Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File:                     l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier:          2bpVB/imreUVWRItUnwEem9HQRKDXL2Jwa1smGoFZqc=
Subject key identifier:   EC:DF:71:95:A5:96:1D:C7:DE:A4:77:9F:DE:9B:C1:1D:C1:1F:24:4C
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer:       /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial:       0197B6A1195810C06CCD04DBC8D654F4EEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number:          15C1
Signing time:             Sat 28 Jun 2025 13:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:40 +0000
Files and hashes:         1: 0fTjjyjaiEMTmN0qEGg30Ao2zns.roa (hash: bVrLoN7n3oaO1XYgZx8crHTGWgcotUS3skM4/csJhUA=)
                          2: Eem0N3GXMChoR9TCOhSTBkWIdjc.roa (hash: igndwr3EyynLXRXaxAnOCIr8pyhy15Y9vo4ph2wbRZ8=)
                          3: SZcqM2MymNLwtybzmnw-E1d2RJk.roa (hash: jRh3gj1EqHTeeiOWY5OcArwxYUApFn4YAZHaSARNuyY=)
                          4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: 5UXFDvCJU19sFx/yBQDndQ9d5AHbmnoVHh5gpsEnI+I=)
                          5: safrg3kATgNbdktyHNaBTUQ20Fg.roa (hash: rMOUfy4ZM5vd45QmK8llUEFz0T+7f/LFtDqbEYg/alc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:19:58:10:c0:6c:cd:04:db:c8:d6:54:f4:ee:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
        Validity
            Not Before: Jun 28 13:01:40 2025 GMT
            Not After : Jun 29 13:01:40 2025 GMT
        Subject: CN=ecdf7195a5961dc7dea4779fde9bc11dc11f244c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:80:d9:b2:46:a6:00:dd:6c:ac:26:38:2c:
                    f2:76:86:bf:c9:4e:a0:43:00:fd:e1:0b:3b:64:1c:
                    20:34:49:14:3e:74:a4:cd:26:b2:5c:53:37:24:9b:
                    8b:5c:fb:ee:19:34:e6:7e:a5:e5:25:a4:25:8d:a2:
                    ad:ee:03:16:be:2a:b8:3e:33:5f:61:de:a9:1d:05:
                    79:1d:82:e9:13:3a:b9:bb:10:f7:49:d0:64:0f:ee:
                    68:b7:35:b5:1e:6e:be:e0:f9:4c:34:ad:85:13:f9:
                    a5:ed:5a:9a:bf:6a:f5:8f:82:31:dc:12:a5:02:75:
                    88:8a:d0:e7:e9:51:5f:7a:4f:00:fe:d6:73:84:56:
                    79:bf:c9:08:bb:ae:f1:28:33:37:a4:64:f3:9a:85:
                    92:89:bc:72:51:56:16:0e:67:09:27:39:99:20:ae:
                    7f:5e:88:23:75:86:a4:66:60:27:b3:42:48:c1:c5:
                    d5:9b:b4:8d:bb:08:ac:f8:f4:88:51:14:2b:ca:ee:
                    d7:3b:9e:d5:a2:ec:29:f0:b2:cc:be:40:cb:0d:3c:
                    da:09:3b:b8:22:68:08:ec:19:c5:7b:39:23:3a:f0:
                    92:72:10:0a:e9:fb:ce:b7:44:42:f9:db:c7:dc:e5:
                    5e:58:32:d9:21:91:20:aa:f9:7d:e6:49:9b:fe:b8:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DF:71:95:A5:96:1D:C7:DE:A4:77:9F:DE:9B:C1:1D:C1:1F:24:4C
            X509v3 Authority Key Identifier:
                keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:56:60:73:7a:a2:4d:f6:ed:3b:1f:2a:31:26:92:bb:3b:55:
         92:81:25:6e:0b:b4:3d:4c:5e:01:e2:59:c4:d8:ca:ca:57:c5:
         85:6c:e8:d7:17:f0:10:6b:1c:02:4e:e8:52:06:f9:bf:be:2f:
         e9:36:a2:5b:ee:0c:db:71:ab:46:60:68:66:29:08:6f:89:22:
         21:b8:a2:64:94:92:a4:ef:08:ba:65:eb:42:e0:6f:00:fe:af:
         47:fd:d0:b4:86:6d:a6:db:29:ef:14:53:8d:8d:4a:45:3c:8a:
         18:72:13:07:96:6f:f8:be:5b:26:01:91:ab:93:38:f6:d1:3d:
         f0:4f:c7:93:24:af:d7:f0:80:d9:71:c5:8f:f0:e1:be:5d:c5:
         fa:4d:d7:e7:ce:dc:9c:4f:ae:6a:ee:e4:5b:57:8e:01:76:26:
         05:dc:ab:b9:0e:11:c2:47:33:f2:ab:06:33:1b:b6:ef:73:5a:
         2b:ad:65:19:89:4b:51:61:67:e9:75:99:2a:89:a4:67:df:77:
         b7:3d:07:13:d9:93:d4:b7:fe:5f:15:5b:69:85:e5:a1:57:8b:
         69:d4:c2:3a:3f:29:a9:38:3a:52:5c:d5:f0:6e:c5:2f:0d:a4:
         1f:1a:34:85:c2:1b:62:5e:e2:09:a7:12:63:dd:b1:92:db:77:
         7a:e6:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:13 2025 by rpki-client