGnZ8M=)
                          4: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: MnCnereffvjGDBlXPvT/Xg4BnxwSaaQVzLFxeDq1MNk=)
                          5: BkFJ8mbP64fvIWj3YOZAx-Ty58Q.roa (hash: i56tI2Jr3/f+SnU+trhqqGSN+HLMlyPnA4UnWX5rV40=)
                          6: ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa (hash: dRJ7Xfhd2IktdnYweUcsqpbKflQdcxF/jmr99tlC1i0=)
                          7: CNtM8zejZ349bsOx94QsI819vZU.roa (hash: xxnS1MVGHtYdDD2abmYeFD2yf6kRsOETWylSJhltDEE=)
                          8: ExusXckLrxsZNqKlfCaNi76wyn8.roa (hash: 958U6++7iG9JMRvtU0OfoU8TdGPIQhNtWPh5XYFfc1E=)
                          9: KBH5_k1ABLmKeJO7l-34IXPXqRs.roa (hash: P/JtMtW3yU+sxA5fXStKTboD+4DMtOGbsll537HWOk4=)
                          10: OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa (hash: PbCMLXyHRgfKX4P/i6p6IrPplONleRWnbtsOIMdtbRA=)
                          11: PLk9TutEnODtjh_cFDaldAbB5PY.roa (hash: qkESS4s55n9T3InGFLcKi+s8NRQZoUu8pWBH04Sl4oY=)
                          12: PT5V9DI-vTGcX-g7Png7Cy1LYh8.roa (hash: mbbkqBuIkuxl1XHSOYFImXOP6BpkovOruDLkWb6LgCU=)
                          13: PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa (hash: cKqK7iISq+hHAlg/ZJ1m7UofToF0VF0S/PulOyt8vLw=)
                          14: V6Fx8HKW5vYtwoUl9-FGq139rH4.roa (hash: VbwVmnD3kf6YOoUlp8nFzAYfvI3kHMT1G3evyq8grxI=)
                          15: a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa (hash: AjkSxRf4m/hDIVmcEg8Nz3dPC++vr47UARhugAtRJG4=)
                          16: bfi17XKfoQv_Pklhy_iWS-yvXWo.roa (hash: 05HfZ+6uBWn/eosoqV+13/r9i72s/MRFf2Ny+SGpO7c=)
                          17: boJmz216E2pVUR2unuNVUplfhyM.roa (hash: i+zLjdL9F/qjZdj6l1k7yZCeKyy95BgZFZ1ZAYbGuBs=)
                          18: f2D3UV4sYjo4Otohoy79vFEF0Ag.roa (hash: KRgW361Frr8F6yZbGVOnQ7xVzqdchF195Wcn12RxysE=)
                          19: gicegBW5Q1xikkf_SLe1-6lH06U.roa (hash: pqN+I3n4dBN3SZnpQPA/6vzrG5l7HojgVKb3SXvaH9M=)
                          20: i37S93TaktE02JjUP5APRm1uGhA.roa (hash: 3ieD+Yqt9bbdsi6c5MtKtLCaudx9BsLyU5xdqIHq/ug=)
                          21: iuwR3gymafKwUArlmGbUUJNbSa8.roa (hash: EtXzdV3cLqZcZzSgtMiBpL5x/7d8YbZUcgnJOjOuNu0=)
                          22: kNKW14Dxh4X2xbIOHRvhO-4tzcE.roa (hash: ENDHKI6G3Ef3eUled5c74JZlLpucyibX5X1QKlCy8/E=)
                          23: mN1SF0jqXFbA77Cv4kSAFM7eMrI.roa (hash: bd+gRbyeXkhCADuawPp6Y7Zl70oz5JVqv5T2uQOkFmM=)
                          24: nE08znyGEROzN-ZPpvH871B_YXc.roa (hash: rvo0J7csjKxABmc7ZJ4UjX/IGGVkIizjnr+3tXbkjRg=)
                          25: sEeMx7Xy6olm8O3Hb7-nIWkl8X8.roa (hash: 1kTUQGyENj5OE2dLqf3kwETU6u1mEMcH0DOZizfo6zI=)
                          26: t-nVwMrqHHxrE1ark94Yjjtte-Q.roa (hash: LPqKL8VE/r4l01BQV0rr2GgmF/BaUOTIrC3hVfr4ek8=)
                          27: vZmH2bvHl1nSGW5nMPLYnxBlkRU.roa (hash: JOoXAeAAIZEiWY0Rg+/OZMN4l51Mdx07GGAUcyh78VU=)
