Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File:                     4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier:          sq66fk+3QQrrFAWbOytOnpqI81yorkRzjORyg1VfhMI=
Subject key identifier:   F1:42:C7:B7:55:C8:86:8A:67:89:EE:F4:BA:07:F6:26:15:4C:07:51
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer:       /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial:       0197B6A22EC8E3548014F5B84A923F98CBEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number:          15D7
Signing time:             Sat 28 Jun 2025 13:02:51 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:51 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:51 +0000
Files and hashes:         1: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (hash: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=)
                          2: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (hash: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=)
                          3: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: PH78cdt7jMZ1QcZpkfBJgJGVsR+6x9CIxmd2EMlng7E=)
                          4: P54Qz9AI09JDOlqysqt799AeQRI.roa (hash: nIDEtW0TBUZxo5dIDtHdP7iLVF2Wse6E2BuTqfPasv8=)
                          5: _dP89dJHE-YZKAUIAMAKH5hCybo.roa (hash: RwLTyGyMw54nCLsLFUIuCCv0sJSfUYZ8s2qq98bQOs0=)
                          6: baI3T-QVvPK6b76nYUCZm85ZrSs.roa (hash: JldtWM10Ffd/1qvivADvuf6lNYl9UTodEd29bMMwfcg=)
                          7: eAV-d8BbWJ1sJQuFdRvhLNIzJUA.roa (hash: T3JT9dws49hGRBqX3Lqw/F5GMKuYnFZbEjUfdpuIhGs=)
                          8: h4oHF6R3uhLn9C5VN0t5w_HOGdk.roa (hash: l8RvUuXjd9Sh+5mA5Uw84faFr4xIw6LnpFGoAgtXpUY=)
                          9: r2_uEzNLhBHjD8nrsm_28O-I61I.roa (hash: MQGSyx9ipk0r/WYHwP9ZlzljWRWQN1rdWtX2fCTKqeI=)
                          10: tTbiV1p1IxN2njOeOlGPUdrcEO8.roa (hash: QCqFLLh9eDcI0sf1Fk/d5nbIK61Y2OX/OMR+8N2W95Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:2e:c8:e3:54:80:14:f5:b8:4a:92:3f:98:cb:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
        Validity
            Not Before: Jun 28 13:02:51 2025 GMT
            Not After : Jun 29 13:02:51 2025 GMT
        Subject: CN=f142c7b755c8868a6789eef4ba07f626154c0751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:4c:cf:d3:1a:4f:e8:40:ce:14:55:d9:bd:
                    9e:5a:fb:c5:d3:0c:ad:56:9a:31:8d:5e:6c:40:bc:
                    a6:20:a3:a2:df:97:48:40:0b:4e:70:26:91:b0:25:
                    49:41:20:7b:f9:c8:f3:da:c1:a0:bd:69:e1:8a:29:
                    29:54:ae:3a:6a:22:9a:9d:c1:83:b7:27:2c:9a:d5:
                    ef:f5:62:a5:f5:5e:8c:d9:f9:14:67:5b:9a:0d:d7:
                    92:da:45:94:94:13:53:f5:9d:64:a4:34:a3:f2:da:
                    ca:49:f5:b3:7a:e8:5c:e2:7f:fb:8e:72:4c:b5:25:
                    4b:46:7e:f4:93:0e:78:89:9f:0f:6a:cc:e0:fc:27:
                    c7:96:a2:18:f9:ae:52:6a:f4:04:f3:a1:0d:45:4c:
                    9d:51:2e:1c:0d:ae:4d:7e:18:10:8b:19:f3:cc:a4:
                    d1:aa:d9:84:f1:04:e3:dd:91:1e:5e:89:bd:33:d1:
                    02:92:1c:3e:c0:75:18:1a:26:b7:7b:67:77:2c:3e:
                    99:13:f5:d5:e4:85:84:4f:9d:3f:62:9d:6a:65:00:
                    5b:6c:5f:f9:a4:e3:28:d7:90:37:4a:a4:5e:93:2f:
                    9e:58:b5:26:20:71:39:9e:08:94:9a:bc:c4:8d:36:
                    cb:69:d0:08:da:ad:82:a4:2a:02:bb:dd:1a:35:37:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:42:C7:B7:55:C8:86:8A:67:89:EE:F4:BA:07:F6:26:15:4C:07:51
            X509v3 Authority Key Identifier:
                keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:54:5b:5b:60:75:5b:e7:e4:19:3f:ed:a8:53:ab:bb:2d:a3:
         fb:fd:c4:fd:04:75:8e:c2:da:bc:33:e5:7d:1c:ff:41:b9:8e:
         34:cf:b0:5a:b1:19:40:a5:e5:98:c2:16:23:7b:76:f9:0a:e7:
         88:e2:95:4c:ba:5e:28:24:b5:d7:30:bd:77:63:7f:81:d7:6a:
         e6:dc:6b:42:00:d9:df:5f:c4:13:7a:55:c1:1b:2e:de:13:fa:
         a5:44:ee:6b:95:ea:4a:39:66:c0:51:89:0a:d7:ef:a3:df:ff:
         69:83:52:46:ca:f4:b4:7b:09:98:44:d1:0a:89:2d:dd:5b:3a:
         74:4f:70:8f:92:0a:a0:d6:5b:17:83:e4:60:78:6c:f4:a6:64:
         57:fe:19:eb:b1:ba:d6:a2:52:53:b3:f7:c8:de:1f:0d:46:cc:
         fc:67:86:40:b2:26:c1:cb:dd:2a:20:13:63:00:fb:d9:15:12:
         fa:bc:cb:cc:14:6a:66:52:f7:2c:2a:e9:e4:5b:0c:dc:03:c8:
         b4:3e:7f:e0:b5:8e:e2:b5:04:6e:bf:f5:a1:98:86:eb:9f:26:
         ab:a8:36:a4:25:64:6e:99:c1:4c:38:27:b8:87:30:82:ba:90:
         8f:b9:f5:77:ba:b7:be:1d:70:c4:34:bc:60:dd:bd:16:f7:70:
         0c:97:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:25 2025 by rpki-client