Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File:                     CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier:          WYymkxZgFi3ysCanKQRzuaVyTrNRQzwgpFtiun4EkSg=
Subject key identifier:   8C:3D:6A:21:00:A4:2A:AC:FA:F3:BD:0F:A3:6E:31:5A:AF:82:E9:76
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer:       /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial:       01976D065ED39BF4A3E6269D0CC69B6EE566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number:          063E
Signing time:             Sat 14 Jun 2025 06:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:23 +0000
Files and hashes:         1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: Ut4s1xJ+ZI/jrU/zHN3okX4893cVvnauiOwKGDJ9I7Y=)
                          2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:5e:d3:9b:f4:a3:e6:26:9d:0c:c6:9b:6e:e5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
        Validity
            Not Before: Jun 14 06:00:23 2025 GMT
            Not After : Jun 15 06:00:23 2025 GMT
        Subject: CN=8c3d6a2100a42aacfaf3bd0fa36e315aaf82e976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:33:e5:42:81:19:c6:fa:3b:aa:f4:b8:16:
                    09:86:72:04:73:3b:ac:ad:24:be:56:a8:36:4a:1f:
                    9a:e9:24:c4:58:18:cc:c1:a5:92:2b:56:7d:8d:da:
                    19:83:24:4e:ad:5b:30:1f:4d:f4:52:5d:82:a7:50:
                    24:65:4c:e7:8e:cf:8f:1e:53:27:02:57:f3:e4:12:
                    76:d6:c1:fd:61:ae:59:ea:dc:f7:56:da:d7:3c:86:
                    2a:c5:a5:a8:3a:b8:d5:b3:dc:54:2d:99:e0:2e:61:
                    9d:2e:94:c8:0e:15:9a:73:fd:ce:9a:4b:63:b4:da:
                    25:ff:fd:36:12:18:65:e2:54:a3:64:88:7b:53:11:
                    a7:94:37:e1:9d:60:83:e7:63:bc:29:1b:6b:9f:cf:
                    b3:12:f3:d3:6f:93:b2:cf:bd:6d:12:7d:bf:7b:d5:
                    aa:5b:22:76:0b:06:b5:f7:43:14:f0:19:34:3e:3f:
                    84:f4:9d:59:45:9d:15:5e:d9:3e:98:ff:e9:d5:17:
                    27:c2:7f:1f:c4:80:25:cc:45:69:2d:85:51:4f:1f:
                    25:31:c5:cf:8c:b3:9f:42:29:ea:1f:d9:bb:93:aa:
                    14:0a:27:0c:76:16:2e:2d:4f:b1:f5:0c:0b:28:dc:
                    f1:52:5c:e2:8a:86:de:14:8b:95:38:11:5c:15:c6:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3D:6A:21:00:A4:2A:AC:FA:F3:BD:0F:A3:6E:31:5A:AF:82:E9:76
            X509v3 Authority Key Identifier:
                keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7b:78:f3:b4:d9:b8:23:55:79:bb:ab:17:05:ca:89:28:42:
         77:7b:92:49:4d:e1:4f:91:c5:4c:58:71:95:dc:8d:96:a8:25:
         db:42:e7:a6:5c:c3:90:09:48:bd:fb:33:b7:56:f5:9c:01:09:
         88:8f:41:db:04:a6:01:77:c5:2b:34:f2:2c:8e:a7:0c:a4:e2:
         29:22:b7:ce:68:31:c7:55:fb:25:16:f1:7f:9e:ac:7d:bc:af:
         1b:47:1d:69:8c:26:09:6c:ad:0c:43:9a:4e:0f:82:05:82:d1:
         0e:a8:a2:4e:6b:64:72:ae:7f:d9:4d:7f:ed:6c:4d:0d:e9:0e:
         23:44:4c:52:9a:a4:64:75:f9:70:11:aa:40:12:bc:8e:9a:23:
         b1:50:20:a0:c4:ea:34:b0:b1:54:ea:db:e7:6d:dc:32:e8:06:
         2a:04:22:d1:4c:20:49:b5:2b:0f:9b:3c:85:aa:57:64:50:0f:
         d8:95:c6:ac:3d:5c:85:5e:0e:29:4b:c7:f1:05:d4:65:70:fc:
         7b:10:b9:8e:ae:3e:57:de:6e:29:84:f2:30:ff:4a:40:5b:09:
         7e:19:18:f6:1b:a0:27:78:9b:99:66:e0:33:82:6f:1d:9d:d8:
         bd:2d:cf:6a:2f:58:6d:38:3f:da:f6:58:36:c0:e1:a4:77:d8:
         47:f6:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:07 2025 by rpki-client