Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
File:                     7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json)
Hash identifier:          0X4n7jdR9yUCcKeA5Fw7wIlMDq2bA6pafnMLfd/oJfM=
Subject key identifier:   9F:9D:F9:AB:1A:98:47:72:CB:3C:70:48:25:01:76:E7:8D:0A:56:89
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Certificate issuer:       /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial:       019774C04E21236CD1179A7E9F51C242F91D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
Manifest number:          15B7
Signing time:             Sun 15 Jun 2025 18:00:49 +0000
Manifest this update:     Sun 15 Jun 2025 18:00:49 +0000
Manifest next update:     Mon 16 Jun 2025 18:00:49 +0000
Files and hashes:         1: 1LHZTYTL7zXSNbURJx33AGGJ_jU.roa (hash: ZCVf+uWinCAj5Wsl4w3DRqhhemyGlUb1mHPRd1We1lA=)
                          2: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: +nOrfuHaaNmRJ97ket6bzQbXPBofQx7rCvJKTvJ3FXc=)
                          3: A8PVa9vWSAwziXQoA3-_9FI8Klw.roa (hash: XOf6bTSMS9ukvYg53bvOoLSXUdGWB4/jS9MgEcYi5I0=)
                          4: BN6LRrFEJAG-6Bzoq3Z1PsUMgj4.roa (hash: EhHoS/FD/TPZMfKWMnkYMzvxXKRlrokVae/pr8W31Fk=)
                          5: DTFLEZbU53RUxpbGCJ7xpH1wiT4.roa (hash: ijyiWI9NCfuTWvoi057x4Mhna5X/5xBxTCKG7ZnDJYo=)
                          6: EhBwV4ETdq9F_mf3TtRo4dLCK7Q.roa (hash: mC580gxvB3KBFmXIOJyzC5FKQdMNmnwwmoA8fTGfjv0=)
                          7: FLkrvqHmD6eBeMa1h2bO_ZNKhg4.roa (hash: /mPez/L0Vr+EoPocb/dhaqkaLues0KokkJJZezW2ow8=)
                          8: MI904WmPdL5oiRhP7S6FeaCAFak.roa (hash: scgaazBwq6y+Oc9C9eGo0W4xwalauzkyjxbQ4wwwgLU=)
                          9: Q3_uNhirqJ7Bk9NtXl3eVrdBCzw.roa (hash: 0/Vyhy1R/OkAOBC9blQ+o7238jYUr5Pu0HfZsEBCqFA=)
                          10: UyrMzGs9rPlg2w22xhZaflhqCSI.roa (hash: VVafToezEHmO/7jzPhoKttwPuHVR2eMhKCRXr0uAfdY=)
                          11: beAFyhqFvuFjdXVUNjFjACkebr4.roa (hash: c4PQ30y59KAo6fg6oopq6KruOFK1py7waXQnLyMtf+A=)
                          12: dZy1uZbY_Aos8S6Eseo9aRlBjgk.roa (hash: EC7IY47xBAWr3k7hTs+1NK5U2ipaAGq2Sy+LIMFTR20=)
                          13: kl36awhzfsop7GgELsEJo3vTqlM.roa (hash: i1Y1Q4V1qiBLr3d5jT6i7TzoPO+NTihTUU++FBZ5ox8=)
                          14: lao8bHeqDQtESMGOKFSeFdxwj-s.roa (hash: elImsTbe0o9ywVCBRni5u407KloMMvHe03FwOzsl4Y8=)
                          15: ldV5QoFFgAFCUEkClvetJ__hiXo.roa (hash: YNShms8o2Swyug0J9NOykCOYm2Nd9cAvalBds6vNvaE=)
                          16: pZSrV2l3WhVw5oetxkzKTuFut08.roa (hash: OVPrfbWkq15CVQU+AkW9e1dfy6vyOgMcPm5QJ7yajMY=)
                          17: qRvHhsUzZRo3GIbvVdtrbB33RHM.roa (hash: I0ja9Wkg3NaDCO4/Iu1ewOYHJdhLcuLZy6a2WJD503M=)
                          18: s0Jjixe7gcnzh8oekfL-6zeUy5Q.roa (hash: TIYNz1LcI70+SJrW3UzaV1tb56c2tS4JWFrmk3Zw1oo=)
