Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File:                     ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier:          +38Oy/uS5UymmheJ3e2mldS/1vqJ4RwhXln30Vrj15w=
Subject key identifier:   0E:3E:7E:20:47:EF:5B:52:CF:E0:12:C9:06:4A:5F:4F:DB:92:D5:8D
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       0197B7EA9013E22BDFE55BB30FA35271DF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number:          0785
Signing time:             Sat 28 Jun 2025 19:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:32 +0000
Files and hashes:         1: 9qqw5-kT_WV_X39A7wZIImdbzHo.roa (hash: /+5dGBlEHLXX+0YtcqdadMo/w6B/YFbkAqy9tbmNdEg=)
                          2: D-sLa7SP7XelLhZGOPS-ls06iHQ.roa (hash: O/tqtREZzKy5oPDokpycb2qRKRocKJlF54vVhaheJr4=)
                          3: XI8GYNvzBktqANN3ULY6yNPZsp4.roa (hash: 0Mxp84Xa3ZGuCVESuvLHwIOTltEO7ZBfIp1LcrOP0ho=)
                          4: eRUACPCXV-4Ib9JOJdpUbWI_TYw.roa (hash: h9bviEq7QynmkHeqFVqOAhXJmtcEK3L94GyVb2n9ZXc=)
                          5: hJkdSoDXpzIKTUPp93OLm4_CfgM.roa (hash: GAALV0VthJPoxa0vb/cdFv6fAU1JjHbthL2uNWZeyCc=)
                          6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: kjn6qzicDteiZp/A2zpHXH4bW7/8AlvZD2j2bvKclaU=)
                          7: yLW-Wxb-WEK3SlgHfRgcFULgwtU.roa (hash: 47c/8wbrDeeCgPSJoS7prqWBSvhn47quuwVKT8eb4AA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:90:13:e2:2b:df:e5:5b:b3:0f:a3:52:71:df:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: Jun 28 19:01:32 2025 GMT
            Not After : Jun 29 19:01:32 2025 GMT
        Subject: CN=0e3e7e2047ef5b52cfe012c9064a5f4fdb92d58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:6e:f7:3a:e5:1f:a8:f8:4e:7d:0b:20:2d:
                    b5:aa:7a:97:89:21:5a:0a:14:37:88:c7:52:50:23:
                    44:61:48:74:42:08:a8:f3:72:d4:c6:11:fc:8e:44:
                    97:a7:82:b4:3b:42:cc:73:e7:c4:5e:4d:1b:d6:cf:
                    f9:4d:ed:29:04:ee:af:b8:96:af:57:bd:96:0f:50:
                    48:76:6e:36:d5:a4:a3:e6:06:1d:95:d6:00:5a:b2:
                    34:26:14:41:09:54:bc:ea:64:b0:cc:20:9a:fa:37:
                    3f:2b:40:04:c3:88:43:17:d7:31:d5:dd:c6:d4:94:
                    0c:52:29:4f:ea:88:e6:b3:10:26:ae:b6:30:71:8c:
                    6f:89:ce:b6:c2:6e:a7:85:7f:86:dc:1e:28:a2:94:
                    08:04:95:4e:a9:35:50:be:10:8e:3a:01:61:4c:17:
                    9d:01:65:20:66:67:73:bf:ad:d4:55:6f:1c:b2:ca:
                    61:d8:5a:26:2c:bd:e1:f2:1e:45:58:22:6d:cf:7f:
                    35:39:10:07:40:4a:a0:f7:fb:9c:d1:a6:97:77:f0:
                    48:f4:a7:11:a7:7a:00:35:e0:d4:24:3a:df:89:6e:
                    da:a3:c7:ca:c8:09:77:48:eb:65:1b:e1:eb:0f:29:
                    28:e2:39:a4:3c:88:f8:52:e6:25:de:e9:c3:29:b5:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3E:7E:20:47:EF:5B:52:CF:E0:12:C9:06:4A:5F:4F:DB:92:D5:8D
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ce:a1:de:ee:29:ed:b6:ad:3d:3b:e7:45:a5:79:7e:ce:c8:
         58:90:6f:5d:e2:3a:68:f5:53:fb:ca:7f:38:55:33:82:9d:2f:
         d5:a4:9e:9e:75:6a:3d:94:16:3a:cf:54:7e:66:22:d0:b5:a9:
         da:30:cb:79:9b:35:cc:13:d9:4a:fa:16:8a:68:40:78:26:ec:
         a9:19:4d:88:ee:a1:b7:d1:2c:b5:73:5d:28:fa:cc:7e:e7:ec:
         da:5b:11:1b:ac:62:76:8a:99:79:e4:da:66:bd:c5:88:16:48:
         eb:09:a4:e9:3b:30:fa:0b:20:e9:f8:e1:c3:0a:a3:03:ad:47:
         24:19:b0:1d:15:d1:62:09:7d:f6:87:54:06:57:5b:65:06:5d:
         30:d1:70:08:a6:fe:4a:79:49:17:27:5f:25:1b:ad:98:27:d0:
         ea:2e:ac:6f:9b:9a:61:cc:c9:7c:8e:b0:6e:41:04:f5:63:05:
         5c:fc:dc:05:0b:67:23:06:d0:dd:12:cb:2f:6c:a6:02:54:b2:
         63:68:4a:d8:21:eb:79:62:cb:56:d4:d2:01:6e:4b:69:cf:11:
         38:0d:4c:31:ac:73:12:50:49:21:28:62:5c:c3:94:ad:46:5a:
         e8:cd:7c:33:19:55:a3:26:62:ad:3c:ae:cc:9a:63:2f:87:4e:
         98:93:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:10 2025 by rpki-client