Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
File:                     bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json)
Hash identifier:          yjfvdNmieIAe7OwQBg4+luVVxwrabqp4ihUNSN6fzew=
Subject key identifier:   06:3D:EC:2D:10:59:DE:5E:8E:44:DB:AF:80:11:CA:34:3E:B6:53:5A
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Certificate issuer:       /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial:       0197B7B33F27FA1D0B649264283020862E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
Manifest number:          1272
Signing time:             Sat 28 Jun 2025 18:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:06 +0000
Files and hashes:         1: 4TefOlatmM0RZvlgyykepaTA69w.roa (hash: oK3ggt3FwEGdGg67HpifWxggQ4sHuczhuCdiLpHFNGo=)
                          2: 7X_plhmrvkux1oibBja4OB7LETs.roa (hash: gnMgxFgUS9IL4J+87g7lZ1R3Q2jpCUYTvtTDs50/e2w=)
                          3: 8AIOf5iiWGq0P893PCbTNf2BkGU.roa (hash: HBMubVYts6z6OX4Jo+t8Ek09rhVu9H6F5CshJadR9AA=)
                          4: AIEW49j5InMuprcIv1re5ELo7Mg.roa (hash: CspD88WXE/VTrfWO2t59apJyKXsmRJQByqBIfAYqYok=)
                          5: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (hash: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=)
                          6: VDBZ-Do7oLcSjkfG0QXXLZFsn18.roa (hash: tsSmWQNC/m3Eo2x7t6PBKV0awmBGlt2M1agXJLIK2d8=)
                          7: VEmtcTDf-XxN-2zL8Oay3Fp05IA.roa (hash: l7M61/tXdMzCop4fGPoOrVeYzOpgSiZ8UEnps3mMyhQ=)
                          8: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (hash: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=)
                          9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: CPbSm08LKzyrv7ZjDliyETyGU//95XRg1Nrs7yuvLCE=)
                          10: eIFvvK-ivxwVefbgEMRWrAvh218.roa (hash: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=)
                          11: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (hash: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=)
                          12: sCxYlTWiDhdRMcngf850A6XqaOE.roa (hash: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:3f:27:fa:1d:0b:64:92:64:28:30:20:86:2e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
        Validity
            Not Before: Jun 28 18:01:06 2025 GMT
            Not After : Jun 29 18:01:06 2025 GMT
        Subject: CN=063dec2d1059de5e8e44dbaf8011ca343eb6535a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:56:a7:1f:73:d6:2a:7f:21:ed:8f:c5:53:ab:
                    36:4c:e3:83:40:01:7a:03:40:84:f8:7d:e3:52:04:
                    82:12:bd:0a:b5:0c:93:7b:fd:e3:61:2e:78:d8:5e:
                    fe:96:10:9e:b6:7e:81:c7:95:b2:c0:a6:66:6e:e7:
                    53:df:bc:cc:4e:a3:4e:38:3c:84:0d:d8:3e:69:ea:
                    5d:30:da:8b:cd:1d:34:c7:3a:6f:b6:85:c0:e8:0a:
                    21:2e:8a:6e:e1:c5:15:f7:6b:be:94:c5:a7:67:2c:
                    c1:44:2c:f8:20:84:13:83:66:f6:81:b0:85:db:90:
                    96:90:9f:55:aa:0a:3a:11:ac:ea:f4:3d:ce:b9:57:
                    78:6b:66:97:a8:33:d4:81:97:61:ff:ee:96:3f:61:
                    19:19:63:c0:87:fd:4e:ec:d2:f5:f0:d3:69:11:8e:
                    ad:c4:5d:7c:3d:1b:e9:85:27:cc:1e:be:c1:3d:ae:
                    66:79:d8:5b:88:b5:16:ee:f5:3f:d1:e3:b8:87:05:
                    7b:fd:e7:49:be:81:d6:2c:f4:7d:c9:1a:c8:ff:e5:
                    24:9e:75:9d:54:66:af:e4:e0:d3:51:51:ec:79:fe:
                    27:a5:19:6a:9a:c7:28:e2:04:3a:94:6b:13:ec:ca:
                    c2:92:69:27:48:16:23:19:ca:eb:a3:5a:ca:b7:bb:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3D:EC:2D:10:59:DE:5E:8E:44:DB:AF:80:11:CA:34:3E:B6:53:5A
            X509v3 Authority Key Identifier:
                keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:1a:4e:c6:81:58:03:5e:83:64:b2:c0:e2:12:32:6e:99:8a:
         6f:18:5b:6a:36:2c:14:d5:be:90:88:49:58:c6:4b:f9:41:00:
         b4:cd:f0:35:6d:52:d1:ae:6b:10:fb:db:66:47:e4:d8:57:2f:
         8b:2d:28:51:97:91:b9:e4:11:db:2c:bb:8b:2b:19:25:73:a3:
         0a:68:4e:a5:f2:15:c5:0b:5a:7e:2c:a3:29:f0:0d:85:ac:fc:
         3b:1b:ca:b1:53:b4:45:65:89:48:56:81:44:bf:fc:b6:82:4f:
         5f:fe:15:0f:7a:b3:bc:dd:66:a5:5e:6d:06:06:79:a8:b4:96:
         3c:de:51:4a:c2:9a:78:12:9b:90:a3:37:6e:1b:b2:70:b4:bf:
         ed:41:a7:ca:f2:d1:9a:98:0e:6e:4f:91:61:91:37:aa:63:ec:
         fc:e7:d5:ed:3f:68:6c:b5:3d:f8:38:7c:9b:4e:b4:2a:8e:cd:
         fd:60:8b:49:82:75:64:60:16:13:49:ff:b7:6d:fe:60:60:ef:
         6c:11:1c:ee:48:25:a4:3b:7c:c3:d9:6f:69:ea:dc:b6:1e:74:
         ae:c5:c9:8b:c4:f5:f4:fb:c8:96:7f:80:6a:bf:db:73:ff:cb:
         16:2b:1a:b0:ba:05:e3:31:b0:6c:9a:46:11:0a:a6:4f:63:4e:
         39:fa:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:56 2025 by rpki-client