                          19: t18vpttXogOnxguJ7pGpoYLrk2Y.roa (hash: w64HKCyG1jpJ4LOOvXrj2J1OE37lFLFqT6Q1/gy6SUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:c0:4e:21:23:6c:d1:17:9a:7e:9f:51:c2:42:f9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
        Validity
            Not Before: Jun 15 18:00:49 2025 GMT
            Not After : Jun 16 18:00:49 2025 GMT
        Subject: CN=9f9df9ab1a984772cb3c7048250176e78d0a5689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2c:65:73:53:9f:e6:c2:f5:f8:66:ac:b5:84:
                    88:be:af:86:8c:92:c5:bd:02:5d:fc:b4:d0:a4:c3:
                    43:11:f2:50:76:34:42:5b:de:2f:9a:93:99:33:a4:
                    5c:c6:2e:c9:19:46:64:b7:44:16:e5:6e:01:c0:13:
                    98:db:80:14:63:dd:51:85:e2:ba:9c:e6:5e:fb:a2:
                    eb:d0:ea:bf:d3:0d:fb:05:a5:8a:00:70:4a:76:d4:
                    60:3f:64:72:44:f9:cc:22:3c:57:07:07:43:04:67:
                    21:36:5f:70:3d:40:e1:90:70:81:03:7b:9d:53:8c:
                    ba:5b:d7:3c:5f:80:66:56:ec:11:22:b6:02:54:ba:
                    99:08:58:3f:65:de:00:91:9d:b3:4a:72:19:34:2f:
                    8b:ce:ae:38:4f:9b:24:f8:d5:a4:99:eb:db:88:7b:
                    e3:0f:92:9f:98:ed:8a:37:15:28:45:4c:c1:87:ea:
                    7b:c7:2f:6f:75:b6:ad:0b:1c:ca:e4:c1:b4:aa:e9:
                    dd:45:0b:52:03:36:4d:e5:ea:d5:be:45:a2:82:36:
                    93:ce:9f:f9:a7:b5:72:df:e4:aa:21:fd:64:27:39:
                    d3:bd:aa:d3:cc:c1:bf:fb:e4:fd:d0:52:2a:9c:95:
                    f2:a3:43:5c:74:e6:ee:cc:86:e5:f3:e5:0e:c0:71:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9D:F9:AB:1A:98:47:72:CB:3C:70:48:25:01:76:E7:8D:0A:56:89
            X509v3 Authority Key Identifier:
                keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:e0:52:0d:f1:9f:ac:b8:5d:56:1a:57:f6:00:70:f6:35:
         5a:b4:38:65:ea:b3:1e:97:61:8d:7a:3d:74:ae:1e:de:b3:01:
         45:27:a2:18:aa:8e:d0:80:48:b5:ae:54:d6:7f:7c:61:48:59:
         ca:07:9e:48:81:4d:78:2d:7d:00:58:0c:2c:a1:08:1f:86:28:
         5a:f4:a1:db:d5:ca:0d:5c:6d:84:87:b3:dd:76:48:db:f5:5e:
         35:cf:a5:13:c4:d4:cd:b8:19:fb:6a:cd:b7:bd:19:db:6a:ce:
         06:fc:20:c1:3a:ce:cb:32:22:6a:79:5f:40:e2:0a:28:9a:f3:
         d5:a5:2e:bc:fe:1e:01:39:e1:d3:c1:60:58:50:b1:52:10:37:
         43:68:15:7d:63:0c:bd:7f:0e:40:ee:6d:34:c1:d5:b2:d4:96:
         e3:4a:53:ec:8b:ab:40:89:9c:b6:f6:45:73:6a:6a:29:ab:29:
         b2:11:af:cf:07:23:0b:c9:37:26:60:19:d5:b7:ae:4a:44:b3:
         ef:ad:cc:e5:ff:a8:59:66:72:5c:51:42:f6:09:16:95:fb:de:
         78:2c:c8:d3:6a:1c:2b:7d:09:eb:5c:62:f2:b9:5b:78:cd:27:
         58:21:11:2a:b6:3f:72:a3:92:1a:8f:8a:7f:c1:69:fc:54:64:
         52:8b:3a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:08:50 2025 by rpki-client