Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File:                     vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier:          bONBxG9gJiRlTxbQ8uReeBgs7mLDqDt60MEwJ5oqdL0=
Subject key identifier:   DB:68:4A:07:E6:21:61:D4:3D:16:88:5F:EB:C5:0C:5A:5E:06:5B:6F
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer:       /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial:       0197718852E23A88EC9F716F6395DAA13A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number:          0C59
Signing time:             Sun 15 Jun 2025 03:00:48 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:48 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:48 +0000
Files and hashes:         1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=)
                          2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: Ot76nRljsy1TFE0Kd19sYm27ImwLLwlECD3BPOdmZrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:52:e2:3a:88:ec:9f:71:6f:63:95:da:a1:3a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
        Validity
            Not Before: Jun 15 03:00:48 2025 GMT
            Not After : Jun 16 03:00:48 2025 GMT
        Subject: CN=db684a07e62161d43d16885febc50c5a5e065b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:15:1e:05:0b:d1:52:01:c3:19:a5:48:12:2b:
                    8d:fc:4b:8f:3f:d1:9f:d3:87:19:4b:e1:e0:c5:3f:
                    89:96:8a:64:6c:82:de:2a:cd:3b:28:8c:39:c0:14:
                    1f:66:c7:96:b8:b9:3e:a2:eb:99:e7:ba:42:fb:d4:
                    13:f1:07:74:e1:5c:94:f3:35:be:e2:29:f9:17:6b:
                    59:29:4a:7c:ea:7b:cd:18:36:8c:b4:a7:31:68:d6:
                    5c:03:31:a9:f1:6c:4f:e5:68:3e:21:19:8e:14:cc:
                    1b:46:f1:23:cd:f6:5c:00:9d:a7:e5:f6:0c:ea:d2:
                    a3:40:6b:ed:9d:68:d8:a4:03:58:68:03:74:25:f3:
                    6e:26:a7:ca:a9:69:be:5c:e1:b1:01:77:a5:93:90:
                    90:8a:d2:8a:cf:dd:ea:1c:b8:a5:83:69:ac:ff:34:
                    f5:5e:7a:2d:52:27:e2:51:0b:1e:d3:3d:20:15:7f:
                    bc:7a:e4:cf:1e:25:1f:42:f0:ef:d8:b5:3f:56:9d:
                    77:4e:11:92:2f:eb:f5:37:a1:91:2c:47:e8:5f:43:
                    f6:30:ef:d5:a7:65:e5:1d:73:97:a5:2d:ce:56:6a:
                    4b:36:e3:ac:18:92:86:59:13:43:e1:c6:84:fd:5e:
                    34:53:34:6e:e0:8a:d9:ad:0b:a6:cd:0c:88:74:28:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:68:4A:07:E6:21:61:D4:3D:16:88:5F:EB:C5:0C:5A:5E:06:5B:6F
            X509v3 Authority Key Identifier:
                keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:38:ea:9b:e0:58:27:c6:78:55:2f:28:e9:e5:77:23:a2:49:
         93:92:4e:65:25:13:12:0c:df:89:43:6b:25:6a:34:d9:0d:2b:
         9d:b5:3b:4e:d4:c0:9f:ea:a7:ee:77:c4:fa:04:6b:e1:61:fb:
         b3:93:a1:8d:3f:23:3f:13:37:0b:e8:5b:1c:83:58:ab:cb:61:
         89:64:56:49:95:c7:e0:29:55:27:71:6a:0a:3b:c9:6c:6a:6b:
         27:e0:5e:34:81:6a:e9:87:85:b3:23:47:11:3e:03:d3:0f:65:
         88:e2:ae:ff:47:e7:fc:09:fd:a4:a3:f2:9e:26:50:76:51:7b:
         e5:a9:01:42:49:3a:fa:86:be:2b:d2:65:fd:5f:ea:44:4f:bb:
         3d:52:50:fd:6a:2c:4b:02:a8:5d:77:fd:c8:2b:b9:81:a6:bb:
         57:44:5a:56:54:1b:fa:30:b0:fd:13:82:3e:d4:76:a2:26:3c:
         70:e6:4e:ec:a3:08:18:3f:cd:a4:e9:eb:05:24:58:71:74:b8:
         3c:9f:97:72:d4:e1:96:67:a9:53:3a:ca:c5:9c:81:d6:90:6b:
         d3:02:b5:b8:e0:0d:56:00:a0:d5:a3:b5:69:51:e9:3b:c7:8f:
         6a:34:6d:9a:bb:93:45:63:01:e0:7d:e8:e1:6a:09:26:d3:de:
         1b:f0:8f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:35 2025 by rpki-client