Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
File:                     M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft (raw, json)
Hash identifier:          ZBGb8ojjJhgSRpCtXDmm7EtIe0sA/3cPcICcn6RdMoo=
Subject key identifier:   FE:DE:ED:F6:5B:0B:AE:CA:F5:59:1D:90:D2:58:62:77:10:57:5D:6C
Authority key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Certificate issuer:       /CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Certificate serial:       0197B6A0BE844C06208BDAF0F1F4E6F061D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 13:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:17 +0000
Files and hashes:         1: 2vNXSPhqGzkcVvfumaqzoQwZMt0.roa (hash: eL4GW0LkIf6gTx0hvW09DQfbQa9hDU0uyvNBC0IgCZw=)
                          2: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl (hash: bode0WAFShbpIq+Kw1Rtz64pAftrlOUrEPpmCcbMtL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:be:84:4c:06:20:8b:da:f0:f1:f4:e6:f0:61:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
        Validity
            Not Before: Jun 28 13:01:17 2025 GMT
            Not After : Jun 29 13:01:17 2025 GMT
        Subject: CN=fedeedf65b0baecaf5591d90d258627710575d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:06:bd:d2:59:2d:8e:44:7c:2f:99:64:89:
                    51:1a:94:ff:22:76:2a:1b:b9:99:5b:2b:ee:53:2b:
                    cf:45:ed:37:c8:eb:a1:c7:67:95:20:54:21:af:45:
                    3d:51:16:e1:1e:b9:57:59:33:fe:64:a7:f9:ce:7d:
                    cb:1c:94:55:87:53:f7:83:dc:27:73:ad:6a:23:f7:
                    84:f6:b4:fb:08:76:7e:81:76:00:43:c7:4e:06:ee:
                    e5:1e:54:0c:15:29:76:49:70:9e:9d:be:69:8b:ea:
                    d6:b9:01:d8:39:a7:92:4e:a9:91:e5:5b:95:2e:29:
                    21:78:31:be:4b:6c:d7:5f:21:17:98:c2:31:68:0d:
                    c8:00:c7:39:70:01:f9:72:ed:74:3b:5f:f0:51:4e:
                    12:43:9a:0a:1d:d2:f5:85:b9:dd:45:b9:09:09:0a:
                    9b:4a:26:72:b6:cb:61:e5:7e:e1:0f:aa:86:78:e2:
                    90:b8:b8:df:d1:77:e4:d3:7e:3b:a3:4b:c8:e4:b8:
                    56:19:f4:4a:9e:73:56:bc:f9:3e:22:d1:ef:60:02:
                    a2:08:cc:22:3f:b0:4a:02:98:3a:13:97:21:d1:ab:
                    d1:68:9e:a4:4b:e4:89:2f:8e:0c:dc:dc:8e:45:6a:
                    44:f2:26:fa:74:fb:73:54:6b:a5:9a:fb:d4:51:a9:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DE:ED:F6:5B:0B:AE:CA:F5:59:1D:90:D2:58:62:77:10:57:5D:6C
            X509v3 Authority Key Identifier:
                keyid:33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:03:01:29:eb:03:dd:48:87:bf:25:b8:b1:dd:bf:6c:a5:
         02:2d:3a:54:45:f7:02:34:c3:29:b5:78:e5:60:39:0b:ab:3b:
         71:b3:00:e6:c9:95:05:45:6c:f2:c4:d7:2f:2c:da:a5:57:ad:
         c2:29:d0:1d:b5:24:3a:10:be:6b:3b:4f:b8:35:8a:dd:d8:9e:
         12:ca:4e:c1:ee:d6:b6:60:54:8d:f7:bf:93:ad:6a:d0:ac:e8:
         f8:a5:d3:39:38:16:63:19:d6:ef:20:bb:1a:3c:ee:25:c7:e7:
         61:e3:10:1d:96:0c:9c:c3:69:de:7e:94:f2:76:d2:17:6d:12:
         63:83:ab:b8:e2:d7:41:71:72:c2:d2:86:40:0c:9a:48:3d:d0:
         d1:cf:b9:db:be:ea:92:cd:84:0b:33:6d:44:ea:0b:dc:2a:91:
         13:41:d1:b1:78:44:98:6c:2c:f1:03:84:01:40:04:ad:f5:af:
         5f:37:93:54:53:ec:fd:cf:61:49:8f:72:d4:7a:40:7a:dc:77:
         d0:15:bc:a9:c7:45:62:44:a5:01:8d:9b:e7:47:26:28:a5:6c:
         2c:51:49:76:b9:f0:07:4c:39:4d:d4:d0:2d:1a:7d:1c:89:9d:
         c3:95:31:89:e2:94:3c:55:08:f1:37:a5:fb:23:cf:4b:d9:59:
         1e:2b:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:24 2025 by rpki-client