Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File:                     R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier:          6ykdfkN2mQJibIwd4lkCvdCYdXQCzD4e81BMRL1OUxQ=
Subject key identifier:   FB:AE:1E:CE:DB:EB:A3:23:A2:EE:5D:D7:1A:38:C1:82:CF:09:99:27
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer:       /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial:       0197B8FCEC542F35CF5074099439CC3F681E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number:          0562
Signing time:             Sun 29 Jun 2025 00:01:12 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:12 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:12 +0000
Files and hashes:         1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=)
                          2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: Czfr9axtkF427dhK+VBY1t7ZDme3ntQAfmgt/wxtj0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fc:ec:54:2f:35:cf:50:74:09:94:39:cc:3f:68:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
        Validity
            Not Before: Jun 29 00:01:12 2025 GMT
            Not After : Jun 30 00:01:12 2025 GMT
        Subject: CN=fbae1ecedbeba323a2ee5dd71a38c182cf099927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:28:5d:a8:3a:8a:94:2a:9b:0a:a8:ed:e0:
                    86:30:2a:39:11:bb:ab:18:48:85:46:92:5b:27:2d:
                    84:f6:bf:69:62:a7:5c:30:ed:19:6f:95:7e:04:25:
                    9d:3e:ab:fe:3a:d2:4d:c8:4d:c2:ce:96:9c:2f:a5:
                    93:19:fd:ff:af:e5:e8:be:f1:2f:9c:13:ba:9a:72:
                    b4:d8:43:32:b1:38:f4:cf:ed:82:04:1b:3c:88:99:
                    22:5a:eb:7d:08:15:0a:25:41:29:01:61:db:d8:7c:
                    f4:97:4a:c0:f7:60:a8:62:aa:ac:28:aa:ea:59:18:
                    59:3d:f9:5e:fd:39:9b:5a:dd:8e:11:d6:ba:a1:5e:
                    9a:f9:d3:e7:7d:03:46:88:29:a4:db:25:7f:c2:f1:
                    69:fc:6d:29:92:25:fb:a3:25:86:59:62:d5:6a:c8:
                    7c:17:c0:e2:9c:a9:2e:64:9c:cc:54:01:3f:77:d5:
                    90:0f:ef:14:be:e4:03:63:2f:db:d7:90:ad:24:c1:
                    0c:49:fa:69:f2:ed:09:b1:02:3a:0e:32:dd:4e:a3:
                    9a:71:40:3e:ae:bf:04:b6:18:7c:7c:45:1e:26:e0:
                    b7:bf:f1:ef:fc:24:d5:5a:17:ae:b0:c6:f6:03:0e:
                    75:6a:23:ef:3f:84:18:35:c2:83:23:78:1c:1d:fb:
                    f4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AE:1E:CE:DB:EB:A3:23:A2:EE:5D:D7:1A:38:C1:82:CF:09:99:27
            X509v3 Authority Key Identifier:
                keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0b:83:5c:75:a1:d4:1e:34:e7:61:16:a1:16:f2:29:84:53:
         2a:10:9f:76:8c:3b:ae:30:d3:dc:4f:52:d8:03:01:33:15:7e:
         44:3c:45:24:ec:2d:d8:44:66:e6:74:d1:f8:a5:5e:1f:5d:ce:
         ab:01:46:84:62:63:31:37:34:c0:48:5f:3b:72:4f:01:30:c0:
         70:47:78:8a:6e:03:6b:e9:18:d8:05:93:14:13:4c:f7:c4:d2:
         3b:e3:31:5c:be:b0:6a:97:73:76:fd:d5:35:68:cf:db:ea:40:
         45:7c:0b:11:7f:b5:f5:91:19:e8:47:75:73:94:ac:60:2b:dc:
         31:04:e7:1f:60:da:6b:74:a4:4e:fc:dc:06:e1:15:5c:ba:62:
         1b:4f:7a:70:0b:00:e3:a9:cf:c7:67:36:fb:d6:05:46:66:35:
         7f:f0:78:33:75:28:22:bf:d7:ee:69:5c:2b:4b:18:2e:55:50:
         31:bf:6e:dc:fc:54:3f:b6:a3:d2:00:2b:09:b9:f0:82:28:ba:
         c7:0b:00:e7:10:50:08:9d:f0:cf:94:7c:a0:f1:12:d3:3b:46:
         be:98:a3:4c:fb:3b:c9:3f:03:9e:38:07:a3:15:65:74:b1:37:
         f1:e0:a0:95:78:c5:06:d3:53:e4:ff:08:83:ec:0b:cc:bd:19:
         8d:c1:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:12:17 2025 by rpki-client