Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File:                     mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier:          6jsrjnP56cHYYsIds0clW/C8LyOj5GnWE0JbxE9Ut6g=
Subject key identifier:   91:73:1B:81:8B:9C:CE:BA:E2:96:47:6B:C0:1A:3A:9A:B0:57:05:F4
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer:       /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial:       0197B77C4DF24B194FF4F9AF1FF970A5EB24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 17:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:06 +0000
Files and hashes:         1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: jMUL7kvoaXrpt1KkPUrM/9XSfmpgZD4EWcw4Php1A58=)
                          2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:4d:f2:4b:19:4f:f4:f9:af:1f:f9:70:a5:eb:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
        Validity
            Not Before: Jun 28 17:01:06 2025 GMT
            Not After : Jun 29 17:01:06 2025 GMT
        Subject: CN=91731b818b9ccebae296476bc01a3a9ab05705f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:28:65:dc:17:12:fd:42:de:c5:66:6f:1d:
                    9a:85:f9:1b:8c:87:5d:90:7c:ee:0c:6e:b9:a5:9c:
                    49:72:1a:8b:d4:99:0a:4a:02:cd:9f:49:bf:41:4d:
                    da:e7:a8:11:d6:c1:9a:7e:24:e4:05:3e:2c:66:47:
                    96:3b:d0:50:02:4d:35:a1:72:22:4f:68:44:ec:ee:
                    c8:c5:7f:17:a3:29:9b:d5:62:eb:d9:f9:3d:ca:d8:
                    a8:8f:af:04:fe:47:2e:22:6b:02:b5:00:e8:47:0d:
                    14:cd:84:c1:5b:e0:e1:e4:db:06:25:8f:b6:c3:03:
                    d9:ca:8b:15:b0:a7:a2:1a:03:68:72:78:cd:6d:09:
                    57:7b:6b:94:e4:83:50:76:86:69:b6:c4:ce:3e:7d:
                    47:27:78:37:f3:57:f1:af:ed:86:aa:bd:8c:2a:20:
                    3a:a3:99:f6:60:e6:3d:d7:91:55:01:b8:18:dd:07:
                    65:ee:b2:61:bd:29:e3:21:1f:ab:8f:89:3d:3c:9f:
                    97:b9:49:1c:2d:58:16:30:52:66:6e:97:9a:24:4e:
                    14:13:5f:aa:35:54:e0:dc:96:85:41:46:2f:ad:84:
                    f6:84:d3:be:34:ed:e5:94:11:ad:9e:05:21:1c:82:
                    13:25:18:6b:62:8a:fc:a1:57:da:6f:ff:f7:bf:06:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:1B:81:8B:9C:CE:BA:E2:96:47:6B:C0:1A:3A:9A:B0:57:05:F4
            X509v3 Authority Key Identifier:
                keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d2:e2:46:bc:d6:56:1c:c0:a5:2f:a9:17:ad:ef:8f:6c:3c:
         0b:7b:89:ea:b6:a3:10:a2:95:3a:7f:18:ec:26:4c:fb:fb:2e:
         c8:e8:f9:9c:13:2d:e1:73:da:0f:ac:07:2b:57:46:10:86:74:
         3b:87:fb:21:2f:96:bc:d0:2e:33:71:52:db:47:32:8d:99:5f:
         4c:c3:bd:ab:a3:df:a9:3d:f3:b6:bb:84:2f:68:66:48:dd:d9:
         8c:e6:72:62:88:65:4a:fe:32:55:c5:8a:1b:29:25:00:29:0f:
         93:9a:05:ef:b7:52:32:1a:de:34:b0:3c:62:da:12:40:4a:28:
         49:62:db:fb:81:2e:0f:a5:68:5d:18:f5:60:0b:d9:13:21:ad:
         9f:72:de:bd:17:9d:90:15:a3:9b:4d:be:7b:13:3c:19:c9:b8:
         43:18:7e:17:78:a4:67:55:f2:31:c3:3f:85:5a:37:d7:88:a5:
         fd:ad:b7:4e:a8:c2:e3:df:32:f5:9a:c8:e6:41:22:6a:0d:da:
         89:fc:84:31:be:2c:14:25:d8:44:ce:6b:25:5d:1e:b2:0a:b4:
         ae:33:51:0b:db:7c:31:13:1f:b3:90:a3:3f:91:db:77:7e:27:
         4e:2e:6d:15:a5:12:21:5e:75:3a:da:e0:d3:11:66:55:d6:2c:
         76:4c:c4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:41 2025 by rpki-client