Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File:                     m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier:          BINfpDEtiRGPe4+GV01D+yM39LL/ix7Df21K8u0l1BU=
Subject key identifier:   82:59:61:5D:BB:4F:4C:7B:63:0C:85:1D:0A:89:06:16:A5:8D:B3:FA
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer:       /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial:       01977865AF2895A0B4450875FFFF38E660B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number:          1595
Signing time:             Mon 16 Jun 2025 11:00:19 +0000
Manifest this update:     Mon 16 Jun 2025 11:00:19 +0000
Manifest next update:     Tue 17 Jun 2025 11:00:19 +0000
Files and hashes:         1: CCz7FQIn8kI9ogMIaXc_bOjDx-I.roa (hash: Z7Nm6IrHUE/TC8xU7rVqcrz5JoA82LWmN+W14PD9mb8=)
                          2: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: OzvqRHz5QeraATESbtzYpHs3cOMMlnsHmK8Ln+czd5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:65:af:28:95:a0:b4:45:08:75:ff:ff:38:e6:60:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
        Validity
            Not Before: Jun 16 11:00:19 2025 GMT
            Not After : Jun 17 11:00:19 2025 GMT
        Subject: CN=8259615dbb4f4c7b630c851d0a890616a58db3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:02:8e:f9:9e:1e:0a:6a:b5:de:2b:c5:d4:
                    5e:9c:52:36:68:1b:9a:98:69:be:82:91:1e:8c:77:
                    77:7c:96:29:9d:f2:7e:85:cc:9f:77:db:db:b7:6f:
                    8b:d1:33:2a:f7:1c:c5:78:0f:fa:a7:b8:39:1a:46:
                    21:9b:28:4f:8d:a9:1b:54:38:72:d0:7c:64:c5:02:
                    23:1c:72:f8:03:67:a2:2b:b5:db:10:0b:b8:50:75:
                    f1:d4:e8:fe:e7:20:67:b1:05:f1:18:71:11:59:78:
                    04:c6:2c:3c:22:9d:7d:e8:af:f5:67:ff:28:a4:81:
                    43:cd:9f:7b:16:96:87:fc:c7:76:71:61:66:64:95:
                    f2:61:a6:40:85:93:05:09:9e:8e:82:6a:ee:52:97:
                    4e:27:f9:c7:02:79:83:f8:ff:12:f1:14:ec:89:df:
                    03:50:8c:5d:bb:d7:e9:d5:eb:7f:c5:d5:46:e9:d4:
                    dc:aa:5c:a9:c1:b0:fa:49:c2:ca:54:54:7a:a9:33:
                    99:f2:2d:a1:0d:d0:3b:d1:88:3f:fc:03:34:e7:10:
                    ea:ee:e0:2e:ac:97:47:d4:09:1f:06:22:54:23:a4:
                    80:f7:ba:0c:60:59:21:78:56:9e:dd:4b:ed:e6:c3:
                    f0:41:4b:16:71:dd:7f:ad:14:f0:0f:40:bd:23:41:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:59:61:5D:BB:4F:4C:7B:63:0C:85:1D:0A:89:06:16:A5:8D:B3:FA
            X509v3 Authority Key Identifier:
                keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:44:83:4d:cb:10:2a:e1:7f:e6:56:78:85:b1:af:ee:19:9f:
         25:bf:8c:f1:62:b1:49:3d:ca:d7:b2:89:25:f4:89:02:e8:bd:
         12:93:3a:9b:db:f5:23:88:aa:3f:80:eb:14:9e:60:e1:8a:00:
         19:f0:ae:d8:fc:78:d3:3a:f8:0a:ab:82:76:eb:03:fe:a5:ea:
         b7:83:de:4c:53:8d:73:ed:6d:59:c4:ab:56:8f:3c:6a:05:50:
         86:4a:44:60:ee:db:84:a4:61:5b:63:cb:fb:36:26:64:b3:9b:
         1e:9f:4b:d9:c2:31:9b:41:cd:87:cc:e9:f2:a9:af:a1:5d:66:
         e9:76:23:66:7b:5f:bc:98:af:9c:13:dc:57:9a:55:71:a3:77:
         06:97:9a:06:a3:f8:82:23:59:8c:24:a1:19:8c:c1:ba:94:cc:
         79:73:48:32:3a:f6:c0:96:37:56:e3:48:be:64:4b:79:29:69:
         75:8f:d9:c5:b7:43:4e:fb:f6:7e:47:ca:68:00:24:6f:68:6f:
         1e:8d:fc:97:34:78:ba:37:71:cd:ff:02:5c:92:8b:be:87:38:
         61:7c:18:4e:17:10:61:7b:bf:e9:2f:36:ab:a8:18:7c:29:a3:
         b6:e4:08:42:34:b1:a7:b5:d8:da:70:4d:3c:28:00:42:25:d9:
         bc:38:c8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:54:14 2025 by rpki-client