Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File:                     u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier:          yxPTvnKSwS86bs1MvGToY9L0xz3wdrZfM7sT5Do/UdQ=
Subject key identifier:   6D:09:EB:14:E1:F2:3F:2E:A9:83:91:0B:51:9F:31:48:31:5F:37:FF
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer:       /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial:       0197C726AB40799970C2D9A045E1B57B4041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number:          0FB7
Signing time:             Tue 01 Jul 2025 18:01:29 +0000
Manifest this update:     Tue 01 Jul 2025 18:01:29 +0000
Manifest next update:     Wed 02 Jul 2025 18:01:29 +0000
Files and hashes:         1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
                          2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: AdLXmB3hcUypBJegQF6BBBqYs10JImGy7WOAUfLBYWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:26:ab:40:79:99:70:c2:d9:a0:45:e1:b5:7b:40:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
        Validity
            Not Before: Jul  1 18:01:29 2025 GMT
            Not After : Jul  2 18:01:29 2025 GMT
        Subject: CN=6d09eb14e1f23f2ea983910b519f3148315f37ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:db:6e:b0:c0:69:d8:19:db:65:54:51:85:
                    c5:41:2f:ce:d3:68:c5:e8:ad:33:0a:77:81:f3:a2:
                    50:b0:14:a2:e7:a0:b5:7a:22:41:27:41:72:e7:6d:
                    c9:16:11:43:3d:a3:8f:41:a1:83:dd:c7:d8:da:13:
                    49:6b:82:5a:8e:32:f8:df:36:49:c1:ee:cb:c8:03:
                    6a:eb:46:8e:46:f0:3a:53:13:13:27:44:0c:54:1b:
                    9e:10:c7:f0:61:62:b3:c5:fe:0e:80:43:6c:d1:60:
                    0e:5d:d1:8e:f8:c9:03:af:1f:d1:bd:21:3a:b0:2a:
                    e8:2a:55:ff:d4:c8:23:c1:01:6b:74:07:47:82:75:
                    7b:e1:a5:54:85:57:d3:50:79:47:b7:0f:c5:95:f5:
                    f8:c1:6e:cb:b2:7b:06:43:c2:55:1d:cd:ec:9a:bf:
                    f0:f9:9b:90:cd:e3:0c:0c:f4:23:a3:fb:e2:2d:2d:
                    2c:6f:af:d0:e5:8e:4c:fe:e0:00:5f:01:aa:f3:8e:
                    42:31:ae:66:b7:9d:a3:cc:27:6b:4e:98:03:f0:2f:
                    b6:46:2a:e9:64:a6:14:06:fe:bd:98:9e:22:23:65:
                    dd:d5:85:ee:47:7f:1b:73:fd:a3:20:63:90:15:10:
                    c2:df:75:4e:91:6d:f3:f8:0b:6f:72:b5:7f:cf:f8:
                    32:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:09:EB:14:E1:F2:3F:2E:A9:83:91:0B:51:9F:31:48:31:5F:37:FF
            X509v3 Authority Key Identifier:
                keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2d:3e:6e:82:23:d4:61:0f:a6:cd:51:df:b4:92:ac:65:95:
         0d:84:e7:42:4d:36:e7:6f:4f:33:49:1b:c8:54:ae:eb:d8:27:
         b6:2e:b9:b2:06:73:38:b2:b9:5b:1c:9e:0a:74:6f:29:bf:ae:
         bf:86:46:ec:9f:6e:32:62:27:6c:1b:8a:90:69:04:d5:46:97:
         65:c6:cd:72:c3:e7:10:b7:a7:3c:29:9c:32:a0:ea:93:91:1b:
         93:8c:1c:8b:6c:51:65:b6:f9:3d:e1:ae:1b:f3:1c:05:45:7c:
         64:e7:12:1a:e8:9c:89:30:bb:36:1b:f2:75:95:6b:f1:15:62:
         df:ed:ee:69:67:ca:22:12:20:78:e2:28:a3:73:80:43:4b:39:
         5d:7e:c8:af:97:8b:68:c6:94:7e:4d:56:4d:ab:bf:0f:3d:8a:
         39:5a:3a:49:0a:b9:df:76:f8:9b:b9:8d:28:c6:85:ab:bb:b1:
         ee:f0:de:dd:55:43:13:9d:17:bc:5e:07:e8:ba:6b:cc:67:4b:
         ea:84:cf:21:6e:88:28:00:7c:69:84:1e:79:fa:76:6d:6b:41:
         55:62:e4:bc:23:d6:cb:b4:e5:70:9c:3c:8b:2f:b2:1f:02:a9:
         a4:ad:f3:bc:43:d6:89:6c:ea:14:70:58:15:05:1c:a1:ba:3d:
         4d:b3:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:24:54 2025 by rpki-client