Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File:                     m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier:          df4ctuXIQMXu6jZbPGws4oqSj9cHK/Fpp4ssHTveBXE=
Subject key identifier:   0B:CE:0C:C1:EA:F7:6B:2F:49:1C:63:69:ED:C1:8F:75:D5:26:40:11
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer:       /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial:       01976D3D73F157F77476788AD5C9D973A955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number:          1521
Signing time:             Sat 14 Jun 2025 07:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:33 +0000
Files and hashes:         1: kf3kJU5iO7T2BjxJ8agaP22As0g.roa (hash: 6biDLkp/WSQoW2uWUpFKCh5FtwQ9kjocP16pC2UTYzg=)
                          2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: xaWACNRWJHBflif6SxP+LZuW1HvGb1DvVWAAsxZW3gE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:73:f1:57:f7:74:76:78:8a:d5:c9:d9:73:a9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
        Validity
            Not Before: Jun 14 07:00:33 2025 GMT
            Not After : Jun 15 07:00:33 2025 GMT
        Subject: CN=0bce0cc1eaf76b2f491c6369edc18f75d5264011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:22:9c:20:77:a5:07:75:70:57:0c:9f:c1:
                    fb:2e:58:a8:21:e6:29:cf:78:69:52:c8:8b:c2:00:
                    a7:12:f5:6e:67:34:8e:4b:b6:d7:88:29:ab:b6:7a:
                    23:f7:d2:1e:ec:53:a7:4e:32:4e:85:a1:a6:dd:d2:
                    71:50:e5:60:33:7c:dc:7f:6a:ca:c8:fe:59:48:ad:
                    e4:e0:c1:c0:75:8f:1d:0f:5e:6a:11:04:51:11:5c:
                    a7:66:12:0d:f8:c0:71:04:ec:04:1c:00:43:a3:fa:
                    c0:03:9b:03:36:1c:95:f9:c7:ea:8e:a5:6e:b5:90:
                    4d:3a:bd:21:63:e0:a2:a1:52:43:f2:1f:15:94:7f:
                    11:1c:1b:b0:9d:8a:88:c9:f2:41:83:c7:74:83:15:
                    f6:9b:a0:79:8f:57:d5:7d:37:9c:cf:a4:27:ad:c4:
                    c5:8d:ce:f5:24:85:0f:85:5f:b7:15:67:7c:a2:1c:
                    45:70:5c:e5:a7:b7:03:c8:ed:b7:d9:31:81:c5:ed:
                    72:22:9b:a8:77:2a:bd:15:4a:c7:5d:81:a2:d8:92:
                    6d:2a:d5:b5:37:f8:a6:90:fa:e1:a1:d5:05:07:f4:
                    7d:86:d5:2a:7c:db:4e:ae:49:bb:07:e2:57:6c:b3:
                    d7:c7:a5:87:fd:00:b6:77:26:b0:03:4d:f9:be:15:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CE:0C:C1:EA:F7:6B:2F:49:1C:63:69:ED:C1:8F:75:D5:26:40:11
            X509v3 Authority Key Identifier:
                keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e5:a0:94:ac:74:3f:8b:b2:cb:a8:b6:ed:54:0e:14:12:51:
         7c:30:1a:0a:57:80:86:b1:db:d5:a4:28:c4:ba:aa:04:5d:1b:
         9d:d7:65:ef:57:bf:b6:a5:d1:92:5d:42:0b:75:7b:45:92:4e:
         fc:c4:0b:13:47:1b:9e:fb:e3:b4:55:a5:3a:0f:72:13:0f:f8:
         9c:91:fe:df:f2:d6:d1:7f:e0:e3:46:46:52:f0:3d:b2:11:57:
         1e:ce:f7:73:12:7b:db:e1:90:69:15:21:ab:78:70:85:d5:c9:
         e6:b6:c5:bd:8a:c9:09:65:c4:47:05:ca:13:56:03:19:ff:a6:
         85:53:ec:95:02:66:c3:f8:2b:23:df:0f:84:7d:de:a9:ac:6c:
         1e:81:43:16:09:5f:f6:ef:35:8f:11:6a:19:ab:db:01:16:9f:
         06:1d:29:29:df:ce:da:b3:ce:6d:97:7b:e4:a3:7e:8e:8a:3c:
         b1:65:0d:14:ef:b2:e1:f8:b0:d5:d4:54:1b:b7:85:86:6f:01:
         e1:02:57:b4:37:f8:c4:a4:19:8c:65:2a:ff:90:3f:6e:96:f4:
         22:6d:7d:76:35:f9:33:e9:5f:6b:38:6d:ef:17:b4:b7:3c:65:
         6b:f7:1d:2f:75:b5:d3:70:84:0a:21:21:2f:25:44:5e:f3:0c:
         da:cc:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:08 2025 by rpki-client