Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File:                     q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier:          qmqJ/O1K8+3kN0gt4R2fm8XhmeGql4IC8AF6qPVTkYM=
Subject key identifier:   8C:ED:9E:B3:4D:D5:7E:68:0F:79:4D:51:B6:81:03:10:7F:95:E0:AD
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer:       /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial:       0197B96AB9E48FF3112D12FADD479723B660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number:          0B1E
Signing time:             Sun 29 Jun 2025 02:01:08 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:08 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:08 +0000
Files and hashes:         1: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (hash: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=)
                          2: W2NhW2V8Iexgd4nWoDLptnalys8.roa (hash: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=)
                          3: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (hash: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=)
                          4: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (hash: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=)
                          5: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: BWF/lvs2kdHrwseBhKcIUrVmP5gRGM3BdaRTy9qhqtE=)
                          6: r9AECsFfSl2im_ZX-xTBrlxOfD8.roa (hash: ULicRE/3nxP/zcRYRZJBN8ZiMjtTPhQz8NjZ7TncWXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:b9:e4:8f:f3:11:2d:12:fa:dd:47:97:23:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
        Validity
            Not Before: Jun 29 02:01:08 2025 GMT
            Not After : Jun 30 02:01:08 2025 GMT
        Subject: CN=8ced9eb34dd57e680f794d51b68103107f95e0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:09:d9:00:12:02:16:e9:4a:07:d3:fa:28:68:
                    b9:75:00:7e:06:65:0d:f8:0e:a3:eb:a8:84:51:0f:
                    2e:17:04:84:60:80:a6:6f:4d:71:d2:a4:53:1c:0a:
                    92:27:8f:75:f6:80:2a:7b:0b:9a:1e:96:cf:ea:48:
                    83:bf:1c:f2:5b:d7:5f:98:e2:c3:29:3c:f6:1c:23:
                    96:9c:a3:8e:d1:a8:44:e3:1d:fa:d7:d9:2d:ee:01:
                    c1:77:3c:05:17:02:6e:95:cc:fa:41:b9:6f:74:f6:
                    b5:20:fe:22:8d:95:73:cc:d4:c0:9d:b8:36:dc:8b:
                    9c:97:a7:ed:ca:78:72:3b:04:32:81:49:42:0c:63:
                    bf:00:d4:7b:a5:f9:8d:00:dc:4f:34:b9:75:82:2d:
                    1a:94:3d:01:ff:b7:b1:36:37:38:30:46:d9:33:87:
                    e5:ab:f0:1b:fc:eb:ba:29:4b:11:bf:1d:b6:37:63:
                    55:aa:cd:58:2d:70:d2:03:08:da:07:85:3a:a3:f3:
                    0f:ce:2b:ea:55:28:2f:46:bb:24:ab:47:5b:04:f4:
                    43:7a:d9:b3:ef:45:0f:03:54:81:8f:4d:36:34:5e:
                    c1:4a:74:f4:0a:6b:8e:e6:11:48:e3:04:05:4b:08:
                    d0:7b:0f:ce:5b:6f:e9:97:6b:5b:ee:7c:6a:cb:e8:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:ED:9E:B3:4D:D5:7E:68:0F:79:4D:51:B6:81:03:10:7F:95:E0:AD
            X509v3 Authority Key Identifier:
                keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:33:4b:d9:b5:6f:94:cb:ca:80:d1:45:39:46:7c:32:ce:60:
         c1:39:3b:82:07:61:5a:c5:75:e8:30:03:ac:7d:0d:26:e9:b0:
         9f:67:59:5d:2a:02:ea:34:74:7a:06:36:5d:e9:9f:77:d2:67:
         6f:e9:42:b3:6b:d9:27:ec:ba:1b:b5:a0:a6:0f:3b:e2:8f:82:
         4e:09:da:99:4c:1b:95:3e:f5:dc:d9:27:97:e9:10:26:11:82:
         13:09:02:85:c6:8a:fb:93:b7:ae:be:f6:55:2b:42:bb:9c:79:
         4a:af:d9:3e:0a:99:0f:c7:ba:3b:85:52:ae:7a:b7:bc:9d:8e:
         38:9c:72:3b:b6:fd:c0:46:a7:67:e1:b0:e5:2e:dc:c4:73:9b:
         dd:e1:38:da:fe:d5:18:57:5f:8f:b8:55:e1:dd:b2:d5:7f:78:
         26:2a:2c:b3:08:1b:80:ba:85:d6:42:cb:2e:d0:e3:d7:5c:be:
         0d:b6:58:ee:e7:a1:0a:63:fa:42:6b:6a:56:71:40:f6:b8:99:
         f3:95:2b:85:0f:51:5e:bc:b1:94:a2:a5:01:cb:9d:1b:74:e3:
         99:4d:0e:04:ac:35:96:e9:af:7d:bd:8f:b6:3f:2f:ce:8f:cc:
         10:35:1a:cf:c6:c9:4b:42:22:43:83:09:34:71:89:1b:f8:7e:
         ca:36:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:57:01 2025 by rpki-client