Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          D/EWgQWE7Bksv+hicMCW0TPjzxanFLsrWOppajrF+L4=
Subject key identifier:   E8:21:AC:AF:F2:97:DC:0A:82:87:19:BB:00:C2:36:EB:CF:3D:77:BD
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       0197B821140FD69A03914DC037360D2EFC3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          1287
Signing time:             Sat 28 Jun 2025 20:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:04 +0000
Files and hashes:         1: BF1bDepTrbKLANgNAxAuU4DpJj8.roa (hash: NVRWLfzQET9uM2U7kiX4t5MiOcl02yBYC6pVmP2/SUk=)
                          2: apwK_C2jLXYtjM1_rywqkSP6SXM.roa (hash: Brus3GnJlwWOcIOQznlG1EIg3MnsNQ8Kg3KCHt4fQYM=)
                          3: dpEUD5Ic4PND631hV_WLYlzOm-Q.roa (hash: jkB5/8OIzhFzu0rc7J2Og2F1itTEOg0Rs+XbStzpkvQ=)
                          4: mOMTOzklCOsSuB9v2boILVZdvLA.roa (hash: mXY/bu3Am1gTj9HpvpC3BeunwEWpovGrdKp10ZfyeDc=)
                          5: pLrG1Jk8y_PSHcBjqwFvnPBrCfk.roa (hash: L3xcP7+zXuAEnHkbFJ8G7AgoW2gbRSxFSqISwohVgeo=)
                          6: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: 4mZbAkb0xzMyfv30nWMUx+I9AA5mPz3l/LnThpUJwXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:14:0f:d6:9a:03:91:4d:c0:37:36:0d:2e:fc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Jun 28 20:01:04 2025 GMT
            Not After : Jun 29 20:01:04 2025 GMT
        Subject: CN=e821acaff297dc0a828719bb00c236ebcf3d77bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:ac:f8:4d:59:26:76:61:32:98:40:71:a7:
                    95:20:5a:ca:ad:c2:06:96:1e:d4:4d:e3:d5:2f:1e:
                    eb:55:b2:0a:53:9e:49:45:38:95:bf:68:31:88:c9:
                    25:05:bf:43:0b:a5:da:05:13:7c:14:2e:f6:3a:00:
                    6c:5c:78:68:65:0f:01:06:11:29:89:16:bf:d7:af:
                    62:b6:c7:7c:42:10:72:9e:d1:71:30:d1:39:2d:f1:
                    6e:a1:22:ce:de:07:69:39:20:9e:93:bb:22:d6:58:
                    40:de:e0:26:ab:c5:0f:22:c0:1e:ba:04:b0:d6:e2:
                    be:40:cc:78:d9:af:6c:60:ed:60:ee:28:a1:29:a2:
                    8a:4e:a9:ff:8d:e1:d1:24:fd:45:d5:76:0c:46:b4:
                    27:25:73:5e:38:8b:ee:f2:59:50:4e:d0:33:04:1d:
                    a5:7c:0b:51:de:70:72:aa:bc:64:87:01:1a:18:91:
                    ed:36:21:c0:24:cd:c7:c6:53:cd:c8:7b:6d:c2:f0:
                    f0:65:6c:17:3a:11:bf:6a:cc:b4:00:10:10:b6:d7:
                    b6:fb:10:da:b6:1d:fe:15:b9:9e:b8:7d:74:69:88:
                    ab:a9:2e:d5:3b:4b:37:77:90:b5:26:bc:90:c5:a6:
                    0a:de:85:68:d4:50:49:ec:00:71:ed:c1:1e:37:76:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:21:AC:AF:F2:97:DC:0A:82:87:19:BB:00:C2:36:EB:CF:3D:77:BD
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8c:f8:57:f4:a9:f9:89:c9:fc:95:b6:8c:d3:76:8c:71:e2:
         81:bd:11:83:ee:c8:a0:ee:f9:db:23:b5:90:66:d9:c1:b1:3c:
         e3:69:9a:29:82:26:f4:98:07:16:f0:72:66:8a:40:f5:b4:8d:
         b3:a1:7b:fb:8a:8d:94:8a:6d:20:35:c1:6a:0b:05:74:67:d3:
         99:35:81:67:b0:ea:89:10:6f:18:5f:f2:ab:64:32:22:0b:2a:
         be:cf:b9:35:39:12:27:f8:b8:9e:18:a4:8d:3f:f2:e1:3c:09:
         3b:49:14:5f:d9:b8:54:8b:d4:7b:bc:be:b6:30:94:03:ee:6d:
         11:2e:77:b9:75:44:44:a2:37:1e:6f:87:0c:18:80:61:71:73:
         bd:0f:65:fa:d8:58:87:c0:fd:3b:92:73:31:01:6c:15:fd:9a:
         99:07:04:03:13:9b:ab:0f:0e:32:be:82:3a:4f:da:6b:e6:13:
         a0:fa:a6:6e:6e:75:88:60:6f:b7:1c:db:66:69:2e:a3:44:d6:
         a9:73:a0:e4:bc:72:f3:6d:fb:ee:11:d0:4c:2f:60:c5:78:49:
         a1:28:58:62:ee:8b:6e:69:c3:e7:f7:47:51:c8:e2:ca:68:ae:
         8c:19:38:73:4f:2e:3b:99:82:25:0c:af:1f:9d:9d:14:3e:2d:
         c9:40:c1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:12 2025 by rpki-client