Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File:                     B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier:          BAbWSNsT2e8+G5RVLmKw5QaAmNXYppKlvUDrcUGNF8A=
Subject key identifier:   2A:8E:56:4B:B2:A1:EF:E3:63:31:A5:AB:FA:5C:89:42:09:0A:4C:47
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       0197B5C495241B91F9A281331623720D259D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 09:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 09:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 09:00:48 +0000
Files and hashes:         1: 8s9AQh9G6fVBfnNbnVmZTqXsuwg.roa (hash: 7Lq9v+syjN0uylqG5ZKh6ZFMzZAMtKjXsvWJlQW3WqE=)
                          2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: zc1HdyqvawooW7VUqlY7Vn32O3zwGJP2Nk+E2/wXrz0=)
                          3: Co6zif6CgWxRVPx-_ozSij8EWsM.roa (hash: tL4rizo5edxFSlgftU4orevud41ccjdavnz1fdBIeh8=)
                          4: FACURSdoz5OXAwHWNlnhNICg9F0.roa (hash: 3U3F3vpoSGWG8W05XxfcjCVl5f3g2xqAcWZcxKLJRAE=)
                          5: FXRgISRr4r0qJMxDJtaKy7jfxLk.roa (hash: CNBr6epDj6lk+oP3uUMBIFKdBGZjq4jTdlf6g/B5kss=)
                          6: LbBUCL65r2B63EtnXKf7awdkLYs.roa (hash: 2aoR9do7AfxOMNUBvut0kk7xNv4cPQ2DW93XsHzKCbI=)
                          7: sJORlDIYhJ-eoVWPnOpMlTBULZ0.roa (hash: Sxfegd8dDdgBw/BGcRFtl+Zhhz8tR0R0fRjO1Pzn9hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:95:24:1b:91:f9:a2:81:33:16:23:72:0d:25:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Jun 28 09:00:48 2025 GMT
            Not After : Jun 29 09:00:48 2025 GMT
        Subject: CN=2a8e564bb2a1efe36331a5abfa5c8942090a4c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:1b:61:d3:f4:cf:44:c6:02:98:8e:a9:fc:
                    4a:9f:8f:df:1c:7f:f5:6e:46:45:f2:da:9b:ed:47:
                    7e:24:a5:97:c8:c1:89:42:e4:02:92:e5:13:f7:30:
                    23:b9:75:f7:11:77:8b:c7:08:a6:be:96:c8:53:be:
                    41:77:af:8b:dd:2d:51:68:9c:44:a0:0d:3d:fe:b9:
                    ac:81:31:75:99:18:f4:9a:64:be:70:01:13:ad:65:
                    b7:b4:6c:5f:87:98:6a:cb:b3:96:70:a8:92:e0:16:
                    e6:cd:70:e3:c1:ac:66:de:f5:b9:27:2f:f6:12:39:
                    ae:b0:85:2f:62:15:a7:b6:15:ac:d4:3c:68:15:5b:
                    1d:44:69:40:3d:8c:6c:d5:69:b8:21:b8:50:c3:4a:
                    19:4e:a7:dd:51:49:c4:1b:fc:83:b9:20:20:66:ed:
                    65:39:6d:99:43:58:fb:ad:a0:be:39:34:6e:dd:08:
                    48:1a:ce:af:e6:37:04:8a:39:d6:0c:59:32:51:c7:
                    de:f1:c4:0a:96:f2:4a:c6:ba:fd:cc:0b:0f:63:e3:
                    0e:f4:56:9b:45:8f:5f:af:07:fe:6d:a8:70:91:40:
                    30:00:b9:1e:c0:7a:16:a3:02:9e:ac:15:de:22:50:
                    ee:c5:ec:d7:4d:1c:10:6b:84:01:54:b6:45:aa:25:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8E:56:4B:B2:A1:EF:E3:63:31:A5:AB:FA:5C:89:42:09:0A:4C:47
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:0b:98:83:1d:bd:de:1c:9d:5c:cf:ee:5e:9b:2c:5b:28:41:
         b6:e6:04:30:0e:9e:e7:c9:32:82:f9:be:1f:a1:7c:1d:43:f0:
         b0:f2:f7:b0:c7:b4:76:24:f2:2e:71:28:bd:a4:0d:90:8e:f8:
         6b:d2:a2:49:f8:ca:dd:68:01:62:d0:1a:12:53:35:2f:83:00:
         f0:ef:72:87:16:fe:da:e1:37:bb:44:94:6a:71:37:fa:e5:90:
         ae:bb:3b:51:d7:02:3c:1f:9d:04:43:8a:ce:6f:15:b8:d0:1a:
         33:dc:82:f1:78:a1:5b:b1:c9:0e:ee:1e:85:4a:02:14:90:e7:
         a7:c2:8e:5a:5c:f5:23:f3:b8:65:c7:37:87:52:8a:1a:bb:d3:
         24:9a:4a:64:aa:8c:be:92:a9:83:cc:2d:27:11:66:39:f6:08:
         37:13:2e:67:eb:0e:ca:11:45:8d:97:af:6f:4f:72:e4:94:a8:
         28:83:28:5d:bf:a9:5a:b7:ea:36:08:4d:71:e3:3f:6d:55:3b:
         ba:8f:68:ba:25:d8:84:5b:3b:81:4a:87:fc:78:18:53:dd:bc:
         c2:2c:70:0c:7b:e2:ae:bc:1f:3a:15:19:dd:a2:c9:49:7b:76:
         65:f7:a0:77:01:7b:67:d7:75:43:9b:2d:05:2b:63:9b:f8:47:
         ba:9f:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:48 2025 by rpki-client