Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
File:                     peab2C1ewMe9PV3J-SkC8141ekU.mft (raw, json)
Hash identifier:          Px6lkqKB+XwMbzXeG+618X+ddt7KRre4RNAyUhsd6o4=
Subject key identifier:   70:8D:6F:FF:32:E6:D1:44:C0:D3:1F:59:D6:31:E0:B2:AE:34:3C:F3
Authority key identifier: A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45
Certificate issuer:       /CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45
Certificate serial:       01976DAB6B646CEA591B0554B9F35A470F2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
Manifest number:          12CF
Signing time:             Sat 14 Jun 2025 09:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:40 +0000
Files and hashes:         1: bvafkdXWZnMB_mvjbu-MAxSD4Yo.roa (hash: GpeEOD6j0SJeb7dFldEdJfdSWaMlKEyCXikEQdhGnF0=)
                          2: peab2C1ewMe9PV3J-SkC8141ekU.crl (hash: vrYp5exx/dNM8C9ZT85pVZVq9QzdzzfHT4FWs+X1YXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:6b:64:6c:ea:59:1b:05:54:b9:f3:5a:47:0f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45
        Validity
            Not Before: Jun 14 09:00:40 2025 GMT
            Not After : Jun 15 09:00:40 2025 GMT
        Subject: CN=708d6fff32e6d144c0d31f59d631e0b2ae343cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:dc:19:58:c3:f0:06:7b:95:1c:c2:a7:d4:
                    af:06:15:9f:64:09:16:5a:a4:cd:cb:05:00:4e:fe:
                    c0:e7:d2:3e:26:7d:eb:11:e3:2d:bd:60:6d:a6:e3:
                    91:ec:57:9c:84:38:2e:f1:b7:58:5e:fb:0a:9b:ec:
                    55:8b:93:9b:7b:15:74:22:02:06:0a:5a:72:6b:93:
                    b6:9a:30:37:e1:d2:fe:2a:4a:98:d0:e1:f2:a7:ff:
                    05:0d:1c:81:d8:ac:21:b2:7b:bd:fc:1b:f9:43:fa:
                    6d:27:e3:9b:88:ac:4d:4d:3d:ea:51:fd:a6:65:2f:
                    79:39:41:b4:36:b3:1c:49:59:5a:3b:ab:bc:e4:54:
                    17:dc:d8:d1:d1:b5:23:0c:77:21:c3:da:e2:f2:cb:
                    ab:c0:03:69:41:d6:91:2a:b7:cc:73:df:44:4d:70:
                    37:86:87:dd:a7:db:66:ed:52:41:5d:f9:fc:da:7c:
                    ad:13:6a:1c:ec:d8:54:6e:7d:aa:0c:19:ca:5e:63:
                    7a:6d:c6:c1:b0:8c:7e:79:28:2f:de:10:f6:3e:e1:
                    94:ec:25:f6:10:fa:fe:67:24:44:5d:07:3d:a3:2c:
                    ab:5e:29:b3:2d:ce:64:a2:e1:58:32:fa:0f:4b:35:
                    c7:16:64:70:95:6f:dc:71:16:c5:7d:a6:c0:4e:b0:
                    b5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8D:6F:FF:32:E6:D1:44:C0:D3:1F:59:D6:31:E0:B2:AE:34:3C:F3
            X509v3 Authority Key Identifier:
                keyid:A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:59:c8:07:3b:5d:b0:21:b6:52:e6:67:27:11:21:1d:2f:49:
         74:65:e9:85:ea:02:44:a1:d8:34:90:43:f4:ea:b2:19:8a:c8:
         26:38:9d:d8:3a:31:4f:f4:5c:0b:af:25:be:93:96:50:97:c8:
         f2:cf:2e:4a:36:c1:f2:e7:45:8a:45:78:83:14:49:7c:06:08:
         6e:db:38:a0:5a:ac:8a:1c:ba:f4:d3:1d:7a:cf:3d:4c:5c:bc:
         b2:b8:16:5d:06:d8:12:65:55:07:7c:2f:22:8b:07:ed:79:8e:
         cd:77:ad:ae:2e:08:30:0b:04:f3:f0:12:8e:47:4e:12:04:9d:
         cb:e4:c8:d0:ae:c1:ea:f3:2d:15:c4:55:9b:db:94:8b:33:83:
         24:3a:8f:b5:5c:3c:61:1b:bb:c3:4a:0d:94:f0:b5:26:7b:f1:
         6e:43:53:d7:53:d9:8e:3e:a7:f2:63:cd:eb:46:50:34:fe:82:
         73:0a:0d:b9:81:41:43:fc:13:7b:6a:de:ad:21:4a:5e:b7:91:
         d8:02:b2:cb:1e:9f:91:ff:07:72:39:82:44:19:1c:f4:52:a6:
         7d:39:02:e8:66:5f:21:32:44:6d:65:ff:d3:53:f4:0f:ad:70:
         a6:53:30:34:eb:37:b6:fa:fd:6f:a4:cb:33:2d:5c:1e:6a:a3:
         72:34:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:04:15 2025 by rpki-client