Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File:                     u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier:          8T3NZCjdrb3Ji/WwOJmNyzZev3LjJHBzJliobE/T0KU=
Subject key identifier:   82:DD:4D:C9:21:07:F2:C0:FE:63:CD:E2:4F:E0:C6:24:C4:2C:82:36
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer:       /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial:       0197B6A0B60A905D7CF1A2EA1260FF4AD3BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number:          064C
Signing time:             Sat 28 Jun 2025 13:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:15 +0000
Files and hashes:         1: T97PhxMy-s6iz7MiHiiatck56go.roa (hash: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=)
                          2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: my9H7y2Bal2PLACUNiPpfYB7lsLyYKwwODyWO4ioFl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:b6:0a:90:5d:7c:f1:a2:ea:12:60:ff:4a:d3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
        Validity
            Not Before: Jun 28 13:01:15 2025 GMT
            Not After : Jun 29 13:01:15 2025 GMT
        Subject: CN=82dd4dc92107f2c0fe63cde24fe0c624c42c8236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:49:3c:6d:11:ef:17:7d:6a:59:7a:5b:a7:
                    74:49:df:0e:fe:8d:f0:c4:32:cb:e1:9f:03:e2:6c:
                    8c:97:cf:38:81:1a:0f:47:c2:c3:48:cd:92:2f:fb:
                    e8:b2:49:b4:39:ee:a2:25:21:14:e3:bd:7a:d4:de:
                    6c:f3:66:d7:fc:d3:48:ea:30:48:c2:f8:5c:43:e1:
                    7a:a0:ac:d6:c4:4b:c4:72:fa:5e:77:d2:2c:28:b6:
                    99:a6:60:ef:ee:4b:17:fb:8d:4b:87:07:12:87:d1:
                    de:0d:9b:7f:cd:ef:96:6a:a0:4f:6d:19:5b:5c:60:
                    3f:bb:57:56:1c:2d:dd:96:e4:da:27:05:07:ec:5b:
                    80:78:9c:01:2a:31:a3:2d:a7:31:2a:19:b5:4a:ab:
                    8b:8b:be:12:54:18:fe:09:f6:76:5a:df:3a:1d:15:
                    19:22:1e:e2:39:81:e3:d1:f9:3d:4c:a3:4f:ff:2a:
                    bf:e1:56:52:64:cb:db:db:e9:f0:16:51:ad:d9:97:
                    93:78:03:ba:a4:76:15:8f:f3:d7:8a:b5:bf:0d:0d:
                    78:8e:7c:d8:ae:0e:fb:7c:38:65:19:aa:2f:8c:1d:
                    8d:d9:a3:79:94:36:b8:22:93:96:5d:e0:e5:03:9c:
                    fc:32:d2:20:61:2c:5f:5c:e2:ce:cc:79:bc:9e:3e:
                    53:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DD:4D:C9:21:07:F2:C0:FE:63:CD:E2:4F:E0:C6:24:C4:2C:82:36
            X509v3 Authority Key Identifier:
                keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:58:55:fe:76:f9:38:c7:38:e3:6a:f9:c7:9b:fe:51:48:
         19:9b:67:4a:8b:02:0c:29:9a:a0:88:14:eb:26:36:2f:f3:a9:
         73:a5:f2:42:f4:c2:a3:d1:14:ea:2c:50:bc:af:3a:93:58:b6:
         85:2d:96:da:c5:38:ff:cf:30:a9:f6:d9:0c:98:94:eb:f1:8d:
         94:8f:9c:94:40:7a:bb:e3:58:d9:de:21:bd:35:e8:22:9b:33:
         2f:b5:e4:d4:aa:a8:12:a9:57:46:63:f8:df:52:f2:ef:62:2b:
         ce:0f:6a:0c:47:a2:84:ef:2e:cb:3d:14:76:58:93:82:20:43:
         4f:6d:8f:0e:42:89:79:79:39:87:60:86:ae:9a:57:ed:4d:df:
         0d:86:60:7f:7a:18:5b:77:d7:ea:78:9d:68:91:67:d9:43:91:
         21:b7:c8:2d:f8:7c:12:17:33:09:0d:b2:3e:e8:5e:b6:3c:0e:
         4b:ab:5e:bc:8f:17:aa:99:6f:fb:b6:12:27:8b:40:9f:71:55:
         5d:85:2f:ee:a8:1b:2d:e5:11:85:59:99:b5:34:1e:9e:a2:f7:
         76:74:3a:97:10:37:79:cf:d4:ae:ca:6e:a6:9c:be:62:65:83:
         48:a9:d4:76:65:8d:a3:d6:24:e7:31:71:7e:96:90:02:c5:87:
         b5:e2:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:14 2025 by rpki-client