Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          LSZhJIq7LwfwwomweIXo1n3NpNHlmm++9yXRKjlcSok=
Subject key identifier:   53:D0:FD:02:D5:6E:12:E8:A8:BF:B6:41:F9:38:A3:9C:AE:2E:C3:5B
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       0197827BD1568CA0A0F6BA782D424AE794D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          15A2
Signing time:             Wed 18 Jun 2025 10:00:41 +0000
Manifest this update:     Wed 18 Jun 2025 10:00:41 +0000
Manifest next update:     Thu 19 Jun 2025 10:00:41 +0000
Files and hashes:         1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
                          2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
                          3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
                          4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
                          5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: RRlR/hT8jas2pu22/CXxWtatI/TZ1daikxRRsktZosU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:7b:d1:56:8c:a0:a0:f6:ba:78:2d:42:4a:e7:94:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: Jun 18 10:00:41 2025 GMT
            Not After : Jun 19 10:00:41 2025 GMT
        Subject: CN=53d0fd02d56e12e8a8bfb641f938a39cae2ec35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:ff:b8:cc:a0:a3:40:7d:67:df:1c:67:b1:
                    fa:c3:26:23:7b:47:91:bd:b0:08:82:e8:82:15:fb:
                    11:28:96:98:81:f6:c6:ea:6a:d0:68:aa:29:05:43:
                    42:80:85:1e:97:6c:d5:a7:60:72:38:68:71:7a:85:
                    aa:5e:be:c0:31:f9:32:85:60:30:6f:30:7b:64:00:
                    09:18:6f:e0:e9:50:81:b7:d2:30:29:dd:bd:29:b8:
                    36:2d:c0:17:94:95:31:9d:6c:b8:9b:31:95:39:a9:
                    92:83:b6:70:7e:c1:0e:18:6a:88:e1:43:7e:20:9a:
                    a9:7f:bb:98:eb:a3:a6:9b:34:a7:d6:cd:a5:aa:28:
                    4e:be:a5:7e:77:f5:eb:ea:02:6c:4b:da:28:a0:23:
                    b4:1e:a9:d1:28:95:89:35:9d:ce:3d:1a:f6:55:6d:
                    5f:d5:70:68:84:df:da:ae:da:4b:6a:eb:bf:16:e8:
                    70:84:a7:b3:fb:93:d4:7e:8e:58:51:a9:29:ff:6a:
                    51:4e:3d:c7:07:44:35:a7:3c:11:eb:66:70:ca:5b:
                    2f:cb:e5:29:1b:08:0d:c5:21:18:5f:6f:6c:4d:c1:
                    ce:02:cd:82:c1:8d:10:ab:bf:19:9f:c1:ff:09:c2:
                    b7:88:57:29:f5:ee:72:2a:3f:1e:13:ed:85:2f:17:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D0:FD:02:D5:6E:12:E8:A8:BF:B6:41:F9:38:A3:9C:AE:2E:C3:5B
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fd:96:99:2c:05:c9:b4:7c:25:b4:85:76:d8:19:6a:08:3b:
         e6:6c:3c:26:eb:02:0f:7e:7b:3d:1c:73:33:a0:99:e9:65:30:
         16:f5:63:56:ca:aa:e2:6c:cf:a5:c1:b0:f7:a7:ea:98:3d:0f:
         b6:0b:44:11:79:31:f8:3c:a8:2c:6e:7c:4b:8f:d5:df:c5:50:
         22:49:d1:ca:33:e1:b7:33:84:e5:8a:7f:07:d6:18:a5:4f:3b:
         64:34:75:31:ff:a4:9e:b2:03:ca:b1:0b:6d:51:33:8b:a3:ae:
         0f:f9:8b:92:98:d9:96:c7:91:da:f4:5e:1c:d8:02:6b:14:0e:
         c0:b8:be:df:49:4d:50:30:39:d3:94:59:9b:94:76:1e:9a:04:
         e9:4b:c6:c9:b5:cd:d3:a1:dc:1a:c1:12:4b:26:7b:86:b5:ca:
         ec:8a:d1:f0:35:47:a3:44:ff:df:73:98:e9:33:d2:2d:6e:3c:
         ab:67:c4:be:bc:fd:1b:fa:77:d9:e8:c9:81:5a:9d:f7:be:e0:
         91:4c:35:da:f0:4b:77:ef:8a:0e:40:2b:66:d9:f3:dc:d5:ca:
         d7:bf:f7:c6:15:94:ff:5a:1a:3b:a3:53:ce:19:19:f8:4f:31:
         d1:ba:7f:fe:59:d7:67:b1:93:2f:a2:9e:bd:41:01:49:94:33:
         81:c3:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:12:13 2025 by rpki-client