Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
File:                     jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json)
Hash identifier:          adCc05DVhUSug80fyVMgdrArWVJNiFGuejCwuDGo8aU=
Subject key identifier:   F7:4F:82:F7:69:3C:40:E6:F5:65:1D:75:4C:FC:D1:71:B5:C2:32:F0
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Certificate issuer:       /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial:       0197B7B35CFF515659D73AB18CF2F4576ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 18:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:14 +0000
Files and hashes:         1: ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa (hash: E10KwVeqHj4J7myzFFX6atSdaz21CXH8tahheXJigm0=)
                          2: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: hOduWL7+UaxJ5R4/VpurQGKBSmt7W2HeVCcXAZhh7Zo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:5c:ff:51:56:59:d7:3a:b1:8c:f2:f4:57:6e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
        Validity
            Not Before: Jun 28 18:01:14 2025 GMT
            Not After : Jun 29 18:01:14 2025 GMT
        Subject: CN=f74f82f7693c40e6f5651d754cfcd171b5c232f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:da:52:31:8e:2a:d4:19:06:af:39:35:f2:
                    ef:c4:91:48:54:a5:25:54:49:66:7f:10:a0:06:eb:
                    a2:64:a7:c6:68:2b:e0:f6:14:6f:74:17:78:ef:04:
                    2b:98:24:89:98:e4:6a:2b:39:cd:4d:96:07:e2:ee:
                    5a:88:1b:52:9d:d1:58:61:14:10:95:a4:1a:1c:0c:
                    b0:89:d8:68:91:00:d6:7a:c3:73:12:52:b6:70:41:
                    a8:bc:25:ee:e3:28:0c:88:68:ef:5d:87:24:b0:11:
                    3e:5a:f3:4b:0f:76:54:db:82:a8:96:86:c6:af:f3:
                    5b:59:f8:69:eb:16:57:9b:d5:4b:26:a2:22:ac:c4:
                    e9:29:0f:17:18:fa:0a:c1:6b:e6:7d:78:c9:b2:89:
                    4f:39:98:74:09:fc:a5:8d:93:c9:66:32:ea:1f:dd:
                    d6:6d:bf:5f:b4:26:91:a5:ab:aa:1c:44:91:67:17:
                    b4:b5:72:f6:7d:ca:74:f6:71:00:4f:30:e6:56:54:
                    3d:d1:22:6b:35:e6:72:88:4f:99:1f:aa:70:e8:bb:
                    ad:35:37:5d:6f:84:af:4c:bd:cb:18:71:44:20:28:
                    20:6b:bb:83:f3:c6:d0:78:f2:87:1a:74:99:0f:26:
                    10:b7:aa:58:85:b6:44:fc:87:74:6a:9f:b5:50:7a:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4F:82:F7:69:3C:40:E6:F5:65:1D:75:4C:FC:D1:71:B5:C2:32:F0
            X509v3 Authority Key Identifier:
                keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0a:1f:e8:26:ff:de:96:b8:d8:3e:26:e1:fa:ff:e6:3c:6f:
         73:87:e5:c1:33:1c:76:89:ad:b9:1c:85:ac:fd:f1:bb:7e:d7:
         29:64:40:25:ae:d2:3e:17:26:74:ce:05:fe:2c:66:69:c4:00:
         e4:de:fb:4d:00:28:55:44:a7:03:cb:df:ce:ab:11:ae:f7:ac:
         18:9b:92:7d:95:f3:27:c9:70:53:69:2d:87:b7:c4:c8:12:25:
         aa:19:df:e2:a3:b5:aa:c4:7f:d1:08:aa:2f:e8:7d:aa:2c:c8:
         94:e3:13:ee:ec:12:3e:84:ae:52:34:7a:9f:5e:a6:05:18:43:
         64:ec:ae:4b:a8:29:fc:1b:c7:5b:80:a6:6a:79:7e:c6:26:a1:
         37:1c:01:da:fa:74:32:cd:c3:1d:c2:fc:2e:6c:72:1c:f6:34:
         04:f8:12:fe:65:29:86:5e:05:ba:7c:ac:e7:ad:33:2e:8a:c6:
         0d:cc:f8:41:fd:f4:fd:ae:f2:55:77:c1:e2:ba:33:fe:dc:36:
         34:db:99:29:22:7b:b5:10:c4:1a:54:55:2a:07:e6:30:b8:96:
         84:6e:ef:45:b7:1c:2c:d7:2a:6b:03:9e:68:9f:af:0e:e8:23:
         2e:ea:0b:14:b2:83:5e:89:0e:3d:9f:f0:bf:d3:db:48:ae:a6:
         7b:2f:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:42 2025 by rpki-client