Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          LsmXgmOl6IKafoeOLq7tCKsEKZLwI6by2k0MqCU6c44=
Subject key identifier:   96:E7:B6:88:51:F1:15:03:17:DD:C3:28:33:DA:CA:2F:95:30:F9:AF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       0197BC6D2FBAA092E64C1ACDFF99E4CB6093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          165F
Signing time:             Sun 29 Jun 2025 16:02:41 +0000
Manifest this update:     Sun 29 Jun 2025 16:02:41 +0000
Manifest next update:     Mon 30 Jun 2025 16:02:41 +0000
Files and hashes:         1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=)
                          2: 0r24pIQSTUD5N5L07GOWGFKPpV8.roa (hash: trXkO9svjCxRC078/qaWkwZVcRw/r/RbNzaK05elAEs=)
                          3: 1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa (hash: jNjeNOA7d8RyKrYy4kXSP0ufCj18S8yCDg4Nofw0dAY=)
                          4: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=)
                          5: KQ1oNR09mKgd5ku7SR1U_e9V9fQ.roa (hash: cs83TD53Tvlf/W2SbQnH3f+S/haNzyXJayHuIXfao20=)
                          6: PLHlOEI8OTEsrWEb9gcEoJkppTI.roa (hash: HqryYXEFzx4Aim3Zpzxpc+c6ErO0nPq1Js+lyJLuXYs=)
                          7: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=)
                          8: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: VyqV6am4ZaRdking5C8ZZ4MemCW8SxWC/ELUNh/rU+0=)
                          9: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=)
                          10: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=)
                          11: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=)
                          12: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=)
                          13: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (hash: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=)
                          14: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=)
                          15: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=)
                          16: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=)
                          17: pzkAj4_zAVXkRe0C_QHjEgzBj0Y.roa (hash: 3G1cxIfKvcRktJjL1ylmN8MQ4xGHLKTVnlOoY7cNz5o=)
                          18: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=)
                          19: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=)
                          20: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bc:6d:2f:ba:a0:92:e6:4c:1a:cd:ff:99:e4:cb:60:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Jun 29 16:02:41 2025 GMT
            Not After : Jun 30 16:02:41 2025 GMT
        Subject: CN=96e7b68851f1150317ddc32833daca2f9530f9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:0e:1d:a6:4d:2c:ad:ae:d2:0e:35:4e:e1:
                    b2:80:cb:c1:a9:66:4d:2d:d2:6c:1d:be:d1:51:3c:
                    ec:33:80:00:1f:98:bb:7a:bb:d3:d7:c0:c1:3b:71:
                    37:46:8d:67:5a:48:7c:15:3c:c3:5b:8e:5b:11:92:
                    45:2d:ce:c3:4d:12:f6:14:1b:44:71:7e:42:3b:aa:
                    d7:0a:71:8c:f5:68:21:90:51:b0:9c:93:e6:ea:f5:
                    b4:49:87:fd:64:6b:44:7a:37:98:b3:83:9d:7d:55:
                    24:f4:c5:8a:f1:8f:4a:12:79:5f:e6:0c:fd:e9:66:
                    7e:1c:86:1e:26:c3:a0:8f:02:3b:46:ab:e4:a5:ac:
                    a8:9b:a1:90:d7:a0:d9:49:0b:be:2d:14:cb:54:6c:
                    b5:35:fb:6b:91:50:d9:c3:b3:1e:47:ff:ef:71:68:
                    e1:ad:dc:c1:f4:84:3a:32:3c:ac:92:0b:19:3b:52:
                    76:fd:fd:52:73:0c:fb:b7:99:2c:8d:09:9a:70:88:
                    74:3b:0b:04:03:28:11:5a:09:69:50:04:8f:53:30:
                    3c:30:99:2c:02:53:41:8f:d5:2e:a5:0f:4d:d6:50:
                    07:22:ea:6f:a6:84:32:7d:09:60:0b:23:da:d8:b9:
                    a1:2f:e3:77:42:7b:f0:88:6d:dd:7f:14:0b:37:f1:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:B6:88:51:F1:15:03:17:DD:C3:28:33:DA:CA:2F:95:30:F9:AF
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b8:06:28:e8:32:d1:80:8a:12:1b:70:9c:01:2c:34:a2:43:
         ab:1a:aa:b2:03:34:49:d7:57:7b:20:dc:cb:0d:9a:6e:8b:f0:
         87:7d:89:14:ee:f0:6f:74:63:10:14:6c:9d:cf:09:e3:4e:51:
         ae:48:06:e2:d7:e9:5b:10:57:51:d3:ed:b0:ff:1f:a3:f7:c0:
         4f:4e:67:75:ef:6a:ba:46:1e:2d:15:87:df:c4:fc:b5:ea:01:
         f3:f0:f3:5c:d2:44:d1:85:b6:2c:58:43:d6:fd:5c:8f:40:5a:
         9d:0d:c4:a9:44:85:b0:18:14:a3:95:e9:17:a5:27:b1:a9:f8:
         13:f7:6a:11:f2:23:70:2b:98:ba:1f:0b:e7:cb:6f:f4:5f:95:
         3a:63:12:a7:95:c8:eb:ec:6b:60:9f:92:76:09:24:48:78:29:
         b4:6a:01:81:07:f2:e7:28:f4:0d:10:ed:d2:d3:c6:71:27:2a:
         b0:52:cc:4a:0c:8a:a6:3a:2a:fe:88:6e:73:b8:46:52:60:cb:
         41:d7:51:d6:fb:2b:43:97:17:1d:13:23:b6:67:b6:51:d4:0b:
         0f:b3:63:e1:88:ac:7b:4f:54:3d:a4:00:99:33:f4:84:42:84:
         47:ac:ff:ed:f6:0a:18:b6:82:60:d7:80:6f:44:4a:8a:d2:6f:
         e0:df:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:28:01 2025 by rpki-client