Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          msipeXpDa0TWjge5bIAJYR/dYAhrLNoagKT2yrC3sLM=
Subject key identifier:   56:71:AB:C4:C3:AB:0D:07:8B:44:DE:C3:5D:91:B1:45:A9:A8:9D:BD
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       0197C6815852D1D108A23D76090039E53A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          15C9
Signing time:             Tue 01 Jul 2025 15:00:54 +0000
Manifest this update:     Tue 01 Jul 2025 15:00:54 +0000
Manifest next update:     Wed 02 Jul 2025 15:00:54 +0000
Files and hashes:         1: 6XrFWNa1C0R0sDYBaWkEAGDO1jA.roa (hash: x/McLjYuN68G+ok93frZNMwAwTarNWM5GuHdXugF2/o=)
                          2: M9easQkcHSQPdpi5ZGfGU4pWoUc.roa (hash: 2qkDycWdk7MJuJuaUzoNpBWkEOF+xOcflpW8m5S6jUM=)
                          3: OUGBI7BlnTw0a5X7dKKwHfI0HEE.roa (hash: Yz2VNrBZP3pqqAR/Tq6Xwl7KjOjN+fv8NOiFldptcCo=)
                          4: i85p5aRbMq_hdM6cSIQdk4ygpwo.roa (hash: x1h1J7ft54CHUC6kjTSlGgx0DSnPNMMrSgheR8JAqcM=)
                          5: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: FFOMk+RqoZeth5T9OJrc9OK5PQbFaLyB7FydfZ6ChmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:81:58:52:d1:d1:08:a2:3d:76:09:00:39:e5:3a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Jul  1 15:00:54 2025 GMT
            Not After : Jul  2 15:00:54 2025 GMT
        Subject: CN=5671abc4c3ab0d078b44dec35d91b145a9a89dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:be:0b:c8:a6:54:83:b5:6a:65:21:87:59:a3:
                    47:4c:0e:7a:03:86:d3:51:c9:e7:3f:b6:5b:e5:40:
                    c4:e4:2a:c1:c4:04:ca:2d:35:67:dd:f2:51:0a:26:
                    0d:25:8a:15:0f:b8:f3:01:b0:8f:bc:bd:b7:3b:bf:
                    83:5b:d3:e9:37:ea:8b:24:b9:b6:a1:f2:8c:b3:7c:
                    e3:a2:69:8b:a3:e4:db:28:c5:4a:16:3b:69:ab:1e:
                    7a:1a:27:ba:54:39:04:f9:a7:12:31:d4:41:c5:04:
                    5c:33:7c:80:49:52:77:23:df:4e:1b:dd:23:e7:80:
                    1b:79:5a:cf:69:8c:59:ca:ad:59:9d:2b:1b:ed:af:
                    bc:6e:97:28:23:53:23:0b:12:b9:24:88:98:81:7e:
                    e7:4f:12:2d:cb:81:3c:ec:ea:86:0f:f4:bd:24:c0:
                    7a:45:6e:3a:ae:45:d5:b1:9f:35:e6:7e:14:af:50:
                    a5:1a:e0:1e:c8:ec:be:13:cc:2e:9b:2f:c5:52:f0:
                    aa:51:73:87:0d:d1:98:74:d9:65:26:e7:21:3d:64:
                    03:a9:16:8d:dc:f9:54:9f:1a:ed:b2:f2:75:e7:73:
                    56:b3:2e:7d:c8:34:d0:03:ac:60:76:92:1f:4f:3d:
                    88:ed:78:89:ef:93:3b:cd:97:cb:d4:cc:ed:0b:89:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:AB:C4:C3:AB:0D:07:8B:44:DE:C3:5D:91:B1:45:A9:A8:9D:BD
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6c:28:e9:4f:4d:47:64:f5:3c:a7:f4:0e:7a:67:5c:fd:08:
         3e:73:27:21:93:76:41:44:bc:37:44:65:42:49:a7:48:9a:f7:
         45:f5:ea:ed:da:f0:95:58:20:5d:15:a3:e1:76:ab:c9:52:59:
         2f:75:37:33:8d:54:aa:17:87:05:d5:5e:b9:ec:5d:2d:e1:c6:
         21:86:c8:41:88:55:60:cf:4a:b5:37:e2:f8:8e:6f:5a:fe:e2:
         d8:b5:6f:b3:4f:77:f3:c5:47:41:21:83:ac:1d:aa:37:62:31:
         d8:7c:d2:82:5d:43:ae:1e:d3:42:e9:24:5c:8e:eb:8c:00:13:
         f9:28:32:50:e7:4a:66:4a:ba:27:31:68:af:ab:4c:f3:6d:14:
         c6:f6:68:12:dd:b9:76:63:32:f0:ed:84:e9:60:94:d5:5d:6e:
         5d:97:ab:e8:31:eb:7f:ef:11:7f:5b:b4:58:36:85:73:de:72:
         10:23:c5:65:fb:1f:88:d7:0a:b0:f2:bf:14:81:50:8c:7e:b8:
         5a:aa:88:d3:ff:eb:a2:e7:bf:d4:91:b6:57:90:7d:13:d6:dd:
         22:6f:4c:22:12:7b:07:03:65:18:44:ee:8b:f7:ea:7a:57:8b:
         2a:3c:0e:ff:82:0b:b6:2e:f4:ea:20:a8:4d:cc:a8:3f:e6:d5:
         cc:44:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:32:45 2025 by rpki-client