Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File:                     mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier:          jiyGuAs+aEhZ8ISgQlJ1UOe0h/uHZCdR+h4KEmvegNY=
Subject key identifier:   C3:C1:49:55:5F:C0:B4:82:76:62:04:6F:8A:93:12:AD:45:3B:7C:05
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer:       /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial:       0197B77C93DC4D05DDE0E12D45CB5F7D845A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 17:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:24 +0000
Files and hashes:         1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=)
                          2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=)
                          3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: 7w95d1f58O8i99takd/1uBGpkq6SprbPpHXhZXmmNrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:93:dc:4d:05:dd:e0:e1:2d:45:cb:5f:7d:84:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
        Validity
            Not Before: Jun 28 17:01:24 2025 GMT
            Not After : Jun 29 17:01:24 2025 GMT
        Subject: CN=c3c149555fc0b4827662046f8a9312ad453b7c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5a:5f:a8:b1:8c:7c:db:29:48:cb:92:3a:fc:
                    ef:10:a9:8e:90:f6:e7:f4:ad:dc:d1:a9:9b:27:87:
                    93:4c:f5:1d:24:f6:47:02:f8:0e:df:73:f4:12:b2:
                    46:bf:89:9b:9f:e6:5c:86:3a:62:2e:b4:ed:45:62:
                    dd:3c:02:b3:dd:8a:fc:8d:90:50:0d:cd:b7:6e:1f:
                    ae:fe:d0:7c:b0:05:24:bc:c0:bf:32:7b:b0:9e:fc:
                    6e:d8:27:d9:19:95:65:57:6d:82:7f:d6:06:d6:5e:
                    b9:8e:33:da:a5:71:39:e8:19:e6:f5:51:44:d1:60:
                    8a:39:2e:4f:5f:35:a1:5f:7f:09:33:0f:46:ad:55:
                    5a:c5:a3:44:94:aa:95:bb:f7:d1:9d:33:22:dd:b8:
                    b6:69:c0:42:8e:9a:37:8d:85:3f:16:a5:ea:d6:61:
                    50:ea:f2:86:0a:de:b5:df:ab:b0:4c:f6:4f:6a:94:
                    81:a8:16:67:e0:6d:af:c9:83:2a:3f:60:e4:b7:a2:
                    8a:08:42:4d:cf:70:48:f3:6d:cc:08:59:98:aa:6a:
                    fb:1f:f1:25:24:c1:a0:6a:0c:af:65:49:35:63:4c:
                    54:9f:33:f9:dd:1d:84:2b:dc:0b:5d:99:b6:68:70:
                    40:bb:39:d7:1e:59:86:04:83:3f:05:8e:8b:8a:c8:
                    b4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C1:49:55:5F:C0:B4:82:76:62:04:6F:8A:93:12:AD:45:3B:7C:05
            X509v3 Authority Key Identifier:
                keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:af:f6:78:43:59:9d:a3:11:ab:d1:cf:57:bb:b6:38:78:49:
         be:76:48:4d:04:23:72:53:47:70:a3:0f:58:c8:93:fb:b3:8a:
         8d:40:2d:5a:79:af:0e:7d:6b:20:4b:8b:5f:58:1d:d3:f3:c5:
         13:30:94:ac:e3:fd:72:cc:df:a9:4a:98:38:83:78:10:86:86:
         95:d0:32:82:18:20:fe:14:da:17:cb:9c:48:40:e2:55:f2:9a:
         dd:9f:46:36:d0:b3:67:14:33:62:2c:25:e1:30:8b:4f:24:29:
         7c:bc:3d:44:5b:23:a3:1f:13:94:e6:27:93:9b:a1:53:ee:e1:
         f2:90:c6:2e:18:d8:1f:e3:17:64:6b:26:c3:76:4a:b8:20:5d:
         4b:05:67:1b:54:0d:a8:ac:9f:64:13:a4:df:58:47:2d:c2:63:
         9a:80:14:45:69:7e:6b:5a:30:40:0b:11:eb:33:7b:74:ca:e0:
         a4:cc:fd:6c:78:fc:11:c6:a4:ef:c4:2b:3a:41:3e:57:e1:bb:
         2c:c5:60:5b:f1:83:cf:94:c3:3b:f2:36:ed:c4:d8:ce:49:48:
         b2:e9:7e:67:e8:f1:ef:86:bd:52:2f:a2:7a:0f:8b:1a:d6:3f:
         56:e5:e9:af:b1:39:9b:f2:7c:54:1e:62:ae:09:76:f5:3f:b6:
         5f:20:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:46 2025 by rpki-client