Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
File:                     plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft (raw, json)
Hash identifier:          wiRobeMvXUT7Q6WgpSJTHkSS4MSY6qkD+OgdexQnsRM=
Subject key identifier:   E6:48:A6:92:90:F6:79:B7:55:E5:32:93:1F:B9:32:19:53:18:34:B9
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       0197CD286ED0F4A1950326936C7F2BE7FBD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
Manifest number:          15CF
Signing time:             Wed 02 Jul 2025 22:01:08 +0000
Manifest this update:     Wed 02 Jul 2025 22:01:08 +0000
Manifest next update:     Thu 03 Jul 2025 22:01:08 +0000
Files and hashes:         1: FAJgXHKouxn1NIiI1ev8JXSE61Q.roa (hash: 8t7YcNGHmBNdk3Ehp7fmi3HGBZDTLV33VOOXqYdX/R0=)
                          2: FCLA8M032EwPVSliWKDu0fDlnPE.roa (hash: mxbROZOE42PzUqwm62cDGMgZG6BYzZ2DWS8LB2fyuxA=)
                          3: FzCE_2CmXVI87QCBjmMqmhPqvI4.roa (hash: xnBYv3l8pbmO/yFa4pavqkCSVOI2MUIexKvv0cmsLEo=)
                          4: QXuReFuFnm4r5YfXqKS-RkBXarA.roa (hash: pUUucPhRyENqlrukVYu+Ay5+vKGTKkXyK3KLmXDcylU=)
                          5: plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl (hash: Cm7jf9EHQ/py+ajd9r/kl8MDtQjmPFiSN7EbikLSv+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:28:6e:d0:f4:a1:95:03:26:93:6c:7f:2b:e7:fb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Jul  2 22:01:08 2025 GMT
            Not After : Jul  3 22:01:08 2025 GMT
        Subject: CN=e648a69290f679b755e532931fb93219531834b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:da:a9:91:30:fc:cc:73:d5:46:18:ea:e4:
                    6d:ea:f0:be:2d:6e:4c:2a:98:23:24:9e:93:48:ea:
                    af:84:ce:50:6e:03:28:fa:76:4d:2f:56:17:8f:95:
                    f4:69:7c:85:c2:50:3b:a2:4a:98:74:ec:a5:4b:3f:
                    00:48:b9:35:d1:ed:44:8a:ac:f2:92:ac:da:83:e5:
                    bf:72:81:a5:8d:1f:67:ea:3b:da:0f:f0:5c:f8:9c:
                    ba:52:98:f6:45:6b:96:68:f9:ef:cb:66:22:c7:5f:
                    dc:9f:84:6a:c9:69:f6:7c:16:d8:43:7d:fb:93:65:
                    ad:0a:28:49:09:2e:bd:99:ff:16:ef:34:dc:04:c8:
                    f6:a8:1a:da:e5:0c:55:8d:05:82:d1:8c:e7:2b:94:
                    f3:9a:de:c8:0d:7e:40:48:68:12:5c:3a:18:33:22:
                    9e:72:ab:c6:e3:bc:67:ff:2d:de:5c:b8:97:48:71:
                    80:da:07:05:19:4d:30:e8:22:34:87:b8:25:01:5d:
                    2c:a6:a4:73:90:e4:04:a6:15:d5:43:92:9f:0b:6a:
                    a3:37:96:b9:57:73:48:6d:31:84:7b:61:61:38:8a:
                    b3:c0:42:c5:1e:cf:6a:75:4c:72:6b:74:4b:6e:e0:
                    50:f7:fa:c7:e2:c1:7a:a6:07:dc:4f:f3:c5:82:57:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:48:A6:92:90:F6:79:B7:55:E5:32:93:1F:B9:32:19:53:18:34:B9
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2b:30:fb:a4:4b:e1:4c:2b:ab:fc:af:b1:5e:1d:36:e9:19:
         23:a4:f6:d9:e4:f9:a5:5e:09:88:d1:14:e1:2a:19:8c:76:43:
         f9:bf:8f:94:56:a5:7c:9c:b8:39:d3:8d:b8:29:8a:22:a1:88:
         21:04:cb:3b:9a:a7:cb:c9:08:e8:9c:06:71:bb:13:36:fa:39:
         b3:22:86:fe:f1:40:be:34:c2:bc:ed:50:46:ab:ed:07:a6:de:
         ed:b5:39:ef:c1:36:f8:85:c4:0d:af:c3:ec:9f:54:1e:16:db:
         4b:83:a6:61:5e:a9:62:07:5c:88:48:8c:9a:63:4a:52:61:db:
         89:f6:2a:91:c6:a2:13:41:4d:85:51:d3:89:5b:ae:60:ac:1b:
         df:dc:ca:5a:82:6d:52:ca:d6:3b:1b:4e:de:7e:ee:15:cf:7b:
         a7:76:5d:e4:c3:fa:66:27:9f:f9:3f:58:a8:83:bd:73:4e:d6:
         a8:11:3a:f9:15:cd:7d:77:05:20:7c:fe:f2:d3:3f:29:70:07:
         db:d0:dc:29:82:a5:ea:29:16:de:00:9d:a1:5b:68:39:68:c6:
         19:01:eb:d2:cc:5c:f1:7a:86:0a:11:bc:8b:83:a5:96:0a:fe:
         90:8c:0b:95:7c:45:ec:41:8e:b6:48:87:e2:ce:19:21:e2:c8:
         82:c2:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:53:11 2025 by rpki-client