Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          xpVW7wONq/kZKaVJQEkI5uU717ddwc0LJOUsvs2klnU=
Subject key identifier:   E5:17:60:95:92:DA:37:1D:7F:61:7C:F7:6F:34:3C:29:D1:87:D8:23
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       0197B5FBCF0F3F97DC1B6237887726D32426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          15BC
Signing time:             Sat 28 Jun 2025 10:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:07 +0000
Files and hashes:         1: 4vY-bTyKzTJbIG8K1hcmZ2OzV3Y.roa (hash: 94nlldFhiqgmPqtety18s97ySLGHCvNHQ/0uGpBprik=)
                          2: 7cZbkQqr-SEdfr0tEW8C1Pix35Y.roa (hash: xSjPvHmjy6FdGTZKdoGxVAJ1Yq148v83DxivVL7nC44=)
                          3: 9rKKbaQzfgzdmUc0RCvAHPOAcsI.roa (hash: VH5L1nLiuJzOWwVEXdxCxgFwEZ1HPXPm7pBgXu98Q+c=)
                          4: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: xXw+6d4DoxUR9a2FkHQG9icG5nA+wHdo0oltV714w0A=)
                          5: Vtkp4nVzagTb1teWd63BFZh8RwU.roa (hash: TYSKwA87i0+WxUKYjqVqa3ovHNk1VR5486G73L2E0tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:cf:0f:3f:97:dc:1b:62:37:88:77:26:d3:24:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Jun 28 10:01:07 2025 GMT
            Not After : Jun 29 10:01:07 2025 GMT
        Subject: CN=e517609592da371d7f617cf76f343c29d187d823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:2f:48:47:d4:a8:7e:6a:4f:90:d9:08:eb:
                    fa:9e:cd:6d:5c:f8:60:78:3d:8e:a9:a0:18:e6:d9:
                    ca:a2:2f:60:48:ed:6b:7e:d7:0b:38:42:7c:eb:1d:
                    0f:c4:8c:38:ea:95:20:46:54:4e:5b:6b:00:a6:a6:
                    74:2b:ff:9d:af:ae:86:14:2a:1c:9c:f8:19:38:bd:
                    0d:88:a1:f8:d0:77:0d:79:db:be:84:16:f0:4c:f7:
                    df:24:b3:4e:51:f3:78:2b:c5:36:52:db:43:4a:fb:
                    14:73:3e:8b:2c:68:a1:6f:30:fa:c4:ac:ae:30:c1:
                    30:50:15:0f:d8:df:06:cb:c1:11:5c:a6:07:92:f2:
                    91:75:a6:94:85:4c:26:82:48:25:01:68:6b:27:31:
                    8f:34:e8:55:54:28:72:5f:94:16:9e:06:b9:52:15:
                    6b:35:fb:ba:4f:28:85:41:cb:5d:1b:71:4c:c1:23:
                    ef:30:29:0c:a0:72:3c:f7:63:d7:8b:e9:29:ed:a1:
                    24:86:57:7e:95:a4:1c:b0:2f:89:34:ee:03:3a:f2:
                    35:b9:f6:ee:c2:95:a4:7a:11:e4:1a:58:4b:12:47:
                    4e:7d:29:ca:85:59:1e:fb:fb:2e:1f:ab:4a:35:ee:
                    d1:1d:3b:cd:31:fc:1b:f3:9d:c7:85:73:b2:80:92:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:17:60:95:92:DA:37:1D:7F:61:7C:F7:6F:34:3C:29:D1:87:D8:23
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a3:c1:2d:59:9a:3b:fe:e8:fd:52:02:7a:93:3c:28:65:d8:
         bb:28:1b:30:ca:ef:f6:f0:23:79:78:b3:3f:d9:30:a5:34:1e:
         d1:e5:78:73:e0:77:20:ec:cd:6e:08:06:35:f1:75:c1:48:6f:
         11:88:d8:54:6c:35:c0:53:1e:c8:61:81:26:5c:6f:6e:3f:8b:
         2f:d9:23:58:9f:fe:b4:92:2e:b4:70:71:90:24:81:19:cb:5b:
         3a:c5:1f:5f:99:37:8f:6a:dd:45:6a:36:c1:74:ad:b9:03:a4:
         e6:2b:57:c4:22:f5:7d:57:2d:9f:82:11:f5:6e:7b:ae:f3:27:
         95:29:2c:aa:cf:14:b2:6a:73:5a:2a:68:19:ba:e6:8b:65:00:
         59:be:a6:dc:14:04:26:92:e5:ba:14:a2:73:ee:27:25:91:2c:
         7b:6f:fd:39:83:c3:d9:fe:ce:8e:0b:55:d6:0a:c4:34:f1:31:
         ec:7d:91:7b:56:0a:4e:dd:ca:04:fe:55:e1:ae:c8:00:11:01:
         7b:af:3f:e3:c8:a7:73:86:0c:6e:5e:81:14:10:c6:b1:50:79:
         d0:0c:12:b4:40:8c:b4:46:a9:94:c9:d1:a0:db:c9:d4:95:e8:
         06:4f:8a:79:20:04:2f:7f:e7:49:96:e6:6a:8f:68:a6:c3:35:
         c0:d3:45:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:13 2025 by rpki-client