Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
File:                     1BGrxMBGirKJHqrK26DcA3eTb9U.mft (raw, json)
Hash identifier:          B8QIJEyrbIeOWk+9boBzls2UAwiLTmqdJCN2O7jHeGA=
Subject key identifier:   E1:5A:1B:1E:A1:DE:6D:41:6D:79:28:5F:7C:FB:32:2B:C2:39:13:63
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       0197B88F2C27D0523A8129E019F2FBD5AF89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
Manifest number:          15C7
Signing time:             Sat 28 Jun 2025 22:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:19 +0000
Files and hashes:         1: 1-OU8ynWh7hqVFrdBOkMtgcV_cyM.roa (hash: 2Z6R77gXPR8CMiL2pJA+cy/i8yv0OcauEoqVSugVcdA=)
                          2: 1-kqzU8qAhhNZY7H0Ndru0AUv97E.roa (hash: MOz4DkQjI1MR3SyTcLV8IHQbmNNubdVqTfJ9r1l5kGA=)
                          3: 1BGrxMBGirKJHqrK26DcA3eTb9U.crl (hash: VCObdHJka9ienPwVy95MYLr+ErgFLKspDmoykdRQ+x8=)
                          4: 1ec8k_WMs_2LdLKJif0fp_GIvwQ.roa (hash: jxxIlpO+0WHC3wFwCkHj3JuHjD6nZEUilknF8lXMaCM=)
                          5: Ae-QslNU3gy3W0egozYRZj4M0_I.roa (hash: Fot9yL7In+gwq2RwKasepUOmQgQxJF7U8tdZaL0Gl3I=)
                          6: CJVe4Q9dvFn43GMuu9ouncpPy44.roa (hash: fVjdLHUWi0mI5w+c0YY8mq7OHdrDZDIYLR8WdsperC8=)
                          7: DzlQmA_VBIGa0S2Ib3ru0uYU6B8.roa (hash: ELhH2bzUprEO/3eAQ/a8F4+xXbw+c46ynlrkjWiuJwA=)
                          8: G35q9Z2lY9lOlfDoaB-f7dy-t1k.roa (hash: rvuWbhI2XPWBqSashyuxPe1zWTfRREMGtr7cToSjfCg=)
                          9: GyISCTVnPZ05yiIGPaqs_BIQe3A.roa (hash: HXZebLN++PLAND9Fse+1Vz/sTH36ccZhc302O6BcMlM=)
                          10: LF6dF_VT3QtcYPznHVqeLHnLYbY.roa (hash: bxEhbvWwJ1lPZWvcpTDbbFtyf4z4sIVRNx+TGcckJYA=)
                          11: U_jjbw9lzHq0xKAwAxsBzjbGfuo.roa (hash: KknKYtyfRpoZbln9jyULBZjAmlNQNXuziktabTnaV5c=)
                          12: VYoQKf5s-KqqrBacz9y-o4_GDiY.roa (hash: UH0yetw/jt23rWa1xemX8fv6/k46KisKMpR12GlubxQ=)
                          13: Xplom3nYOHGxQQTuZEZCEr66_Rk.roa (hash: NwgZUVMlsLrLr2h+U/8kat3nDsEvXOmfPISS6ilc3LE=)
                          14: _B-JnyUPZQzEiIpewQUHY23Dk8A.roa (hash: NxgiPM6W1BurD6b6luiHd21TWQRNu1avToG9bjOQC9U=)
                          15: c9mjRKIiIhveB8hpl4lJgX61pz0.roa (hash: ePmlGQCFU1GYCtfOlxI9naN4sv+47lFMcBkkM1EOqVc=)
                          16: jRfP4yhxZ6gmXikGgT5hanUmtTI.roa (hash: szuMEcU8of5ZSWw/BlllGKgEXTfJgvQ45tZ2Ke7a4ME=)
                          17: k9TbI2t4Kp7vDAt7i0tnhyyajoY.roa (hash: j0ckdzsklQZCmAh2ozOq49lCKu/16Fuapj8ps1FrvWs=)
                          18: les_6wsnsgt3N6J3jrSt8FGLh2o.roa (hash: w/OoB0CohLCCVJmsCqR/wlJuBKJFnQYzzH1QL/J31rg=)
                          19: nAEeOljdfjmUrTtKHCmdse5HIUQ.roa (hash: 6lNLUdGCLsYYW+Uu2Ct57V4Z84VTvW+oIx8ctf9Jouk=)
                          20: pcqqevXAthwv3P-WoufnBPWJaRE.roa (hash: 7nvC+/+3VO3mfOuCXbDt2+XqJ32zrEYBfDXqNhmkNMA=)
                          21: rPNof6DogEeZBOoLRZwMk-ApPt4.roa (hash: CTp7V/ExiJcmMtx5knVlKl/ZFReGeFmiKwsyPdlpDgU=)
