Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
File:                     y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json)
Hash identifier:          l8UPDZkAeIYEAkJvWv+WT50Pw3Lh+m31zv0t5LiO7bg=
Subject key identifier:   B7:EB:A7:10:3D:B6:79:60:E9:2D:06:48:6E:34:66:F2:82:F3:36:8C
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Certificate issuer:       /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial:       0197B93375C6E2E31ACB959703DC5CA29278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
Manifest number:          15BB
Signing time:             Sun 29 Jun 2025 01:00:46 +0000
Manifest this update:     Sun 29 Jun 2025 01:00:46 +0000
Manifest next update:     Mon 30 Jun 2025 01:00:46 +0000
Files and hashes:         1: 7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa (hash: 878HhGYlePO6JgY3PtW7VLOGBnrfdtyTWzeH4xsP4g8=)
                          2: VeBtVkpIYodNfDVL9q0zO2G9fI4.roa (hash: 69DCX1Y+C0YR951ujfa1InW/UlkkHLEEqX2IFa0T65Q=)
                          3: WFk1Sbl9ffKO0_c5-wWqDgx_UdY.roa (hash: 17TQJSkjsNV4kLocHOeLmKp8frraMCHjxrwGJ2DZ/TA=)
                          4: YQH8RWxADt9aJV8FpUmZfLr_4hA.roa (hash: as+j57YQ6lscVO9lYUdKRdByZHNNE4AzI7PATyHo/j0=)
                          5: qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa (hash: k2V4zT3lW1qBoAk74wdn7K6a/aSM0/Ew+2PcshHyMps=)
                          6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: 5/jpqD2BOGrPKayerj5W4hD9QZcpTPfVoRaNbyqTbDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:33:75:c6:e2:e3:1a:cb:95:97:03:dc:5c:a2:92:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
        Validity
            Not Before: Jun 29 01:00:46 2025 GMT
            Not After : Jun 30 01:00:46 2025 GMT
        Subject: CN=b7eba7103db67960e92d06486e3466f282f3368c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:8e:0b:ec:06:55:c9:91:17:0a:76:94:2f:
                    cf:e6:04:a8:6f:31:46:37:7d:b3:fd:44:86:5d:8b:
                    f8:03:ef:53:29:01:87:e3:26:d8:7e:56:02:48:3a:
                    7e:fc:33:d0:c5:01:01:0c:3e:ed:7a:44:f3:80:37:
                    0a:b5:1f:1d:1e:31:72:94:90:6c:72:5e:db:8a:67:
                    84:76:d2:98:0c:89:fc:e5:20:dd:ef:8d:23:64:9d:
                    51:e0:99:f4:4b:27:55:7e:fd:63:c1:31:45:ab:d1:
                    ea:ff:0c:c9:a6:c2:af:94:54:9e:a6:f6:d3:ef:b6:
                    39:d5:e0:74:0c:7f:13:69:e2:a7:b4:45:3b:6b:09:
                    2a:00:02:cd:94:fe:5f:8f:c0:43:01:51:ce:84:a5:
                    0d:1d:cc:ad:e5:2d:12:4d:60:b9:f8:13:d4:0d:78:
                    d5:a2:78:0e:32:eb:8d:24:ba:13:e3:41:c5:e6:e2:
                    49:3f:93:a3:06:07:f9:32:d1:fa:69:b5:10:85:b8:
                    5f:b6:34:73:44:9e:e4:8a:5d:16:3d:48:a9:a9:30:
                    9c:0f:4d:3b:39:b3:f5:11:17:49:ea:a8:f3:5e:f3:
                    43:e9:8c:b5:89:bd:27:49:28:c1:dd:2a:85:2f:55:
                    6e:fb:9c:1d:17:89:4d:a3:3d:80:1f:7e:12:57:19:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EB:A7:10:3D:B6:79:60:E9:2D:06:48:6E:34:66:F2:82:F3:36:8C
            X509v3 Authority Key Identifier:
                keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ff:44:0d:5d:62:3f:47:d3:96:be:77:f6:4f:78:54:93:50:
         41:85:75:5c:53:0b:1a:77:1f:66:3d:50:5a:d4:0a:82:fb:d3:
         2c:a7:f7:eb:83:26:95:e9:fc:d4:80:34:be:2e:53:39:82:9b:
         fc:40:c2:bf:b2:ed:9c:93:ef:4f:0b:bd:41:1c:01:b7:27:c7:
         a6:5d:0a:9c:4d:96:30:e2:4e:41:37:dd:72:40:52:30:86:e0:
         1b:07:82:43:f7:fb:b7:69:46:4d:1d:73:df:85:bb:aa:00:69:
         b0:8e:5a:89:14:9a:bc:dc:0b:89:d2:94:ac:83:cb:7f:aa:2d:
         e4:8d:a7:dd:e2:96:e7:39:7d:01:50:85:ce:6e:ac:dc:5e:b8:
         51:ea:8d:06:3d:6b:1f:6b:78:41:28:c5:49:e5:4d:43:f8:bd:
         5a:b4:47:4c:cc:6b:0d:f9:d9:d1:f3:53:5b:78:f6:b6:fd:b5:
         b5:c8:74:58:77:8b:b5:71:11:ad:ff:17:30:67:cf:d7:9b:63:
         25:8c:62:41:6b:9d:4e:b6:4f:78:30:71:0f:f9:e9:a2:9a:d3:
         92:e4:16:d9:1d:d3:52:ab:00:4d:35:29:7a:bd:72:a3:9b:bf:
         cb:f7:59:98:5e:42:f3:79:c4:97:3a:bd:d8:d8:27:60:fa:29:
         5e:48:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:02 2025 by rpki-client