Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
File:                     iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json)
Hash identifier:          BH0VbH5Lz4dXfqd8xtudEfYt+JkXZwsbx4WpZfw2mK0=
Subject key identifier:   BD:FC:EA:0C:92:96:FE:19:F2:76:CA:01:AE:C1:20:70:28:FD:34:71
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Certificate issuer:       /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial:       01976C2AA3405543177015AD2DA6D2D0D905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
Manifest number:          03C1
Signing time:             Sat 14 Jun 2025 02:00:22 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:22 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:22 +0000
Files and hashes:         1: 4ttxHqG59duZ5ALfvPB_x9iVGCs.roa (hash: fJvQbvQakJgNuM3dzhqnbPVFRMsvp98NzyW7hIi8pio=)
                          2: NhicUss_-kBiNIFBTBFdbugxZaU.roa (hash: x3eOaLcQnmMrFRkUTb/8DthAE9edvP0YO/DPYux9zTE=)
                          3: UZiFFztRfeKmfRhqu-DMXiBHSwY.roa (hash: LxeETqbIhKu+XVMzaqPP2mnLDNqdpGhRBtoYHWGJNkY=)
                          4: WDn1mbHRkiQwKXkGzlfqrEUF0Pw.roa (hash: L1bh3lJQlQbB+0euiek2LnVAf5GTLk4lwBwlyM5cRJ0=)
                          5: eeMUvhikn7BcQGcUG3J_KumqmI0.roa (hash: rMyPtHGXVd59N7ATnOyDSnVnrrZL6fZtXGf2fhRBUW8=)
                          6: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: BYe3ADyLqXK/YtmAnmN9OQWzU0NX3sZjqnHph/sTnxs=)
                          7: yHRWciFFOnDT7mIADGdvOTHOJRI.roa (hash: OaAq5TmHl/2ctslO8/QJcZi4nuJ1WFnqWLqN1q7rq1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:a3:40:55:43:17:70:15:ad:2d:a6:d2:d0:d9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
        Validity
            Not Before: Jun 14 02:00:22 2025 GMT
            Not After : Jun 15 02:00:22 2025 GMT
        Subject: CN=bdfcea0c9296fe19f276ca01aec1207028fd3471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e5:8e:1a:92:f9:d3:ea:d7:d5:43:d7:6f:ac:
                    fc:c2:10:51:93:dd:b6:32:8e:10:3f:6a:14:81:68:
                    da:38:10:40:06:31:d1:43:f1:43:29:4a:35:9b:2a:
                    60:43:3a:4c:46:43:a6:5e:56:43:1a:7e:e1:52:2c:
                    49:31:4a:2d:d5:0d:cf:da:21:f4:d1:1a:a6:b7:d8:
                    28:c7:b3:dd:2d:03:46:9e:aa:04:70:73:29:33:cd:
                    f7:29:6f:3e:5f:17:b2:43:5a:d6:ec:08:d4:57:bf:
                    e7:14:d3:c0:8a:46:94:9a:e9:8b:a2:d2:f3:f6:3b:
                    b6:83:e4:c0:c0:00:7f:8e:a0:67:ea:d4:6c:2b:4d:
                    b5:b6:b2:99:5f:17:02:c1:ce:43:07:95:18:b4:f0:
                    a8:08:41:6b:93:ac:78:81:99:42:c0:43:a7:9e:11:
                    86:32:a4:d6:fd:e5:aa:28:85:79:66:46:ab:59:43:
                    d2:cd:52:9b:89:8c:cb:b5:5e:5d:27:7c:13:cd:a6:
                    a4:d6:bf:9e:d1:06:88:9b:ed:da:bf:ee:9e:35:42:
                    f3:c9:d9:9c:29:b0:26:30:99:87:85:34:bc:6b:ee:
                    73:8c:40:84:24:1a:f3:05:8b:89:b7:78:2e:3a:0d:
                    ac:e7:41:6f:9c:2f:4e:e9:fb:ed:45:e6:d0:43:62:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FC:EA:0C:92:96:FE:19:F2:76:CA:01:AE:C1:20:70:28:FD:34:71
            X509v3 Authority Key Identifier:
                keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:39:67:53:f9:ca:cf:78:52:5c:5a:f2:92:cb:bb:79:46:16:
         61:0b:f0:96:42:6b:90:76:d9:12:e4:93:cb:7c:cd:7d:f5:f8:
         6e:8c:ef:1c:22:d4:9e:c1:9e:8b:cc:02:15:f9:ed:64:05:90:
         82:07:56:5a:ca:4d:9d:9f:d5:3a:bf:2e:d0:91:2c:32:2a:2b:
         ad:65:cb:6e:1e:cd:81:eb:71:9d:54:b7:e2:44:74:d1:75:ca:
         de:a8:e1:a2:28:26:76:58:7a:f2:fa:28:fb:e1:39:d3:94:62:
         95:93:35:27:c1:4e:f3:89:f1:fd:df:ce:ed:da:06:07:a6:ba:
         3b:4a:06:69:4b:3b:f7:98:d9:89:bf:71:29:10:49:b5:df:3c:
         50:29:45:14:8b:47:64:61:81:ef:9b:97:b4:88:d3:3a:ec:74:
         76:13:a8:2d:49:79:05:22:d0:cc:fa:d9:c2:fa:cd:53:c2:4a:
         5f:65:bc:97:61:db:ef:85:45:61:5a:29:64:63:2f:80:3f:95:
         42:99:d2:1c:18:8d:c3:c8:6c:f7:78:c4:9f:ea:73:5d:e5:01:
         eb:a5:10:ca:4e:04:9a:3d:ad:4d:67:b1:0b:95:af:fd:a1:07:
         26:7e:6c:67:b6:41:98:44:3f:5f:ab:50:48:82:c0:7a:ff:c7:
         c4:d7:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:42 2025 by rpki-client