                          22: vaa9ieh0_g2-KFsweXS2ah7MH-0.roa (hash: WpWtS70OFLoq/cDJkKS6rBsNcjAtsJlmw3l1M8ZvGIs=)
                          23: xkBewuEMiuEaRl6tlZgkZIiJIpo.roa (hash: dz2/11ogK5tMzMH1ftdVfoVFsbvw27yY273l023m5PI=)
                          24: zeHkodOSM4PpNF-T8cKNsYd36jA.roa (hash: rKk25l72K9AU6v1SG1iHJTk7NBGypKCBGqKX+tmg7So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:2c:27:d0:52:3a:81:29:e0:19:f2:fb:d5:af:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jun 28 22:01:19 2025 GMT
            Not After : Jun 29 22:01:19 2025 GMT
        Subject: CN=e15a1b1ea1de6d416d79285f7cfb322bc2391363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ce:e4:79:a3:f4:a1:7f:5d:dc:e4:00:c7:82:
                    d0:e5:68:be:80:b7:02:37:cd:49:e6:af:08:44:b1:
                    bc:ff:f7:7d:9a:b0:9f:1e:6e:73:19:cd:67:35:c7:
                    1f:1e:03:a1:79:fb:42:64:fc:98:94:e2:c0:ec:75:
                    e7:60:f2:3c:7e:fa:35:f3:ea:83:58:be:3a:a7:d5:
                    41:5e:06:88:2f:ec:1b:17:4f:76:5e:bf:ce:fe:ac:
                    41:15:53:65:ff:b3:ac:dc:d2:9e:c9:07:84:c7:fc:
                    8b:cb:6c:9b:69:7e:57:fd:7f:74:0f:1e:d5:fd:6e:
                    32:af:d5:37:c4:6e:44:82:08:6f:49:fe:a8:9e:74:
                    19:ac:54:34:c4:4d:20:45:54:05:50:2d:f3:9c:84:
                    b7:78:6a:6d:29:87:13:ac:e1:f4:5a:c3:80:dc:d0:
                    6a:28:b1:da:ee:a4:83:eb:06:f8:78:85:b3:7d:1d:
                    cc:b6:af:24:0b:f2:8d:9a:49:b5:c7:04:48:dc:c5:
                    af:de:38:92:f2:36:f0:66:08:65:a8:9c:d5:d1:ef:
                    9b:7f:11:5f:97:d2:88:5c:61:38:46:3c:8c:5d:6f:
                    2d:e8:06:a9:5f:e1:85:17:75:70:ca:78:0a:28:d5:
                    9b:97:09:b7:62:52:d4:18:3d:73:29:0a:2c:93:83:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5A:1B:1E:A1:DE:6D:41:6D:79:28:5F:7C:FB:32:2B:C2:39:13:63
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:4a:76:a4:07:ee:63:31:85:a0:07:f5:b8:48:af:9e:64:
         0a:c8:97:61:c9:ed:8b:27:dc:ac:79:75:57:0b:d9:18:fd:7b:
         68:1b:97:f6:de:bf:de:64:d1:36:c1:81:54:6a:8d:2e:93:19:
         6c:bd:0a:d2:60:50:00:42:8d:45:47:74:32:79:3a:45:70:64:
         d4:b3:a5:4a:1c:07:58:5e:28:ca:bd:4c:06:48:f4:f2:25:1b:
         16:c8:5b:52:3e:be:9d:8d:4f:cf:ff:b2:fa:50:31:b1:d3:9f:
         03:87:0e:fe:4f:3f:f1:8b:70:f6:6b:fb:74:a3:d2:8f:9f:de:
         a8:1d:85:13:e2:c7:2f:35:13:5d:98:37:69:2b:7f:fc:9c:62:
         43:e7:fd:be:01:b9:07:0f:de:40:d9:60:e4:8f:11:f2:09:6a:
         ca:11:be:3c:92:6b:a4:4c:77:18:9a:d5:86:82:9f:b0:81:6b:
         4a:e6:a3:16:de:1d:5f:19:dd:fb:e6:03:1b:3e:69:f5:18:38:
         7f:47:72:cf:39:90:75:f9:ed:73:3e:29:02:f9:21:01:a0:9d:
         7f:ae:c5:ac:e3:0e:d4:5a:8c:e2:ae:07:77:10:a3:03:ae:0e:
         f4:49:02:7e:4c:44:64:82:f8:41:5b:3a:71:c7:4f:70:de:30:
         42:a3:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:23 2025 by rpki-client