Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File:                     cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier:          EruB6mUUiEBkSZ8uUbjMAKI3CSSp9+A4VT+OMUGFftE=
Subject key identifier:   09:32:25:78:27:D5:F2:E2:6A:B0:1A:DF:15:11:26:F0:41:30:3A:6C
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer:       /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial:       0197B8FD00EEFFC57FA0FF008F8F3D3F207D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 00:01:17 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:17 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:17 +0000
Files and hashes:         1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=)
                          2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: EW6ViWdYgDsn+DgtG43gp3bXuuLM8cqbcHQfwxU6jms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fd:00:ee:ff:c5:7f:a0:ff:00:8f:8f:3d:3f:20:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
        Validity
            Not Before: Jun 29 00:01:17 2025 GMT
            Not After : Jun 30 00:01:17 2025 GMT
        Subject: CN=0932257827d5f2e26ab01adf151126f041303a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:e1:0a:12:67:f6:74:4e:d9:84:b5:78:48:94:
                    62:5c:b7:12:c9:2e:fe:ce:2a:77:0e:5e:37:54:3d:
                    2c:ec:6b:00:a8:08:3f:c8:34:eb:f0:3b:1e:22:1c:
                    f4:7b:97:9e:10:c1:7b:2d:e3:67:bb:fd:2d:c1:01:
                    90:a9:11:c8:c8:4d:2c:6c:ef:7e:b8:76:5a:65:3d:
                    be:5e:a4:55:75:5e:5b:aa:7d:dd:99:6f:48:9c:27:
                    ec:b0:1a:1f:ee:0a:17:86:af:c9:48:94:bf:f4:11:
                    a7:c6:85:af:a5:e8:8b:70:6e:6a:53:62:c1:87:64:
                    47:ff:51:f5:e4:df:36:5b:13:ca:dc:49:ef:9c:d1:
                    d4:e6:20:cf:f9:f9:d4:b5:a4:7a:72:6e:c1:23:9f:
                    1c:8d:59:53:80:1c:84:de:6a:4a:32:55:58:17:fc:
                    cd:06:f0:fc:15:9a:85:ec:d3:ff:15:e9:20:14:8d:
                    9f:01:7b:55:3d:0f:64:c3:bd:e6:0e:12:a3:25:10:
                    1c:dc:bb:b1:57:21:50:01:e9:9e:36:f4:49:15:42:
                    7e:69:9c:de:82:d3:0a:44:58:c9:32:c7:50:ce:be:
                    a3:3d:60:bb:6b:ab:26:ef:f5:33:fa:ad:fd:3e:37:
                    30:b2:4d:9b:67:9c:06:b4:fa:a9:b2:41:60:54:b6:
                    9c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:32:25:78:27:D5:F2:E2:6A:B0:1A:DF:15:11:26:F0:41:30:3A:6C
            X509v3 Authority Key Identifier:
                keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:70:ee:57:c2:5a:23:9f:f7:6b:d5:a1:15:c6:8e:e4:2a:cb:
         c6:17:29:d2:df:46:92:6e:4e:85:42:75:7c:2a:3a:f1:c9:2a:
         75:57:09:e0:6b:57:95:56:10:be:e0:b1:f0:20:c3:15:5c:f7:
         bb:21:a5:69:ba:68:c9:d1:f2:bc:b4:dd:39:4d:d1:09:1d:6d:
         06:52:ad:32:ed:9f:af:11:54:b6:bb:a2:bd:ac:02:57:9b:07:
         c6:6a:d6:c1:df:1f:a8:88:1d:53:07:bf:04:fb:79:bc:fd:02:
         68:35:34:99:ce:ec:eb:23:fb:08:99:10:8b:de:ee:83:36:c5:
         d2:b8:16:d6:3a:7f:c6:bb:d5:04:17:4d:33:44:b6:50:b9:66:
         c5:34:7c:f0:74:2f:79:01:20:7a:46:81:fc:29:8b:2f:8a:25:
         82:f2:f0:c0:86:ad:22:f2:e5:88:a6:84:9e:5c:54:be:bf:94:
         18:36:6a:e6:1b:30:01:fa:01:76:d2:4f:dc:35:51:bb:32:4d:
         c0:b2:de:ad:3a:ac:6b:68:b4:1f:11:cb:5b:6e:38:60:99:0f:
         e8:29:18:20:47:e9:0c:d0:7c:a4:f0:5e:8f:8c:6b:44:48:11:
         bb:c7:13:64:80:b4:49:f4:5e:f2:ab:6b:b6:a9:1e:3d:90:4e:
         f4:9e:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:34 2025 by rpki-client