Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File:                     YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier:          UYQCJzIpeDiYei8QSWOWCObSvzlYk2gj3q64bOzl8+E=
Subject key identifier:   C6:F6:FD:AF:90:15:38:91:04:7C:60:56:08:49:CA:13:CF:9A:EC:E4
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer:       /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial:       0197B70F3DB35DF4E172BB66619B42E80F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number:          15BF
Signing time:             Sat 28 Jun 2025 15:01:58 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:58 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:58 +0000
Files and hashes:         1: NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa (hash: TKAQNNpSaY4TAI1TdJLCf/Ljbi9ccCQ85au2gXamNHA=)
                          2: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: hsNyezeR6y4N2RGvLbHTOzykJP8Z/RWrQeobYGBKB9c=)
                          3: a-LdFc8kFHmTn2Z0Vu6JHLUtEY4.roa (hash: zTR8ty0nmJzU13XE2BvXWY2tGZYklQKm1YYaB327LpQ=)
                          4: el7j1J3bDKT27ieG83FPrQYbZJc.roa (hash: T0KRecSjSVtSKj2we6RG/6efDR4xy2f/rpalGX+ig90=)
                          5: od_NfkWMgnzZGkwU7wJ-RgWOeM4.roa (hash: OZscsQ8cir5jkIZyLY0FUkHozKmgjWJmCvTcbzJzQOg=)
                          6: tinXUk407KICO2MXsH1p4TReydw.roa (hash: linbqgFB5KTsziPayiqOokYdnyWHwGO4kAHLVkJgE3k=)
                          7: wxZtKKgCuX_XkT9wjC8PBIL2aLI.roa (hash: tIV+HptpEfjZ8DjgmHhOJU8c4e/cERhkwqc7ixWl0UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:3d:b3:5d:f4:e1:72:bb:66:61:9b:42:e8:0f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
        Validity
            Not Before: Jun 28 15:01:58 2025 GMT
            Not After : Jun 29 15:01:58 2025 GMT
        Subject: CN=c6f6fdaf90153891047c60560849ca13cf9aece4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:67:62:ed:66:dc:56:81:77:b9:16:a1:ed:b2:
                    51:dd:2f:97:9c:ce:04:69:09:e1:74:97:ec:3f:3b:
                    ad:d3:de:a5:0c:6e:c9:90:c4:a2:79:9d:6b:3c:8c:
                    36:77:16:64:21:b7:d7:8f:7c:ec:e7:1b:b1:43:4d:
                    d4:95:b0:da:dc:a2:d7:5d:c4:67:79:a2:5f:77:b7:
                    60:75:94:95:cb:c3:c8:f4:60:cf:f4:fd:f2:56:c6:
                    6b:8e:3d:82:cb:55:6a:ec:23:e1:fe:e9:c0:c3:12:
                    8b:9e:e3:86:dd:f2:6e:b5:4b:2a:d1:af:8b:c5:45:
                    e5:68:8c:ad:dc:68:e3:b8:55:55:d8:60:16:d7:b7:
                    66:56:f1:51:8c:82:f0:0c:7f:fb:04:0f:bb:09:a6:
                    a0:58:98:dc:b8:cf:e1:9b:29:3a:32:66:c2:c6:03:
                    c2:d6:ec:2c:fc:22:9e:7f:cf:30:6c:b1:1a:85:ae:
                    71:4d:c4:c7:4c:cf:00:e9:53:ec:6b:92:29:0f:c1:
                    19:d6:f4:3f:76:7b:a6:e8:56:b8:2a:2c:d0:92:fb:
                    a6:e9:b6:e8:6a:d9:71:ed:27:59:37:e9:b4:e4:69:
                    52:9b:d0:8e:be:df:2c:13:76:c4:de:a9:11:9a:50:
                    fe:58:9e:36:50:41:79:9d:20:fd:3d:4f:00:1f:c9:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F6:FD:AF:90:15:38:91:04:7C:60:56:08:49:CA:13:CF:9A:EC:E4
            X509v3 Authority Key Identifier:
                keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e5:a0:6c:05:d7:45:96:80:ca:21:0c:4a:35:0e:40:de:c6:
         29:d7:21:84:cf:ca:f4:da:8c:4c:40:f0:16:f6:77:2f:d0:bf:
         ed:19:55:7c:ce:ce:97:ed:ef:c5:c6:ee:f0:01:d5:84:a7:b0:
         54:e5:97:97:73:37:ea:72:3e:eb:a9:7d:cb:e8:39:ac:5f:25:
         60:7b:c6:c5:ed:45:0a:d3:4e:79:fc:d7:33:0f:2f:12:74:b3:
         32:45:f7:40:f2:33:5b:42:88:46:71:0c:74:fb:88:e2:c1:f2:
         dc:90:df:72:1f:93:69:6b:22:3d:8b:e4:90:46:81:bd:9e:d3:
         75:ea:a2:fd:a9:d2:0b:3f:84:3c:4d:11:2c:87:2f:dc:d9:2c:
         37:c3:98:d4:09:53:eb:f6:ed:6b:51:b0:39:7b:ae:3b:69:a3:
         64:a6:27:c4:20:2b:51:08:10:e0:62:39:61:40:91:71:23:68:
         fc:7b:b0:06:7b:49:9c:6f:9d:de:46:c0:79:cc:e0:29:92:6e:
         54:b2:8d:4c:90:a0:43:6a:6b:2e:83:75:be:29:2b:21:d8:ea:
         e3:19:52:c5:6a:ca:8f:69:2f:c4:f9:1b:14:02:26:ed:77:69:
         70:c8:a9:9a:51:06:ea:18:a6:99:ac:df:3c:a6:b5:ff:c6:b9:
         06:f0:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:09 2025 by rpki-client