Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File:                     my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier:          D7EcWjAIV6JYVU4rvPR23L9kgsi9Yb5Z8zgWigK/Lgc=
Subject key identifier:   10:A1:C8:F5:88:6F:17:4B:3E:DA:EE:29:8B:E4:A6:2B:E3:77:75:29
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer:       /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial:       0197C4CA40D84B794885FACEFEAF9DFC5693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number:          13B3
Signing time:             Tue 01 Jul 2025 07:01:18 +0000
Manifest this update:     Tue 01 Jul 2025 07:01:18 +0000
Manifest next update:     Wed 02 Jul 2025 07:01:18 +0000
Files and hashes:         1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
                          2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: 9jxnSuPK2hutm1iQv3ocDjs5SEAxnmL6ypTznkN+TKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:ca:40:d8:4b:79:48:85:fa:ce:fe:af:9d:fc:56:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
        Validity
            Not Before: Jul  1 07:01:18 2025 GMT
            Not After : Jul  2 07:01:18 2025 GMT
        Subject: CN=10a1c8f5886f174b3edaee298be4a62be3777529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:a0:8b:e0:1e:59:99:11:04:7d:f9:b0:dc:
                    87:71:4d:47:5f:45:1f:6c:7e:86:67:a0:b0:02:eb:
                    8e:00:a4:3e:03:a9:78:ba:04:88:e4:12:f2:b2:58:
                    38:c9:5e:b2:67:00:08:64:f3:2d:b5:b2:ea:cf:90:
                    0e:3e:a0:b1:cc:37:6d:28:f7:96:ef:b6:1b:2c:46:
                    3e:3b:72:6d:94:34:a1:b5:4f:4e:69:d4:90:e6:9f:
                    33:cc:09:5a:20:5d:fa:5b:6e:38:5a:5d:c2:14:ec:
                    06:9d:d1:95:6f:a8:1c:9c:8c:67:e0:81:37:f3:53:
                    a0:3e:47:3a:f4:e6:d7:13:65:6f:fd:37:33:1d:83:
                    86:fc:ea:c5:3e:66:c4:5f:eb:43:22:69:b1:96:44:
                    10:8b:ac:11:6a:f6:09:41:e6:58:1f:80:18:1f:8d:
                    44:fd:fc:69:06:63:11:15:3c:ca:b0:b0:82:5b:98:
                    6b:9b:4f:49:25:f7:b2:ff:fe:4a:ca:f8:1b:d3:55:
                    18:66:6e:2b:d0:78:ef:fe:49:d9:18:89:e8:77:87:
                    32:fa:55:bc:cb:7a:35:7d:ca:66:ea:15:31:dc:cc:
                    64:22:4f:56:d2:15:83:fc:5f:9f:79:f7:5d:29:77:
                    56:e6:cd:64:50:52:56:9c:04:3c:6c:ec:51:46:77:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A1:C8:F5:88:6F:17:4B:3E:DA:EE:29:8B:E4:A6:2B:E3:77:75:29
            X509v3 Authority Key Identifier:
                keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a1:22:0b:01:cd:dd:19:d2:d5:65:ab:f2:df:92:85:a8:2d:
         08:1e:59:69:32:04:88:37:6c:92:12:ec:22:f2:1c:df:b7:94:
         cc:3f:7e:ef:c3:e8:b3:7b:82:2b:d6:c2:7b:82:21:a7:ed:53:
         e1:bf:78:c4:62:37:e1:f7:ef:12:92:48:f0:e6:22:38:30:99:
         c1:39:e3:5a:5b:6e:de:75:8f:34:51:8b:17:ba:bb:4e:7e:25:
         44:57:71:25:8b:f1:09:b7:71:cd:4a:65:04:2f:68:cd:15:8b:
         74:a2:1a:3c:1d:41:a9:68:1d:fc:5d:3e:86:97:45:1d:69:56:
         a8:4e:0d:9f:03:bf:aa:f6:bc:8b:72:fa:3c:4d:56:41:2f:89:
         37:4e:db:9c:b0:77:db:15:e9:cf:4d:a6:e8:52:1f:a4:89:cd:
         bd:b0:71:0c:2c:38:6a:37:df:5b:ab:0b:31:19:73:b1:de:84:
         0c:c1:6a:f1:46:46:35:63:42:86:0a:84:25:06:64:e1:20:f9:
         f0:1d:f0:6c:94:06:89:f3:3b:5c:d3:57:4b:43:28:1f:04:f2:
         00:46:2a:0d:55:d3:07:a7:90:47:53:24:bf:de:01:51:ea:4f:
         08:65:6f:76:92:f0:b3:4e:1e:d6:54:96:c0:f5:ac:73:65:9a:
         7a:f3:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:52:03 2025 by rpki-client