Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
File:                     B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json)
Hash identifier:          TTryNw/2BnYFXCiT1aNUGBVYXc2oBq0C08JQJZ8Y4F0=
Subject key identifier:   80:BD:9E:58:6B:61:DB:15:33:F4:15:56:05:46:C8:F0:ED:30:F4:9C
Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
Certificate issuer:       /CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Certificate serial:       0197B58DAF7586345976C9521EC811B6D728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
Manifest number:          0CD6
Signing time:             Sat 28 Jun 2025 08:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 08:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 08:00:50 +0000
Files and hashes:         1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: 9OvcKFJsN3IBdr7zw9IG5csr23aPG+eEb6B1RjiGduo=)
                          2: bKjmtKZ3Q_dbBV89_TPqXOrr9l8.roa (hash: fkweW281SglBT4coSKgBxiwmush3g6XftqB0c+xmAws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:8d:af:75:86:34:59:76:c9:52:1e:c8:11:b6:d7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad
        Validity
            Not Before: Jun 28 08:00:50 2025 GMT
            Not After : Jun 29 08:00:50 2025 GMT
        Subject: CN=80bd9e586b61db1533f415560546c8f0ed30f49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:7b:b7:ec:6f:1f:c5:42:a7:c2:0b:61:1f:
                    c0:ce:eb:8f:4a:80:10:49:5b:d5:de:25:35:0b:fd:
                    f4:3b:c6:b4:57:9d:4e:d7:32:24:b1:b5:28:5b:ec:
                    a5:72:81:fc:d0:0e:3b:cf:a7:19:f5:f0:c3:e2:d0:
                    ff:6d:43:e2:c8:62:ce:0a:8e:46:e3:c3:e3:7d:8c:
                    e9:da:f1:9f:9c:d1:90:5e:c6:90:03:23:b1:b9:8b:
                    82:e0:5d:5e:bc:eb:3d:77:32:bf:8f:13:ba:90:f0:
                    2d:2d:ce:bd:33:79:4a:95:3e:a8:c9:cf:36:e1:73:
                    76:24:10:81:8e:da:67:19:fa:4a:87:a4:3d:53:ca:
                    2c:19:c5:04:9d:27:37:f4:52:32:a7:44:23:6e:e8:
                    86:48:74:36:38:a4:23:ad:ef:6c:3d:03:4f:a5:8e:
                    a3:94:05:81:89:5c:a7:fc:f2:48:85:b7:e6:cd:8f:
                    2b:19:3a:d4:b9:9f:33:2d:49:9b:41:08:1e:e0:f3:
                    c3:aa:97:36:4e:c6:6a:e3:3b:4d:aa:4d:13:7e:3c:
                    d8:c6:f9:d2:2e:3c:af:49:05:14:cd:e7:03:2a:d4:
                    86:d2:70:73:da:b0:39:9d:1c:ba:42:a3:53:a1:ee:
                    89:2f:d2:e7:3a:a0:71:d7:aa:82:57:4d:1c:2e:f1:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BD:9E:58:6B:61:DB:15:33:F4:15:56:05:46:C8:F0:ED:30:F4:9C
            X509v3 Authority Key Identifier:
                keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:06:3a:06:0c:f0:07:6a:9d:16:3b:3c:26:7b:9d:50:56:11:
         a4:8b:be:6b:4f:1c:a6:23:1b:ea:33:3c:8c:09:87:b3:af:24:
         2d:96:b8:35:b6:6d:00:bc:30:30:62:f0:68:49:ed:3d:48:b0:
         b5:ff:2f:25:88:15:cb:5f:d6:70:a6:8d:1e:cd:34:3b:af:9d:
         95:5d:08:ef:5c:27:78:6c:70:02:2f:f2:f3:00:55:be:77:26:
         bd:af:b5:3e:21:53:db:2c:0c:df:b7:a1:26:7f:40:45:11:d8:
         32:0e:f8:2d:c3:5f:f9:bd:ff:52:f0:de:d2:03:17:e8:c7:1d:
         2b:ed:d1:f8:a7:38:89:9c:68:0d:f2:f5:d3:99:db:7c:a4:38:
         58:86:b3:bd:bb:1c:29:51:d5:1c:50:7c:49:a8:c1:a7:a6:8b:
         b0:67:0c:21:4f:23:85:9b:27:1f:cf:98:4a:40:c3:5f:8c:e8:
         18:13:39:d9:41:9a:a9:f1:a2:fc:43:83:f9:f4:35:04:f4:8f:
         13:e9:8d:ef:fc:63:ec:59:71:23:82:60:30:5a:7f:2d:8f:f4:
         79:aa:0e:43:03:bd:1d:3a:aa:d6:cc:6b:15:b2:6e:82:a4:4a:
         1f:72:80:e6:2a:33:94:87:1e:09:12:3f:01:0b:a5:23:6a:fb:
         48:9e:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:44 2025 by rpki-client