Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          8QEkN8GCACmLFI7XCmFga2/5Pd+1mF/xa0DfxUQJqpY=
Subject key identifier:   A3:C6:97:8B:C2:19:FE:2F:6E:B1:6B:23:7D:3D:20:A1:3D:AE:50:08
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       0197C312B42E45EFB0EA3C70D9E60F13F775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          15BD
Signing time:             Mon 30 Jun 2025 23:01:12 +0000
Manifest this update:     Mon 30 Jun 2025 23:01:12 +0000
Manifest next update:     Tue 01 Jul 2025 23:01:12 +0000
Files and hashes:         1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=)
                          2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=)
                          3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=)
                          4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=)
                          5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: gCLMbgM4n4x965NFvCAvFgw+zKTqK3yQJG4yKPeXegU=)
                          6: kgtXMGVq_yiG6jbCmetTa_cdZEI.roa (hash: 6jOU2wUAoyQfpjSCtb3mycfBqwA3lOt9bOnarXx4iMo=)
                          7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c3:12:b4:2e:45:ef:b0:ea:3c:70:d9:e6:0f:13:f7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: Jun 30 23:01:12 2025 GMT
            Not After : Jul  1 23:01:12 2025 GMT
        Subject: CN=a3c6978bc219fe2f6eb16b237d3d20a13dae5008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:ed:40:06:76:37:31:36:2d:7d:75:96:12:
                    d1:7b:b0:da:7c:6f:39:49:fd:b1:5a:02:d1:88:ec:
                    26:a4:62:1c:ac:22:ff:76:f2:4e:ce:e1:a5:49:73:
                    35:35:2d:bd:71:95:43:8f:64:6a:f8:40:1a:e2:cd:
                    2a:53:99:41:7f:58:e1:82:da:d9:2e:79:1a:81:53:
                    f4:27:5f:b7:a1:58:ac:c0:f2:b5:6d:8e:d8:78:9d:
                    58:3b:8f:e3:4a:64:c7:11:f9:24:8a:87:ab:d5:aa:
                    df:88:19:3c:65:e4:79:d5:6f:54:6c:fb:f3:da:26:
                    43:0c:32:e1:a7:b2:af:8b:01:91:4b:bf:6f:2d:ae:
                    92:8b:55:6a:c0:77:92:a1:72:1a:b8:00:3d:99:75:
                    c6:8b:fb:bd:99:e3:62:80:19:bc:39:a3:7b:92:a0:
                    4c:79:a9:ed:c1:16:6a:b4:fd:47:8b:0e:17:ed:13:
                    d9:05:ef:a0:b9:4e:44:58:c7:0f:69:93:45:77:45:
                    f5:24:5c:41:ab:d4:2a:f5:a7:7b:6b:08:ea:98:c7:
                    32:a7:51:63:31:77:89:d2:9b:a1:e0:60:01:b2:f5:
                    fd:31:e8:08:6f:38:22:44:de:e1:66:c4:47:d8:b8:
                    a1:4b:26:b6:67:99:46:f6:a8:c5:5f:c6:06:17:98:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C6:97:8B:C2:19:FE:2F:6E:B1:6B:23:7D:3D:20:A1:3D:AE:50:08
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:3e:83:c7:ad:bd:35:52:d4:b5:61:88:1d:3b:4c:1f:e2:
         6a:a5:36:ff:5c:dc:a6:45:c3:2c:8e:57:ea:aa:82:47:aa:ee:
         79:51:67:3d:ed:36:90:c8:fb:4f:e2:cb:1d:a4:56:db:49:24:
         34:9c:43:ca:6f:84:0a:d3:6d:98:d2:5c:79:73:e0:8e:d7:56:
         1f:c1:86:6b:fb:cc:f2:30:c3:63:a5:a0:7f:9d:d7:42:41:ad:
         e0:6c:7b:5f:89:87:8b:c9:8a:c0:02:36:42:79:7d:b2:53:68:
         5c:8e:7f:e7:90:7f:92:09:ec:52:98:8d:0c:27:a8:b5:d0:d1:
         a9:23:63:a3:1d:68:a7:8f:d2:0c:5c:d2:f0:1b:10:24:fb:bc:
         d6:e9:ba:c6:6d:14:e6:d5:7d:3c:c8:18:62:71:75:4e:b4:30:
         f7:f5:ed:b1:a2:2f:7c:47:d2:8b:d0:42:9f:8f:f2:27:f5:67:
         46:16:e5:37:ed:73:5a:d0:c9:99:d8:db:59:db:2f:3d:27:10:
         e5:c8:80:76:4e:b1:fb:2d:de:f6:d7:cc:41:b9:fb:6d:f3:70:
         61:46:c5:da:6e:a3:52:8a:c8:87:ff:38:5f:a8:4a:9a:27:e2:
         af:18:c3:2f:6c:49:89:f3:d8:65:ad:e4:18:54:0c:96:e8:5b:
         bb:b1:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:55:09 2025 by rpki-client