Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File:                     ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier:          +PB6v7reurkQ+SssOWPXafQmtjU10mzpx3JtmlQjg1U=
Subject key identifier:   9B:94:93:F4:66:3A:0E:78:76:C9:BC:0A:7E:5F:65:08:24:74:4C:26
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer:       /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial:       0197857D129B813117CB15B176A9556895B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number:          0839
Signing time:             Thu 19 Jun 2025 00:00:55 +0000
Manifest this update:     Thu 19 Jun 2025 00:00:55 +0000
Manifest next update:     Fri 20 Jun 2025 00:00:55 +0000
Files and hashes:         1: 4HntnwbwwM5vMcJuIab-USv0aos.roa (hash: D4Y8oo/1p1CfNZ78xGazKWpJcNpM6vsLdZIWby5+wsA=)
                          2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: DA4HWu0uGNQa9u0WT331s0rfxY+FCYktf9M0fGbUekE=)
                          3: xqQfiVZ1kttrOCR7xRSiCiiX2fY.roa (hash: 9+bsofjuuct5WmR8AYlK+fsU9sOrJTXhdDVACpV84ik=)
                          4: z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa (hash: DdTxEazjHwj9S4/2pF5uXHejE6sdQfki7PScehxeU80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:85:7d:12:9b:81:31:17:cb:15:b1:76:a9:55:68:95:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
        Validity
            Not Before: Jun 19 00:00:55 2025 GMT
            Not After : Jun 20 00:00:55 2025 GMT
        Subject: CN=9b9493f4663a0e7876c9bc0a7e5f650824744c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:d8:cb:b4:7a:03:06:7b:03:18:08:c8:17:
                    38:7b:d4:f5:dc:7d:c6:cb:6e:4a:6c:fb:49:c0:84:
                    ed:79:93:f4:fb:5d:c8:48:ac:46:7d:57:3f:aa:80:
                    0f:84:46:5b:f7:2a:87:7d:d3:ad:96:4c:21:2a:ee:
                    26:ad:80:0f:ec:19:0b:3b:d7:30:18:46:e5:4b:0b:
                    ac:d4:88:ae:1f:6c:5c:97:ea:6c:f0:ba:5c:0c:4a:
                    1f:f0:83:42:8c:87:32:c8:f3:0f:98:cb:2f:91:43:
                    10:ed:68:88:2c:e4:a8:45:0d:74:05:15:26:1d:ab:
                    ab:f4:4e:17:f7:b6:05:5c:cc:d8:f0:4f:de:03:c6:
                    08:b9:89:b0:20:ef:91:96:e7:5a:c2:38:54:8b:06:
                    a1:51:32:a6:12:e6:14:d9:0b:7f:6b:8d:8a:13:09:
                    b3:22:de:a1:cd:fc:fc:a4:16:2c:b4:07:be:ba:4c:
                    41:63:cd:f2:64:9c:62:ce:f1:69:21:88:e5:01:02:
                    3b:8c:5b:bb:ae:92:39:d5:2b:03:89:43:bb:b8:64:
                    6a:6c:bd:91:0f:03:03:94:6b:76:9f:88:2c:ef:a8:
                    8e:27:2c:29:5e:1f:17:89:f7:41:04:6b:3b:c7:1d:
                    53:ec:33:a4:3c:0a:0e:56:66:87:fc:98:e9:f3:19:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:94:93:F4:66:3A:0E:78:76:C9:BC:0A:7E:5F:65:08:24:74:4C:26
            X509v3 Authority Key Identifier:
                keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f6:be:2a:f2:8f:f9:2c:ab:fe:cf:25:46:0a:8a:96:10:fc:
         65:7a:e8:e4:83:73:da:c3:c8:1f:59:cc:a1:bd:ad:cc:f7:54:
         ab:1a:9d:f4:69:dd:4e:78:26:11:ea:01:42:b0:f1:5e:62:a1:
         41:7b:10:90:59:a6:11:b4:fa:ad:6c:36:57:b9:2f:28:3f:4f:
         00:77:50:e0:d3:55:21:a5:f8:d4:1e:c3:77:fd:9b:43:59:b5:
         d0:4f:04:4e:8e:77:5c:4f:bc:8c:2b:c8:ff:3d:f7:08:c0:76:
         d7:eb:73:61:6e:65:93:95:c0:77:b3:ea:7b:8c:e5:9a:6d:b9:
         87:50:5e:63:20:77:08:0d:98:2f:50:94:a6:5c:36:9e:4b:6c:
         92:dc:37:4c:4e:97:38:2c:9e:16:40:92:5d:84:5f:59:c0:dd:
         83:28:11:43:b2:86:20:df:f0:c7:95:5d:5e:4e:59:2c:12:16:
         6d:0e:24:6b:99:8c:6b:49:f1:da:5f:2e:9b:af:07:9c:27:6a:
         63:b9:47:6b:5d:57:2f:44:07:27:d3:df:29:90:92:a3:7a:28:
         e4:f2:69:16:3c:e2:6e:47:43:01:97:db:0b:38:4f:1a:7c:e2:
         1d:35:f7:c2:12:4b:d5:2d:c8:d0:17:0b:af:7d:ed:b3:8f:cf:
         3d:17:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:25:55 2025 by rpki-client