Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          hOJyiW3BkKhw6dNxRYCeedNfKa0Qfiqb61J4wvw/Hrw=
Subject key identifier:   82:B8:2B:F5:8A:13:C0:06:B0:94:EF:A3:53:62:85:18:63:27:93:C4
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       0197CCBAA0C379CFE07E6093BE78A9ADDDC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          130B
Signing time:             Wed 02 Jul 2025 20:01:12 +0000
Manifest this update:     Wed 02 Jul 2025 20:01:12 +0000
Manifest next update:     Thu 03 Jul 2025 20:01:12 +0000
Files and hashes:         1: BS_uFjltIa2QdarHmlrjr-N1lfU.roa (hash: In6YLEFgpwciZfoYuJdlvQqiCYVNTfn1vSODPqF0a14=)
                          2: KyGy1yiZWdO5Baarc34FhluuX6o.roa (hash: PluDSAEvqHUwzzXaYjhHiEYtCeH5Nq3YEFQLeyKhxg0=)
                          3: MTuQql9Rh88BHIoSEfi0N5xULhQ.roa (hash: c4KaJbDb+YQM6dcx+R5wyGu53GnRsEWM+y0F8Wui/6Q=)
                          4: aPIQbORfDqMdRus3FUsayPmmxSc.roa (hash: Bjwo2XfxvG4dmeK0piMxmJc9w9b8pe3Sc6uuX95IjTw=)
                          5: aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa (hash: Y8Xw4D+ihA3z60B6zW48nfEFoOcri17+Bm+/jPd3INc=)
                          6: kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa (hash: i5sBmgPlAzgh1HcdG7lTgrd/mdbOcJciFVKfQ5U2fAw=)
                          7: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: rADTWss4BiQzJtrnDsMN+ZPSmBf1XCx8h8Ziz4LwwQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:ba:a0:c3:79:cf:e0:7e:60:93:be:78:a9:ad:dd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: Jul  2 20:01:12 2025 GMT
            Not After : Jul  3 20:01:12 2025 GMT
        Subject: CN=82b82bf58a13c006b094efa353628518632793c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:74:b1:ad:7f:4a:13:e9:ed:1e:be:74:90:
                    c9:f1:b1:9c:98:cf:6e:13:ae:62:4e:42:96:cd:48:
                    d5:44:79:71:08:9e:6b:ef:b4:b5:2d:a7:47:88:e3:
                    90:02:a2:96:10:22:ae:91:6b:07:fe:63:21:13:84:
                    d4:c7:60:7b:bc:12:76:50:4f:97:ab:11:92:4c:3d:
                    12:6a:f1:9e:63:1f:9a:ee:36:bd:28:31:ac:47:f1:
                    4c:c4:9f:16:68:cd:fd:a7:3a:66:37:3b:4d:93:73:
                    ed:a6:aa:99:36:23:58:53:5b:0e:e6:7a:41:60:2a:
                    3b:28:c8:fd:73:e1:59:77:50:12:ca:7c:a6:cd:82:
                    ee:1e:53:dd:8e:d9:ca:c3:6b:1a:e6:38:2a:0a:43:
                    74:c7:21:d9:8e:ed:85:9c:89:c0:0b:c4:54:31:07:
                    87:e9:72:32:1f:12:e3:9b:26:3b:e0:05:55:2e:7b:
                    64:d0:90:3d:2f:67:03:8a:dc:50:4c:4e:82:b4:cf:
                    99:68:f5:88:a6:15:d4:f4:71:dd:e6:cd:5a:f2:6d:
                    01:e7:fb:50:1d:4e:8f:75:ce:90:ba:63:b7:b0:03:
                    e3:eb:88:03:66:34:f8:cb:87:be:0e:5f:23:9e:3d:
                    72:0f:d9:22:17:0c:9e:bc:6b:bd:d8:cb:d3:f9:3a:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B8:2B:F5:8A:13:C0:06:B0:94:EF:A3:53:62:85:18:63:27:93:C4
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5b:fb:7e:4d:f3:93:51:0d:eb:60:f7:bb:48:78:a5:39:4f:
         fc:e5:22:b1:e4:71:b1:8f:91:75:e7:9e:35:f9:9a:3b:6b:55:
         37:c2:4b:36:0d:e5:15:e5:f4:62:4e:ae:ac:4b:c5:ee:3d:cd:
         c7:71:15:8a:34:22:3f:48:56:9c:f3:e8:80:46:68:f0:b2:a2:
         82:a1:e1:ee:60:5c:58:98:dd:f6:8f:2b:8e:61:64:b7:69:be:
         63:7f:8f:0b:1c:79:f3:1e:6f:61:37:af:79:42:a4:79:e2:5c:
         46:06:8f:bc:2c:23:d5:1c:dc:45:5c:0a:03:eb:fa:b2:5b:1c:
         df:cf:54:fe:4d:14:c6:ee:b6:75:b3:e8:32:50:0f:61:7b:bd:
         59:01:7c:2e:c8:6f:21:1b:90:5b:24:cb:2e:4f:ab:f5:b8:2d:
         9f:82:6d:71:e5:d4:07:24:a1:3b:65:8b:34:2d:9c:a5:20:3a:
         09:01:f6:74:49:c9:5d:a4:57:85:90:b0:32:27:37:99:0f:61:
         9a:4f:ec:04:d5:e7:2a:71:24:ea:5d:02:18:fb:1d:d3:81:1c:
         15:b5:ea:96:4c:b5:17:d8:46:5b:46:7d:d8:a5:cc:4b:ff:da:
         45:4c:dc:34:08:70:b7:8c:1c:36:f4:d9:91:be:37:6c:56:61:
         db:59:b8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:17:43 2025 by rpki-client