Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
File:                     m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json)
Hash identifier:          X9x/iB7X2wKhtI6jOEKqN3Gd3XIFZ4EL/zbYJ4VGP7A=
Subject key identifier:   0B:29:92:71:28:6B:34:57:9D:B2:3A:6B:41:1F:D9:16:4C:74:A8:CD
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Certificate issuer:       /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial:       0197B7B3536867F52D23C74D7D3743BE2B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 18:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:12 +0000
Files and hashes:         1: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: 2DorVyOmLKnfklOdDO6ajtmrKbBBFwsN/Rs1fzYbeZw=)
                          2: q2ym0slk0xbm2oB654qSKIP-iHM.roa (hash: T79hvxao/FCQThpWza9B8knVI82t4LDRrMr2rSD4Axs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:53:68:67:f5:2d:23:c7:4d:7d:37:43:be:2b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
        Validity
            Not Before: Jun 28 18:01:12 2025 GMT
            Not After : Jun 29 18:01:12 2025 GMT
        Subject: CN=0b299271286b34579db23a6b411fd9164c74a8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:da:9b:9d:3d:3d:68:3e:45:ab:89:35:a8:a1:
                    38:a5:fc:ae:5f:97:b9:5f:e7:92:8e:b7:40:63:76:
                    74:48:ed:4f:db:d3:84:6b:c9:e5:b8:bf:99:d1:16:
                    1d:4c:22:80:8e:78:a0:2c:09:20:83:22:89:9e:71:
                    7c:e5:6f:48:0e:ed:d5:cc:ac:fa:09:d9:ac:ea:a0:
                    13:07:ff:fc:cc:7a:48:fb:b2:9d:5f:40:72:4a:16:
                    e2:9e:ea:d6:90:bc:1c:60:9c:a8:d1:09:5b:a6:c0:
                    9f:69:64:d9:1c:53:df:d2:d0:0b:a8:78:a6:b7:61:
                    98:b8:e9:1f:f4:c9:e1:24:90:d1:aa:9a:65:bd:32:
                    85:bd:0c:9f:4a:59:a4:45:db:66:57:59:be:14:c1:
                    da:a1:bc:a4:0f:e4:7b:28:35:e7:5f:dd:69:ed:c7:
                    7e:17:36:a7:a3:78:2f:4b:8d:f5:85:9f:dd:81:80:
                    e1:2c:e0:11:97:7d:22:cf:03:83:ae:38:a1:66:29:
                    41:9c:bc:02:17:fa:23:3b:47:88:f3:fc:f9:3b:a7:
                    f0:32:64:a9:04:b3:c1:e3:17:51:d2:d8:e6:50:c6:
                    e1:f9:76:8a:c4:08:1f:2f:6d:b8:b6:7d:75:3f:d1:
                    c7:83:af:8e:7e:36:2d:87:64:4f:33:dd:fb:ca:e7:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:29:92:71:28:6B:34:57:9D:B2:3A:6B:41:1F:D9:16:4C:74:A8:CD
            X509v3 Authority Key Identifier:
                keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2d:ce:b9:cb:8c:d2:3b:43:09:2d:09:03:ca:98:be:71:8b:
         4d:e7:49:ef:bd:1d:7b:23:42:03:de:c1:cc:df:7e:2c:13:62:
         3d:da:84:19:96:14:3d:f0:05:07:71:71:cc:d6:72:5e:dc:58:
         a1:40:c7:60:ee:d1:23:10:f1:3f:d1:b4:1c:58:d0:0c:fe:18:
         62:47:24:23:d7:85:78:77:6b:40:2b:43:ab:1a:8c:49:3a:9a:
         d1:15:61:fa:f6:fb:f6:a1:f8:06:a6:55:bc:90:c9:9b:c5:2f:
         17:64:8d:84:98:1d:82:90:fc:39:6c:31:58:56:37:df:ef:a1:
         e8:34:4e:62:29:59:b4:d6:b2:24:f1:22:d7:e6:e9:2e:cc:ab:
         81:ce:2d:8d:93:13:9b:86:21:5d:bb:aa:ea:c4:84:f2:f1:2f:
         35:7b:46:d3:84:13:d4:be:ed:64:04:b2:5e:c4:c0:99:85:b1:
         a5:8a:9b:1a:97:ef:e8:25:00:d5:7e:0b:4c:31:38:cf:fe:5b:
         6e:57:cc:42:e3:d6:1d:df:0d:fb:a3:45:27:f3:db:47:70:e1:
         3e:44:51:92:7b:e7:62:c2:d5:de:7b:04:3b:af:32:00:35:3b:
         40:56:c2:e6:bd:06:33:0e:89:ea:8f:16:74:1b:77:15:03:fe:
         68:1c:f6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:20 2025 by rpki-client