Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File:                     10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier:          TfKGdjiWdBTBfH7YQGw0fflI6Zwrn6uJ52z1otsq2r8=
Subject key identifier:   39:03:B5:A4:83:38:DF:D8:88:AE:6C:43:94:E4:60:FB:4C:D5:42:24
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer:       /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial:       0197B6A079DB5EBB075E239E09516287F1A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 13:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:59 +0000
Files and hashes:         1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: 2f0CFgYGG+fNjAOA64FBeTLriLJCGpU06BN/SKK2OnE=)
                          2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:79:db:5e:bb:07:5e:23:9e:09:51:62:87:f1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
        Validity
            Not Before: Jun 28 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=3903b5a48338dfd888ae6c4394e460fb4cd54224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:97:91:d6:f2:7a:e6:71:0a:5c:0b:2b:00:
                    db:c2:77:14:dd:82:65:77:7b:cf:fd:3d:5d:3e:4e:
                    8e:b3:e6:19:a8:84:1c:97:78:e8:01:00:4e:a0:72:
                    50:58:e7:e9:72:36:1f:9b:2a:48:0a:d2:5f:0a:51:
                    57:29:57:81:ed:6e:c2:0a:32:2c:26:f1:f3:ee:91:
                    7d:4f:4c:b6:7d:04:c1:02:c2:6a:d1:76:c2:6e:97:
                    4a:c2:68:6b:3b:be:2f:7e:bf:4a:5d:5d:de:69:9e:
                    62:e0:41:fd:44:54:a5:4d:03:a2:11:33:55:76:50:
                    3a:2b:a4:ad:99:52:20:f1:74:7d:bd:e4:ae:22:5d:
                    95:f2:95:e5:29:b9:ba:8f:44:13:60:68:b7:06:9a:
                    2a:90:d3:b6:c2:fc:da:77:12:f0:b7:c0:72:8f:b1:
                    9a:04:8c:f4:6c:89:7c:69:68:34:79:71:c2:6e:ab:
                    be:79:81:dc:6e:df:2e:06:8e:bb:f8:b7:35:f8:9e:
                    23:06:9f:4c:66:58:39:a3:ed:41:af:8b:f6:30:2f:
                    ef:4f:be:85:49:33:c2:ee:a6:73:3e:93:7d:0a:74:
                    4a:c0:96:5f:ef:7c:f9:69:c4:ad:20:7e:a1:aa:a9:
                    0e:65:13:56:e1:99:9f:26:bf:7e:3a:5b:e5:22:3d:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:03:B5:A4:83:38:DF:D8:88:AE:6C:43:94:E4:60:FB:4C:D5:42:24
            X509v3 Authority Key Identifier:
                keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:5e:fd:79:dc:c1:eb:e2:f7:62:d0:6a:c3:6f:14:f5:67:
         69:c2:13:70:ce:22:1d:e5:98:e1:11:41:85:14:59:9d:8f:a6:
         d3:de:49:46:04:16:49:32:c7:53:ad:dd:10:19:2f:2c:5c:9f:
         6e:2f:38:87:b3:fe:ba:fb:56:7a:a7:7a:d3:8e:83:b0:29:84:
         13:e3:b4:90:26:c1:c7:20:ba:85:af:8f:4b:0d:2d:66:0b:44:
         a2:7f:5c:f0:9a:f8:88:71:45:2a:3c:17:f5:12:97:d2:10:ff:
         d8:99:3f:f8:8b:f5:ad:a5:ec:d9:bf:14:2d:91:7f:b8:53:fe:
         b5:27:ed:21:3a:b9:55:47:56:2a:e7:77:25:f8:23:9b:2d:af:
         21:fb:07:81:a8:fb:d8:07:60:9c:0c:ca:93:9f:d2:6c:53:22:
         35:81:82:9c:df:11:24:e4:d1:54:de:96:24:d0:9b:74:73:75:
         bd:e6:63:1d:f0:4f:d6:4a:c1:0f:6c:49:7f:18:b8:ce:41:d3:
         10:2c:d5:ac:9c:cf:cb:0d:24:b9:0b:da:35:8a:cb:e9:c3:c6:
         7a:56:45:aa:11:04:db:f6:72:cd:3c:66:72:7d:c1:a3:ff:92:
         3d:5f:fc:d1:49:9e:81:1d:f7:ba:e5:3f:ab:45:f5:68:05:fe:
         46:a5:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:29 2025 by rpki-client