Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File:                     a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier:          lPdrj7wF7jbG0PBL036KYT8P5IIhgpc1M/9W8BXCazY=
Subject key identifier:   99:96:54:5A:BA:11:36:CA:3E:CE:45:88:B1:03:6B:CF:01:FF:DB:20
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer:       /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial:       0197B70ED31FAB2B91F5C4E12D07683AF3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number:          1489
Signing time:             Sat 28 Jun 2025 15:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:31 +0000
Files and hashes:         1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: a/N58PA8XZmkhte1oJIZ3hho/Y+97s0fYFsBBTRLKO0=)
                          2: aFCOTElnBLsNf9Ly_hbmm8JGZvk.roa (hash: MGWHqg1x0uZrRis7Xazn4JBDX59gH8eSl4RHJngdXlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:d3:1f:ab:2b:91:f5:c4:e1:2d:07:68:3a:f3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
        Validity
            Not Before: Jun 28 15:01:31 2025 GMT
            Not After : Jun 29 15:01:31 2025 GMT
        Subject: CN=9996545aba1136ca3ece4588b1036bcf01ffdb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:d3:4f:1c:2d:3b:30:3a:53:e7:c7:99:9a:
                    6c:37:d1:be:fb:c3:1c:5c:54:97:1a:f4:19:6a:98:
                    eb:1a:75:59:51:40:32:a5:26:ef:99:b9:ba:67:dc:
                    77:f9:7d:08:28:62:c7:e3:5c:92:92:10:84:c4:29:
                    21:99:df:0f:70:b0:e8:e6:7a:bb:40:57:19:89:be:
                    ec:10:57:3d:f1:e4:ef:7e:d5:cb:23:2f:05:a2:11:
                    88:3f:c1:40:2b:99:8f:d8:aa:01:9b:f7:60:e5:80:
                    a0:58:0f:3c:66:04:82:16:56:b1:30:1e:c3:62:ce:
                    87:cb:e7:b5:bd:6e:2e:28:55:e4:9a:ce:62:81:75:
                    58:02:c9:5a:2b:3d:eb:ca:46:33:e5:cb:47:3f:07:
                    e0:48:03:d0:b5:fa:00:5a:fd:72:60:80:16:48:43:
                    ba:40:56:51:b6:9f:b7:a6:16:91:17:93:80:77:ca:
                    a7:4a:fa:5c:4c:b4:45:85:bc:eb:1c:73:81:a7:f2:
                    9d:98:a2:19:e5:d4:bd:e1:71:7b:56:3a:38:d3:7e:
                    50:6b:27:b0:d9:ec:aa:91:19:5a:3e:d0:d8:cc:db:
                    ab:09:bc:07:db:00:9e:bd:c7:1d:66:74:e9:90:f0:
                    01:30:91:9e:1c:8b:94:43:8c:ab:bc:c1:63:30:ac:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:96:54:5A:BA:11:36:CA:3E:CE:45:88:B1:03:6B:CF:01:FF:DB:20
            X509v3 Authority Key Identifier:
                keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:72:31:54:6c:da:66:b2:63:fe:81:20:da:c7:cd:c3:26:e1:
         2e:0b:f0:f2:7b:aa:e2:9d:06:62:47:6e:89:51:93:9d:bd:c6:
         a6:88:1c:0c:96:c9:0d:7a:48:d9:50:18:ae:10:7e:d4:a3:9b:
         86:78:95:e3:4f:a2:e7:f0:72:f5:0d:c8:ab:e7:e7:67:b6:cf:
         be:4a:c5:cb:15:21:4e:0d:7e:de:dc:02:7d:2e:c4:f5:5f:68:
         24:5a:31:98:20:fd:ca:1b:d2:29:92:fe:c9:8a:55:93:ae:c2:
         c3:9f:79:4b:dc:5b:70:90:22:35:1d:61:eb:2d:77:3b:af:f8:
         54:cb:d2:eb:1d:c3:69:85:a3:52:99:bd:fa:2f:b6:2d:8c:ce:
         c0:58:56:c0:ce:79:f0:98:d4:3a:09:4e:93:11:93:0a:12:9d:
         8b:d1:00:32:82:7e:a3:16:d0:b3:42:6a:a6:ee:82:99:71:7b:
         01:af:c2:12:19:0d:a9:22:00:68:1f:6f:23:09:32:18:d2:dd:
         6a:9d:f9:08:aa:68:94:6e:2f:45:10:2d:b0:00:c6:14:88:49:
         ec:af:ca:4f:39:df:16:d4:12:9c:af:e8:a9:0e:cf:21:94:7d:
         71:57:4d:fc:74:75:63:a6:8f:b9:3f:a1:25:b0:dd:43:2f:2e:
         1d:9a:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:39 2025 by rpki-client