Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
File:                     83Uc-MOi02yXRMllGYmZRaxgeCA.mft (raw, json)
Hash identifier:          STjAKgLJU4ceQdNDZ+dKsEUU+15WHEC/9P9r+Wn8Z28=
Subject key identifier:   20:8F:D9:F6:C9:1F:20:E2:F2:73:D5:09:21:BB:CE:0C:70:86:E0:34
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Certificate issuer:       /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial:       0197B70E532C269F92C69F5B55EB212D2FE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 15:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 15:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 15:00:58 +0000
Files and hashes:         1: 83Uc-MOi02yXRMllGYmZRaxgeCA.crl (hash: hYE7GLMW9spunBGngcR6aZlnPpheWQWw6/ql28X5TL8=)
                          2: RQIIwfPKKX5p7u0Y-C_D5Y-bKBI.roa (hash: KiLJtwlRDmcGob+kpYuioRY1Q/RLPjcl0rdsa4MFnrs=)
                          3: xelQwmSnZUsP7vwyXYG-OjnLzks.roa (hash: VANd7e1T8sboSWcnlJJpwtTBZNkVD3ZVwPQJ+ivjoHw=)
                          4: ycYE11LlQ1a-t4T_yP1coVz5lU0.roa (hash: aqEuNcxSiCWBJQINtSpWdlIDutYbO4J8N5pMivaTnAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:53:2c:26:9f:92:c6:9f:5b:55:eb:21:2d:2f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
        Validity
            Not Before: Jun 28 15:00:58 2025 GMT
            Not After : Jun 29 15:00:58 2025 GMT
        Subject: CN=208fd9f6c91f20e2f273d50921bbce0c7086e034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:e4:09:19:3f:6e:5a:9c:91:f0:ba:7c:12:
                    7a:2f:f8:fa:fe:55:c0:00:3e:c9:03:e1:50:f5:32:
                    c1:b8:d5:65:16:de:61:28:fa:2a:eb:a1:60:ed:42:
                    fb:b2:d1:ae:08:28:84:bf:48:a2:66:a8:6f:2f:bd:
                    de:6d:c5:42:32:0d:08:af:64:39:5c:28:5c:48:9b:
                    96:c0:f8:61:10:4a:9a:30:90:76:7b:6a:c4:9f:f2:
                    12:b0:7c:32:b1:23:7b:5f:62:f8:e2:85:81:22:94:
                    c1:6e:23:91:bc:fd:7b:85:7f:62:1a:b9:02:5b:e3:
                    a5:85:26:32:26:de:2b:88:77:59:6f:90:50:a5:01:
                    75:2e:7b:e2:f0:ed:45:33:ac:25:c8:0f:42:2a:b4:
                    e0:08:4f:76:e0:b7:08:07:b7:09:ed:8c:46:09:3f:
                    dc:ee:67:55:8c:6c:d1:10:81:aa:ee:15:79:da:6b:
                    e5:6b:2b:a7:5b:04:2b:6f:c6:51:5d:91:ba:98:c8:
                    0e:6d:c9:3c:e4:01:02:8b:68:0b:df:66:48:27:9a:
                    f2:c9:2d:3a:79:62:90:b6:fe:af:b6:00:e4:8c:91:
                    29:18:a0:cf:32:b4:73:89:24:b8:15:9c:d0:0d:8d:
                    e3:76:90:d1:b3:ac:09:23:41:e3:ff:42:26:4f:34:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8F:D9:F6:C9:1F:20:E2:F2:73:D5:09:21:BB:CE:0C:70:86:E0:34
            X509v3 Authority Key Identifier:
                keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c8:63:1f:58:5c:32:e6:09:89:a4:2c:17:a6:b8:90:1c:9e:
         72:b2:66:a4:1f:03:c5:3b:78:0b:5d:a0:6f:1b:05:38:c1:f1:
         80:f4:43:7e:39:73:4e:c3:2f:b6:db:a1:c6:e7:36:7d:3b:07:
         fb:2d:54:5c:8f:e4:46:bd:12:b1:82:40:46:ad:63:dc:b0:14:
         ea:37:50:58:03:b0:f3:3f:73:8a:63:11:f3:dd:e3:15:e4:d4:
         08:fa:b2:c7:10:c0:86:57:bf:22:d8:9b:82:f1:04:0a:84:55:
         c2:01:33:c4:c4:f3:43:d4:a6:00:75:92:44:52:b0:c3:9e:b6:
         26:b8:41:10:fc:7d:e8:46:aa:a0:89:be:37:27:01:d8:04:9e:
         b8:d6:52:87:40:2f:19:ef:74:1f:71:ca:bd:cc:4b:45:7d:b8:
         49:5b:8b:c6:0c:cc:3d:1e:25:1a:86:90:49:1f:78:0f:00:c4:
         a8:d0:71:ee:e0:86:f0:75:18:89:27:b7:a4:cf:b1:71:c5:c2:
         94:eb:ba:b1:76:73:e1:e5:a1:c1:11:15:0b:e2:3e:8e:aa:7b:
         b8:de:d3:8f:8f:4e:3f:4d:a1:1a:5a:84:9e:42:ea:ed:87:c6:
         8f:d2:61:be:28:cb:6d:d3:44:b8:af:ce:fb:b7:93:0e:77:d6:
         2d:4f:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:35 2025 by rpki-client