Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
File:                     6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json)
Hash identifier:          4dR2SxuMP9GMBtTplLFGTYvMsDcM3KyJP6SQZUqdluw=
Subject key identifier:   22:99:56:57:FB:1C:53:0F:FE:79:66:10:50:94:3A:80:D1:20:D1:60
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       0197B70E5C6F9A035262702654B538A4C4E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
Manifest number:          15CC
Signing time:             Sat 28 Jun 2025 15:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:00 +0000
Files and hashes:         1: 0zBI85AWMPV8-ZPv3GQ1JdHs6Mg.roa (hash: a8ZOlpawdj+woIZuCvEmwdR4gKs6qg0nNvaIeVFf0+o=)
                          2: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (hash: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=)
                          3: 3UXfxzBUjpd2dvq5bafsNogmKlM.roa (hash: bA7f58jlZlzveYNtUmlKVRtEpQ5Dv4hyfzeaC10VHb8=)
                          4: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: dSY3TF2mAxaIcZ4ZG6SNE4h8JzRXgXzXvtoelaMWocs=)
                          5: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (hash: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=)
                          6: AQNsOCUz19Ut0W2SGuiyLeTI2FM.roa (hash: Jv1vanIsUJEv2fbabmogBnj/mQ6LDnoYHz1QpK/aP2I=)
                          7: LzX9ElOnhGp_nPRgTmHqftx_RQw.roa (hash: WQnCNTmDNCYbVxX/RpMfdPSYlE7UFVrF2G8SgVlhVgg=)
                          8: NBTd6QujxD8vAm2y0tIory9u3RA.roa (hash: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=)
                          9: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (hash: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=)
                          10: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (hash: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=)
                          11: k45M8B18zZq30kOscm_b2rNT_ps.roa (hash: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=)
                          12: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (hash: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=)
                          13: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (hash: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=)
                          14: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (hash: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=)
                          15: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (hash: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=)
                          16: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (hash: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=)
                          17: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (hash: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=)
                          18: xAuy4WKwAiWwyWz_74f0hDIYmYU.roa (hash: cySMwsU48nXQT4v9lmbqhzw+DBOqWz9D22FydLNc6Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:5c:6f:9a:03:52:62:70:26:54:b5:38:a4:c4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jun 28 15:01:00 2025 GMT
            Not After : Jun 29 15:01:00 2025 GMT
        Subject: CN=22995657fb1c530ffe79661050943a80d120d160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:a0:d5:d6:78:3c:f1:01:e5:f9:43:b5:17:
                    db:83:e0:c4:75:44:43:75:23:7a:0b:52:11:c6:85:
                    3b:e5:2f:5f:03:04:e7:28:e9:90:f9:d1:89:4d:6a:
                    41:2c:53:ba:ad:20:74:18:ed:6b:76:4f:98:11:46:
                    b0:fd:e4:8e:5b:e2:dd:7b:1c:8d:4d:5d:6e:f7:79:
                    bf:90:a9:02:99:3b:3d:23:80:54:3c:84:bb:36:b5:
                    a3:e8:9f:78:8f:ca:5b:8c:56:04:39:68:02:ab:f6:
                    a2:34:cd:0f:36:8f:cb:68:a4:07:0e:22:d4:a8:9c:
                    67:3d:e7:40:40:a6:d0:25:f1:f8:95:54:fa:ec:e7:
                    95:e3:ff:a1:1e:7a:ae:09:22:f7:fd:cc:63:1a:e7:
                    dd:8b:3a:4f:73:1a:b1:bc:63:3a:32:0f:76:c3:3d:
                    b2:4a:49:4a:4a:7e:0a:13:59:04:bc:80:9c:e8:85:
                    5f:fa:79:26:99:99:2d:ba:9d:40:e3:a6:1c:2a:c2:
                    11:9a:86:73:59:10:30:fe:cf:44:30:23:1d:31:20:
                    f3:8c:88:e8:04:49:68:7e:5f:30:18:d2:fb:e8:e6:
                    a8:ef:2d:a7:67:e2:db:52:8b:12:2d:38:79:b3:cc:
                    b2:0c:54:d5:74:3b:bd:c0:8d:2c:35:39:72:ed:eb:
                    04:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:56:57:FB:1C:53:0F:FE:79:66:10:50:94:3A:80:D1:20:D1:60
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3a:4e:6d:c3:be:fb:6c:3e:e7:cc:f6:6e:1f:4b:d1:f4:02:
         35:09:28:db:f4:c2:e4:8b:24:3f:75:3a:90:ea:45:54:0b:a2:
         f5:a5:c4:38:82:97:3e:ba:2c:b4:39:af:ca:1b:de:78:32:8b:
         e4:39:ca:0a:54:43:e6:2c:6d:35:4e:62:97:f6:b5:8c:0d:33:
         ec:6a:9f:c5:c3:9a:ef:47:d0:1e:76:9e:27:89:a5:ab:ca:82:
         e1:88:83:c4:d8:a6:f4:86:62:4a:66:e8:f4:59:2b:76:9d:53:
         f4:26:de:9a:df:00:b2:cf:b7:d6:3c:e3:c5:26:26:b2:0e:5f:
         5f:57:45:56:8e:b5:ce:5f:91:91:23:1b:8d:0a:0b:8b:8c:db:
         4c:b2:71:b5:38:ef:7e:50:5d:59:c2:9a:8b:58:54:f1:ad:ea:
         1e:13:37:16:57:11:fa:5b:82:cc:14:f1:e2:ac:5f:a9:62:fa:
         17:24:46:af:11:6a:a2:71:19:27:fb:5b:41:61:2d:73:a8:83:
         60:0e:f6:ce:3c:33:d8:f6:21:8d:af:61:d9:32:c5:09:20:17:
         7f:6f:ec:63:bd:62:81:ea:37:9c:87:75:dd:96:0e:90:f9:9c:
         f5:18:06:54:8e:23:79:a8:72:ce:09:fb:a7:a1:6b:92:c9:23:
         ad:d4:f0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:46 2025 by rpki-client