Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
File:                     mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft (raw, json)
Hash identifier:          i+hlROGw/M8eHS6G1C0xsuNCKCxnHydg0Q+Cf4V16bM=
Subject key identifier:   43:A9:BB:5A:F1:81:87:CC:F8:63:8C:2C:4F:BD:F5:CB:13:30:F3:B7
Authority key identifier: 98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC
Certificate issuer:       /CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec
Certificate serial:       01976DAB7ACA7C56691C396B7C83146388DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
Manifest number:          0198
Signing time:             Sat 14 Jun 2025 09:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:43 +0000
Files and hashes:         1: B56y44YODLvIaK63HQtFyfRwg6M.roa (hash: gj5T46CEfqmvf3lZZB8Zxjkv61wJPVASA1iw+kPG+SU=)
                          2: mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl (hash: hZaBPhyTjmA9BZy53m5nMC+JcHzp7u8CI7JSNbTJiFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:7a:ca:7c:56:69:1c:39:6b:7c:83:14:63:88:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec
        Validity
            Not Before: Jun 14 09:00:43 2025 GMT
            Not After : Jun 15 09:00:43 2025 GMT
        Subject: CN=43a9bb5af18187ccf8638c2c4fbdf5cb1330f3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:e2:c7:fa:98:c3:fb:67:25:c2:1e:c3:ce:
                    5f:37:de:c7:36:4b:61:9c:cd:1e:92:ce:8c:09:63:
                    9e:16:e1:54:b6:48:9a:4d:b4:8f:f2:9f:32:0f:b9:
                    5b:f2:5f:eb:9b:20:32:4a:72:a0:ce:3f:0b:f4:9d:
                    06:0a:08:85:4a:64:37:f0:0d:37:54:80:b6:97:cb:
                    b2:7a:fb:ac:ce:62:c6:9a:e4:d4:f7:ba:c8:b9:f0:
                    a5:96:c0:f0:cf:d9:b7:78:f3:f6:67:23:c1:4a:11:
                    6a:08:fa:22:d1:25:99:2e:1d:23:f5:08:11:d9:26:
                    f1:a9:f6:7e:cb:74:51:35:ab:79:62:ad:11:ac:07:
                    e7:a1:f4:57:e5:6c:cb:5a:8e:a6:00:91:7e:1b:b9:
                    9c:e6:59:81:13:82:eb:4b:42:9e:41:3d:b1:6d:cc:
                    b8:ca:e6:67:22:7b:94:9f:ca:9a:dd:6d:41:cd:83:
                    3c:37:bc:fe:34:65:bf:95:d8:25:4d:c4:33:6a:d1:
                    8b:ea:83:fd:de:80:d0:5c:83:a4:cf:fc:27:00:68:
                    f0:a0:11:67:fe:b6:6c:94:f2:9c:83:67:6d:7c:e8:
                    d9:51:52:7a:95:78:40:9d:c7:0f:91:ca:e4:40:9d:
                    64:48:29:0e:46:6f:27:49:6d:2a:b2:98:87:44:22:
                    e1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A9:BB:5A:F1:81:87:CC:F8:63:8C:2C:4F:BD:F5:CB:13:30:F3:B7
            X509v3 Authority Key Identifier:
                keyid:98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d9:c2:f5:f1:80:4a:43:e4:85:d6:7d:51:3b:0b:60:33:6f:
         17:34:c0:ce:18:1e:a7:1b:60:be:6f:cf:6b:50:c1:91:a7:a0:
         6f:b9:65:25:9f:ab:6f:37:7f:d6:43:b1:98:47:28:94:e6:44:
         25:09:59:e0:2b:63:de:e1:ee:7d:3e:7f:1d:64:c7:1c:cc:94:
         08:91:05:ce:51:cb:e9:23:3c:d8:59:6d:30:b2:62:a3:c4:ba:
         c5:8c:fd:95:bd:df:62:e7:4a:e3:dd:00:74:51:85:fb:7b:12:
         80:b0:30:ae:8c:e2:14:f6:c5:d9:55:84:73:f8:00:09:75:0f:
         05:83:a5:8d:e6:18:1f:79:ec:96:02:7f:19:f0:96:98:32:b1:
         0c:ee:eb:3c:3e:b8:dd:7f:90:ab:e9:9d:41:d2:aa:ee:a5:c1:
         4c:8d:8f:57:39:a9:15:56:cc:03:ff:21:67:be:f0:a3:63:f6:
         fe:4a:b9:5d:e9:45:90:c1:03:ef:4e:27:f2:b2:40:e7:17:ef:
         a3:af:a3:99:0f:c6:a9:53:ec:44:9b:a0:d3:be:18:92:a1:f5:
         27:3b:00:e7:3b:ff:91:e1:48:02:60:ec:3e:ef:ec:10:84:1f:
         2f:41:df:f8:7f:a1:a2:07:8d:6c:25:fe:d0:61:96:88:13:1b:
         ac:58:3b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:23 2025 by rpki-client