Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File:                     AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier:          VBqN7AkJWxOjooXutMjyJoQUuRTn+LIID7njrvcq9dw=
Subject key identifier:   DC:10:0C:18:14:0B:2A:F0:9E:AF:A6:6A:49:AD:4D:1E:9F:D9:0D:9E
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer:       /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial:       0197B6D739F07EBD1D7215A3C934EFD164AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 14:00:47 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:47 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:47 +0000
Files and hashes:         1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
                          2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: qc5SmMO0x+rIHQVW8PYo1/ODL208Ea8YdZsadBAI2Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:39:f0:7e:bd:1d:72:15:a3:c9:34:ef:d1:64:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
        Validity
            Not Before: Jun 28 14:00:47 2025 GMT
            Not After : Jun 29 14:00:47 2025 GMT
        Subject: CN=dc100c18140b2af09eafa66a49ad4d1e9fd90d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:df:b8:51:5a:57:1e:75:7e:55:a6:f1:9c:
                    0a:84:f4:d6:5a:1d:5e:5b:2d:7d:f7:2a:5f:b4:9d:
                    32:d2:f8:2a:85:b7:38:12:ea:be:51:a8:52:bc:ba:
                    3d:06:d9:60:b1:4d:90:eb:ac:b5:c3:fe:19:71:d6:
                    cd:ed:99:fc:80:bd:ef:65:21:ea:fd:d0:dd:1b:1d:
                    a9:f6:e5:4b:64:04:40:02:9a:be:c5:2d:f5:0c:fb:
                    f1:84:93:32:10:8f:ef:b6:33:28:99:f2:6d:f2:c1:
                    94:a5:09:01:e6:54:00:ae:9b:13:ee:18:7d:05:f9:
                    af:df:58:a6:ed:ef:3a:43:07:3d:8f:9d:1b:b9:45:
                    72:71:ea:07:c2:67:67:4c:4c:3c:a2:29:bf:25:48:
                    eb:df:3e:9e:9b:b9:0b:7b:40:25:1e:9a:c8:6c:f0:
                    eb:98:ea:93:b3:60:5a:83:27:14:17:9e:42:6b:48:
                    6a:7f:e9:b8:cc:f3:04:92:2d:c0:97:fa:35:9a:19:
                    69:0e:16:a7:49:ee:47:7a:3d:2e:8b:1c:a2:f3:05:
                    a3:64:02:7b:25:43:68:96:37:f8:98:15:18:f9:1e:
                    fe:a2:04:c7:ef:0b:86:ec:9e:1a:10:3b:dc:af:6e:
                    75:b0:0f:29:58:c2:ed:43:bd:e6:28:75:0a:b9:e9:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:10:0C:18:14:0B:2A:F0:9E:AF:A6:6A:49:AD:4D:1E:9F:D9:0D:9E
            X509v3 Authority Key Identifier:
                keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:00:bc:8c:77:5e:f0:f2:66:86:e5:31:a1:89:fd:d9:7d:
         84:73:2d:5d:58:ba:8e:75:07:2a:6e:18:fd:3e:d0:08:65:c0:
         9e:3c:a9:11:93:d9:98:1e:f1:9e:01:13:05:44:e0:d0:a4:c6:
         00:17:12:1e:c6:4a:c0:27:5b:26:db:04:66:ea:75:cc:40:06:
         bc:48:14:ee:9e:0d:e1:2c:7a:e3:be:64:ee:b7:c3:55:9a:6f:
         cf:72:50:3c:fe:7c:e2:3c:95:ab:1c:a7:2f:c4:56:3d:01:b6:
         b6:ea:ac:e2:40:0e:b6:35:fe:8c:bf:f2:2d:54:22:fe:86:b6:
         d8:43:fb:9c:42:26:ac:8c:85:94:96:67:18:58:f7:2b:91:cb:
         6a:12:6a:cd:8b:71:c3:12:6e:e8:df:cd:2b:b8:68:70:77:f5:
         1f:3c:1d:d8:17:0f:fa:e2:69:3a:f0:c9:77:a7:4c:e1:8d:f9:
         86:7b:46:4c:b6:e2:6d:00:30:21:f2:ab:78:9e:19:0e:67:fb:
         bb:a5:08:cb:08:81:08:7d:25:3a:b0:c8:4c:77:94:3f:11:5e:
         5c:3d:5e:8c:8d:73:7f:54:1f:b8:df:56:f3:8b:37:b7:bf:e4:
         09:f1:88:0b:83:80:57:77:d5:b1:d5:dd:19:d4:ae:a0:09:75:
         ca:80:95:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:18 2025 by rpki-client