                          28: xWNsCw4Wm17UDjnUmJUpC1lzZ3Q.roa (hash: NIpf4SimRF3YYu1N0AO553A+ccCpp95SQAsoP+cL9IM=)
                          29: zwse5TQa1KwU7PqLUxa1Kne0wLw.roa (hash: vR4GdsgcZFcL1UVu/nRbrE6/e6gF9I3sc1PWMJywHGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:28:94:72:21:95:fa:d0:39:b8:8a:7a:7d:f8:b7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Jul  1 04:04:43 2025 GMT
            Not After : Jul  2 04:04:43 2025 GMT
        Subject: CN=089591b8f3396ee7530b23717879228af3cbe7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:e7:1a:f6:ed:ad:80:81:33:08:91:d0:dd:
                    4c:59:e1:8b:eb:1d:22:94:ae:3f:ea:2d:cb:db:91:
                    17:82:ec:c0:20:2c:b2:64:93:f6:2d:21:3d:60:74:
                    00:b6:ba:44:f0:65:4d:b9:56:f8:82:a2:17:de:9d:
                    29:46:1b:98:99:6c:aa:c5:94:3d:2d:a8:fa:dd:d2:
                    fd:af:fa:0a:4f:a9:a2:25:5a:2d:8a:04:b7:87:a8:
                    da:66:e7:b5:68:7e:33:42:64:9b:b7:19:32:4f:0b:
                    67:ed:59:7a:7a:1a:51:84:84:13:66:cf:4f:f1:8c:
                    85:c0:3c:14:1d:35:5b:bb:b1:08:10:c9:fc:ef:ac:
                    f0:ac:dd:b1:0c:20:7c:91:e0:b9:fe:1c:af:09:09:
                    f3:74:3f:d6:72:02:36:32:3a:51:5f:b7:7d:60:8c:
                    81:c8:95:a3:3f:f0:26:42:da:0b:6e:0d:7e:e4:97:
                    13:7d:4a:3c:89:17:82:60:c9:0f:20:a3:4b:08:7c:
                    90:89:03:5d:7b:33:20:c5:59:18:20:b7:83:be:a0:
                    31:2e:51:d9:c6:7a:ac:90:8e:8e:e5:2f:64:74:2a:
                    6b:09:c2:39:ac:69:e9:9b:7c:eb:8a:0d:16:0e:ac:
                    ac:82:c4:82:5f:4a:e1:18:b2:3a:f4:ee:ca:f5:ab:
                    89:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:95:91:B8:F3:39:6E:E7:53:0B:23:71:78:79:22:8A:F3:CB:E7:E3
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:33:80:3f:b0:a1:1a:a3:c7:2c:c3:71:6c:81:5d:19:ba:29:
         f7:da:f7:69:0f:d2:e4:9f:8a:98:27:72:63:a3:23:11:0b:14:
         d5:e0:54:96:80:0f:36:15:b6:11:99:5b:0c:47:c1:71:0d:1c:
         61:3b:1e:fc:3b:0f:3f:9d:1c:b8:2e:14:80:64:d4:c4:d9:ba:
         7e:75:93:3f:ff:d9:6f:1a:9c:59:15:d9:16:b0:c7:78:48:81:
         88:ee:a0:23:6c:87:c3:9a:70:d4:f9:23:82:d1:79:6f:83:76:
         55:31:0e:38:db:66:c7:95:6b:49:16:c0:d6:95:62:62:eb:60:
         a0:6b:e4:0e:b0:00:9c:f7:70:2d:5e:9a:0b:cf:a6:1c:5d:b1:
         d2:1d:4f:4a:fb:93:d8:b2:af:47:6c:09:b9:84:c4:18:5d:82:
         6d:39:74:74:5a:b3:41:94:28:9c:84:8c:8e:cf:65:09:99:69:
         6b:88:ff:fe:2b:e1:0c:95:48:dd:c3:ad:d6:83:81:d8:40:08:
         11:66:6b:1f:a7:3d:52:08:8c:ac:01:d5:90:11:a4:38:24:07:
         81:4e:f8:47:60:95:f6:96:02:f5:1b:86:88:03:f1:8b:fe:34:
         77:c9:23:3c:7e:30:1a:e1:50:89:f0:ed:19:1a:55:0e:43:ac:
         c2:c8:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:05:25 2025 by rpki-client