Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File:                     tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier:          J1umaWRpqe/lvJwH1DGOZLYyJ1+QS8JqEmMujAHcSmw=
Subject key identifier:   F3:E5:AF:1D:04:8B:C6:1B:BA:60:31:64:5F:97:A0:05:AB:73:3B:48
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer:       /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial:       0197BA0F3955AC210D34E7A1FF329BDE2ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number:          15B8
Signing time:             Sun 29 Jun 2025 05:00:49 +0000
Manifest this update:     Sun 29 Jun 2025 05:00:49 +0000
Manifest next update:     Mon 30 Jun 2025 05:00:49 +0000
Files and hashes:         1: QdWm_iYTkmRwOlae6fa_m0n_xoY.roa (hash: GAwdxYROZcqJfJWKya6QGN1+Dp1F3FkjXyRiudeAVk4=)
                          2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: s0tppbGyNly7FYMVrd14+OP0MU1JKR/4lUn04vf3fYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:0f:39:55:ac:21:0d:34:e7:a1:ff:32:9b:de:2e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
        Validity
            Not Before: Jun 29 05:00:49 2025 GMT
            Not After : Jun 30 05:00:49 2025 GMT
        Subject: CN=f3e5af1d048bc61bba6031645f97a005ab733b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:99:e7:06:1f:d8:31:ad:24:6b:19:a2:e9:
                    a6:2a:89:dc:ff:16:95:39:5b:04:90:97:b7:7b:48:
                    c1:59:33:a4:cf:4c:06:8e:0f:13:56:5c:0e:e7:fd:
                    fa:e8:87:cc:b7:a1:c8:82:81:92:31:37:1b:c7:ba:
                    de:e5:0e:27:ae:53:e9:e7:52:76:92:07:e5:74:23:
                    1c:6c:01:c6:8d:81:bc:2e:ad:13:08:9b:e7:c3:5f:
                    89:91:1b:dd:58:7e:52:0f:32:61:5c:97:18:fe:4c:
                    ba:90:7c:e0:4b:f8:cd:20:2b:be:6c:fa:a2:37:6b:
                    ed:da:97:ce:b5:bb:69:4b:de:d8:90:73:d8:7f:86:
                    c1:3a:92:01:e2:4d:2c:de:9c:88:20:9e:f3:bd:a0:
                    46:97:a1:b6:15:3b:75:24:90:51:aa:9d:df:cf:6f:
                    9a:51:63:e5:d7:49:8c:a1:6c:9c:26:4d:b9:51:05:
                    8a:f6:60:46:6d:c1:b5:4d:3c:76:5c:81:df:74:ad:
                    e2:fd:62:86:f3:89:99:30:b8:da:8e:d9:ba:41:cd:
                    bc:e9:97:df:b6:b1:5f:4b:65:b2:2d:aa:3c:92:0c:
                    23:7e:d9:07:35:9b:d8:4d:95:89:1b:fc:7a:c5:3b:
                    b8:d6:1d:5f:71:6d:21:30:f9:9e:e8:47:b4:b2:ba:
                    e6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E5:AF:1D:04:8B:C6:1B:BA:60:31:64:5F:97:A0:05:AB:73:3B:48
            X509v3 Authority Key Identifier:
                keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5f:04:71:0d:5f:d7:7b:fc:05:3f:ab:66:0d:5c:3c:9b:ce:
         b0:8f:cd:f1:3e:c6:dd:d4:df:82:4c:82:1d:f4:5a:3a:17:37:
         10:f5:a8:87:1e:11:7b:4a:b9:fa:ff:d1:77:c5:60:11:8a:48:
         98:79:d8:ab:92:17:40:50:c6:07:9d:49:4c:95:fc:5d:aa:4f:
         bf:ab:f2:9e:e1:33:95:5a:e4:e3:aa:cf:21:be:75:d1:ca:ca:
         fe:85:0b:da:38:41:28:70:49:ea:cc:d5:15:40:bb:b4:d0:90:
         ea:e2:d5:a1:4e:04:3d:4a:b0:22:81:0e:b6:ba:eb:eb:29:69:
         54:b2:1c:1b:fd:5b:25:7e:83:34:78:32:42:bb:35:db:1f:66:
         04:ea:0b:26:c5:df:c6:af:a0:f1:de:05:e6:38:db:b3:40:e4:
         83:7e:be:74:60:e2:05:4b:ac:cb:cd:97:4e:83:b9:8b:57:38:
         44:3b:68:fb:ca:3e:6b:82:59:ef:55:9d:40:53:79:01:c9:db:
         5c:43:a5:d6:81:11:14:9d:33:28:77:10:42:b1:c6:80:a9:76:
         4c:19:c0:b7:90:af:80:93:57:a8:c6:ef:a8:bb:22:6a:fe:ec:
         ab:0b:0c:9a:83:dd:08:79:b8:46:e8:45:5f:a1:04:78:7c:20:
         3e:3b:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:37:25 2025 by rpki-client