Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          II5CmRm8+WmvtppkJjmM9kPih8Ns0evnJfAorZqyRHU=
Subject key identifier:   BF:63:71:75:E3:0E:BA:F5:E1:32:0B:4D:4F:C9:70:78:EA:6D:72:02
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       01976D3DA80A2869001942679505209A74FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 07:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:46 +0000
Files and hashes:         1: 5qz81vMuyN5eYJ6zyRRelyT4XK0.roa (hash: 0LizoQ7sooXP56qjV8fYtL2cZDWoYFEUv70QcevbSss=)
                          2: Oo8Lhh4RlCa7xttIyBwx5LDEUoc.roa (hash: wrOx7qjHfGVS+J5guJXeAV7Who7QhhesA0WvqwwUSt0=)
                          3: bred8jKnNPms1BCagsD8kMQFkWQ.roa (hash: VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=)
                          4: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: rKq6U05rhsYf1QYv5MtkFN7OCLi7U/ZZaYGfqHYGVZ4=)
                          5: orjkFnmOp2fkt5BOjfHTUe1SFM8.roa (hash: VR0THqWhrxUSaUWx/H66JHdMtnv+5/NgmHEPJq0RqoM=)
                          6: vHN5MXtzccXdspQhStY4Z57CoPM.roa (hash: 4HXRwfo/a7HGgHSGpok7A4ldu5noCeEQDTLX8aICufE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:a8:0a:28:69:00:19:42:67:95:05:20:9a:74:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Jun 14 07:00:46 2025 GMT
            Not After : Jun 15 07:00:46 2025 GMT
        Subject: CN=bf637175e30ebaf5e1320b4d4fc97078ea6d7202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7a:4c:0e:5c:2c:e6:7d:59:86:54:a6:43:ab:
                    67:c3:74:6e:57:04:d1:e5:e3:9d:6d:0d:c8:38:ce:
                    43:6e:21:b4:e3:8a:3f:6f:ba:12:14:36:8c:28:46:
                    e3:8f:00:d9:f8:a0:9c:5d:b3:4b:30:00:a4:a0:ca:
                    9d:2a:ba:65:eb:e2:5b:8f:3d:95:3a:35:1a:c1:a9:
                    b9:eb:f5:de:94:a4:20:b8:e4:73:72:99:9c:2c:87:
                    cf:1f:b9:79:cc:a9:b6:f1:38:1b:bf:1f:e3:e1:af:
                    99:1c:9b:b2:ac:df:3f:5e:ce:5a:c4:f7:81:d9:ca:
                    f3:54:31:ba:f0:6b:5b:dc:fc:16:19:10:40:0d:ea:
                    62:de:4f:32:b8:09:a8:79:29:0f:0b:89:5f:4b:6c:
                    df:77:19:0d:94:7a:1a:ce:93:24:a2:dd:41:28:e5:
                    5c:b4:c3:6f:66:92:be:b7:a9:dd:64:69:26:51:fe:
                    07:93:2c:f6:62:68:db:a3:52:ca:35:63:5a:c0:3f:
                    fd:37:5c:20:8f:15:db:0f:66:d0:6c:2a:c8:5a:a0:
                    8b:69:07:d8:08:e2:25:a7:fb:73:20:55:b9:90:ba:
                    3a:14:46:93:d5:f8:70:53:03:d7:77:78:1b:30:0f:
                    c7:a7:de:75:7d:66:8c:71:58:45:50:cd:ee:f4:47:
                    68:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:63:71:75:E3:0E:BA:F5:E1:32:0B:4D:4F:C9:70:78:EA:6D:72:02
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:da:5a:82:2f:96:c3:dc:9d:60:15:a0:f7:75:c8:6d:b5:f9:
         1b:ca:88:ef:b6:61:79:84:cb:ea:b6:85:e0:d6:d8:46:42:02:
         03:7a:e3:a5:b9:05:2c:a8:c3:cf:f2:3d:fe:da:78:8f:30:3c:
         f9:1f:28:19:56:96:7b:8c:fe:00:9d:3c:9d:33:77:83:91:bc:
         55:cd:a9:be:49:6e:10:4e:a6:96:c4:19:80:00:c3:10:a4:31:
         fd:13:ce:e6:57:76:09:c5:0d:0d:08:65:da:28:ad:d6:88:ae:
         98:25:de:1b:6b:ac:73:b1:b2:8b:43:fe:b9:e8:c9:80:16:c6:
         a1:9c:d0:bd:15:24:a6:2b:2d:a1:ce:17:52:31:ba:a0:7a:df:
         9c:d1:c8:cf:af:26:4f:75:87:5d:4b:71:da:80:45:3a:6f:91:
         10:3c:93:05:0a:8e:ce:2f:75:aa:6a:bd:82:58:98:5b:84:af:
         46:e8:4a:22:cd:1b:9c:56:97:e0:6e:2d:ec:89:1e:73:12:6a:
         0d:30:c3:b4:4d:db:36:79:d5:18:96:57:e3:9c:58:68:62:5d:
         fd:03:4d:72:39:05:99:9c:ff:05:91:bf:bc:0f:b8:82:87:2d:
         a9:ee:4c:0d:d7:48:ad:fb:07:67:84:5c:f5:44:38:ea:52:d6:
         41:54:c7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:32 2025 by rpki-client