Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          zZYv2iSjw1RqLrvJlMK5PNF+Hiu63wKmp3s5y4ygZJc=
Subject key identifier:   0E:0A:EF:B6:48:AB:51:6D:AA:27:30:B0:1E:68:F6:E2:74:2C:D6:52
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       0197B6D7B2D5AAE300D8BC33B1E6BFEF6737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 14:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:18 +0000
Files and hashes:         1: 0mHHxrKDuXooxqRJqM3AcObFutU.roa (hash: 0sIJmx7yyuOdBXcmte6YeWeL6TZg8JAjxBTze6wfptI=)
                          2: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: w6sYz2ZPuYmUj5dNBgnztAAV68+Zslq2F4/tnrYuB60=)
                          3: 7CJziOdAfq9jwl7KYFdQlPSS2HM.roa (hash: oYgf2+8vVMNQWr/UIAh3TmOHiKE3yvmzUsWvpHQBY4E=)
                          4: AA2twhj3JjqNeEtfXh_nvFIhwUI.roa (hash: 7pwyUMMRmENXJp1YdVN9DBuKjXp76GQ7r0RF+5Zw+oI=)
                          5: NKe-wrE2WicgBb0c0Ud-bVOtGPw.roa (hash: gADDqpEfldBNZqdg/FkPxqfMdnRA+6kZ643uxJ4620k=)
                          6: dV3eLvyh7dkJSKTfdErtuw7Jadc.roa (hash: NpVV1N+SDAUUoPHhUF4/SnqeySzcrRHlw0l3druFyDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:b2:d5:aa:e3:00:d8:bc:33:b1:e6:bf:ef:67:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Jun 28 14:01:18 2025 GMT
            Not After : Jun 29 14:01:18 2025 GMT
        Subject: CN=0e0aefb648ab516daa2730b01e68f6e2742cd652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:9f:9c:99:ac:fe:01:53:77:f4:e2:c3:0e:
                    54:7e:47:78:01:de:6a:f6:60:9d:38:32:b8:03:78:
                    c6:b7:d9:9c:5a:70:40:f2:e6:5f:c6:f2:26:2d:a5:
                    6c:4f:0d:fe:49:c2:4d:e5:fb:06:e0:98:da:ee:ab:
                    13:77:06:17:28:35:81:a4:82:f6:fd:80:20:50:f7:
                    32:06:3f:39:0e:79:d2:41:c1:61:62:f8:63:13:0d:
                    b9:f8:2a:f7:7a:32:0b:0a:34:be:ad:67:70:3b:99:
                    70:8a:db:ba:ed:0a:8d:1b:ef:07:63:44:30:a0:ff:
                    62:d1:68:8f:2d:c5:05:30:97:57:bb:62:fd:3b:bc:
                    43:b4:cd:11:0e:5b:3d:04:28:71:0d:aa:e5:08:a3:
                    98:3c:96:f3:39:36:11:7d:8b:f8:02:00:2b:f9:00:
                    9d:c6:ea:84:45:61:7d:05:f7:1c:f9:44:76:37:43:
                    48:11:34:1a:3b:07:13:ae:3f:db:91:46:d6:b2:a2:
                    24:87:d3:c8:54:4f:d7:2e:6f:de:f1:ee:73:be:49:
                    4f:98:97:8a:32:93:fb:70:ce:af:ad:ce:c2:15:7f:
                    d7:a1:98:89:8d:cf:1d:26:a7:30:ac:d7:9d:3a:64:
                    a6:56:2e:7b:76:5a:af:8e:ec:a9:4c:5f:a7:fd:09:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0A:EF:B6:48:AB:51:6D:AA:27:30:B0:1E:68:F6:E2:74:2C:D6:52
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:09:f8:94:e1:32:9b:bd:86:d2:56:c7:08:e6:2c:14:d2:8a:
         bf:47:bc:cc:9d:5e:55:3d:3f:65:4a:8e:40:6a:48:b7:bb:d0:
         01:24:7e:2c:7d:39:03:57:a3:c0:58:b9:18:a6:d1:6c:45:48:
         6c:14:dd:d7:22:f7:a2:c1:26:34:b1:cc:b1:e1:60:de:99:58:
         77:61:c2:df:15:9c:09:aa:30:9d:33:ae:5f:a5:2d:2e:26:16:
         a6:2c:92:b6:23:79:d6:37:63:e2:a0:0d:2d:47:ca:a2:31:67:
         bf:17:a7:b7:a2:eb:e9:a2:51:1a:c4:f1:11:0e:77:ec:7f:58:
         b4:c0:3c:20:02:d0:12:96:b2:62:c1:39:2e:f6:52:2e:47:fb:
         f4:f3:35:d0:8c:26:f5:9e:65:08:0d:5c:8b:25:2a:2b:28:4c:
         2f:b6:09:5e:65:01:6c:19:0a:cb:3e:02:a4:53:91:62:11:ae:
         d5:c3:1e:88:c6:08:bf:c0:63:c6:5b:ff:a2:44:4d:5e:ba:94:
         a1:71:78:5e:fb:1d:18:4d:72:5f:79:bd:7f:80:2f:47:da:9c:
         f4:68:b6:b4:a9:ae:b7:15:98:fd:18:57:2c:2d:bb:17:0e:7d:
         2e:16:3e:ca:e0:87:bc:7b:34:24:6d:77:4e:38:61:c7:5d:d1:
         02:79:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:23 2025 by rpki-client