Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File:                     rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier:          jsFxFuvH2DXhmn8/anQUy2Q6RnYt8ZJtemmaKrMuCU4=
Subject key identifier:   A6:46:15:B1:5F:76:DA:0D:6C:A3:C4:09:1D:BE:E0:3E:27:D1:73:07
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer:       /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial:       019774F77BB70BAF83E4F9CD2684073471EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number:          06DE
Signing time:             Sun 15 Jun 2025 19:01:05 +0000
Manifest this update:     Sun 15 Jun 2025 19:01:05 +0000
Manifest next update:     Mon 16 Jun 2025 19:01:05 +0000
Files and hashes:         1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=)
                          2: QUH08L51MfImU-aeLB1gViX82cI.roa (hash: YfmDCd25c+HZBRwpm39HGU+G/47jVrQR3XrIyRY2J8U=)
                          3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=)
                          4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: c4P00L1NJYxG22u1lgzLJEqBluLN4VjozAiE0106SMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f7:7b:b7:0b:af:83:e4:f9:cd:26:84:07:34:71:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
        Validity
            Not Before: Jun 15 19:01:05 2025 GMT
            Not After : Jun 16 19:01:05 2025 GMT
        Subject: CN=a64615b15f76da0d6ca3c4091dbee03e27d17307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:97:95:25:97:8e:bb:3c:2e:18:7b:55:ae:
                    8c:c4:d6:c2:c3:95:72:ac:91:c8:7b:e1:11:ab:ae:
                    ce:27:62:bd:a9:2a:8d:df:aa:c4:31:c4:9a:8a:f0:
                    f6:6a:a3:5f:cb:b9:50:2e:f5:ee:2d:58:49:dd:c5:
                    6a:48:94:57:4b:26:65:b7:d7:05:14:1f:fe:8d:86:
                    32:0e:38:ad:6c:b4:5f:78:c6:3d:c2:ff:db:1f:5c:
                    af:cc:80:08:f9:84:0a:7e:55:7a:35:77:64:6c:0e:
                    33:59:b7:6d:56:7f:87:ae:7d:09:dc:62:07:a0:09:
                    26:25:65:ee:8c:d8:6e:7a:12:69:24:21:8e:a8:85:
                    c4:fd:cf:55:c1:b4:54:df:93:84:a1:cf:cb:0a:7f:
                    69:b1:29:7d:ab:1d:41:fa:f6:9a:56:ca:18:b5:e3:
                    f2:c7:5a:43:4e:65:77:49:b1:9f:f3:61:2c:4a:86:
                    01:2b:82:31:b6:f6:53:a7:23:68:59:36:7a:70:c5:
                    ea:c1:66:a3:7d:f0:9b:17:f7:9f:dd:fc:f4:d3:92:
                    fb:40:8c:ee:28:d7:aa:a3:7d:dc:b2:24:78:e1:2b:
                    a9:72:a9:d1:a8:9a:f9:a6:b9:e7:ab:82:02:a2:a6:
                    4e:90:6d:f7:6a:09:44:0b:89:d8:86:8d:9a:fe:87:
                    94:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:46:15:B1:5F:76:DA:0D:6C:A3:C4:09:1D:BE:E0:3E:27:D1:73:07
            X509v3 Authority Key Identifier:
                keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2a:3b:0b:5d:20:1a:6f:c5:6b:b1:8a:21:93:78:1c:de:59:
         50:c4:be:11:b4:9c:45:36:c2:a2:95:ab:69:4f:d2:ec:54:90:
         91:74:b1:2c:12:8c:f3:18:18:a0:b5:c3:90:e2:0f:68:4e:da:
         3e:55:ac:9b:39:7d:1d:e4:75:b3:db:24:df:5c:d8:bc:5c:c5:
         46:a1:97:11:fe:0f:64:a4:db:82:5c:31:a1:7c:57:c3:cb:3f:
         ac:92:15:d1:29:3b:cb:02:48:64:89:64:b3:69:6a:ee:49:32:
         aa:e1:92:f6:58:c5:59:f6:51:e8:45:98:4e:f3:05:b3:9d:6a:
         df:fc:e6:83:ae:ca:e4:1c:19:c4:ce:08:71:e4:b8:ba:b3:77:
         a6:98:96:c7:75:9c:30:db:46:9a:14:b3:ba:cd:72:c9:53:45:
         46:14:11:41:ed:4c:62:26:d5:c7:94:9a:cd:fb:1e:4d:20:9a:
         f8:3c:43:f1:b9:49:f4:7f:d0:be:a7:5d:a1:14:0a:5c:5a:cb:
         d8:18:8a:f1:27:6e:ef:4b:c1:1b:cb:df:1d:3e:8c:f3:d8:b6:
         f8:24:90:79:6b:47:a9:08:23:e9:32:e1:47:d6:7d:99:61:a0:
         27:c7:88:a4:74:aa:e1:91:6e:30:02:93:ff:f3:69:5a:5f:81:
         d5:8e:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:17:55 2025 by rpki-client