Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
File:                     sVS0YRuM6ChydbxHppr6N4tBQL8.mft (raw, json)
Hash identifier:          R5OdP30ghJge2WLKB8VDByE00uY5db9erxpmOBlK7yg=
Subject key identifier:   C6:60:8F:D9:4F:01:3A:B4:A6:DA:A4:6A:E6:99:B9:92:64:C8:59:B5
Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Certificate issuer:       /CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Certificate serial:       01976997B4309D75CCA4031A64F02DF8352B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
Manifest number:          020F
Signing time:             Fri 13 Jun 2025 14:00:38 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:38 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:38 +0000
Files and hashes:         1: _cD4yVpG6lnwIeREBiUBwAEeAKA.roa (hash: jnUyAI5YI7WapRKSFkmTN6SUzj6iHT0vp3PMP0QrWlQ=)
                          2: sVS0YRuM6ChydbxHppr6N4tBQL8.crl (hash: 0Rra1QE3yAAUuTQ0+eBG75GwUghCvKEyE2LD/nDcIWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:b4:30:9d:75:cc:a4:03:1a:64:f0:2d:f8:35:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
        Validity
            Not Before: Jun 13 14:00:38 2025 GMT
            Not After : Jun 14 14:00:38 2025 GMT
        Subject: CN=c6608fd94f013ab4a6daa46ae699b99264c859b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:aa:dd:e7:c0:ce:42:40:4e:8d:fe:ba:1d:66:
                    df:7a:10:ee:0b:8a:58:69:8e:0e:df:4a:cd:b5:56:
                    c5:0f:be:03:43:a5:6c:77:4e:6d:3f:04:a5:64:4b:
                    50:56:6b:2d:83:89:ad:85:69:76:c8:57:55:2f:ab:
                    b7:56:5e:9d:34:b8:b8:46:13:8a:d4:e9:d0:88:4a:
                    e9:4c:fe:71:7f:e4:55:46:fe:b5:08:9c:00:47:74:
                    f0:d0:9d:fa:d3:ef:36:69:80:9e:5f:4e:8d:29:39:
                    9d:fc:48:4d:23:33:93:22:a4:8f:ab:65:2a:70:5a:
                    52:43:9f:5d:e9:f6:fc:ab:a5:82:bf:e0:02:ef:d1:
                    4e:46:9e:c1:c9:bc:67:5a:99:f2:e2:ed:ac:70:0a:
                    86:ec:56:8e:45:ee:82:68:4f:d2:2c:c8:11:5b:28:
                    c3:c5:32:88:22:00:da:98:fe:77:2f:a9:3f:5b:10:
                    de:fe:f7:ec:bc:d1:0b:93:e6:8d:56:89:92:5c:32:
                    70:f8:36:a8:b3:9d:a6:27:3f:46:e0:b5:cb:05:3f:
                    54:71:cf:fe:19:3d:b8:2f:c0:b6:09:a7:09:3c:1c:
                    6a:cc:67:40:bd:d1:fa:4c:82:cd:e4:3b:be:2a:70:
                    54:0d:ee:de:9d:1c:e0:4f:a9:2c:0c:68:63:72:11:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:60:8F:D9:4F:01:3A:B4:A6:DA:A4:6A:E6:99:B9:92:64:C8:59:B5
            X509v3 Authority Key Identifier:
                keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5a:40:af:e3:d9:50:16:5c:7c:82:8b:28:68:5d:85:20:06:
         f6:05:02:a6:b0:f4:d0:40:1c:00:e8:7d:df:a3:66:be:43:ba:
         b9:eb:c7:bb:f2:d3:1e:df:8b:cd:d5:a1:e3:6d:14:07:91:50:
         8c:6d:27:07:5b:e5:9a:12:95:69:c9:d4:4b:3d:22:a6:ec:9c:
         ef:41:2a:a2:82:fd:7c:fa:99:b0:6b:52:a1:49:19:de:e9:91:
         ae:66:21:28:95:0c:84:29:90:0e:b9:7d:7c:78:4d:0f:71:86:
         8d:00:20:20:72:02:f2:d3:bc:8e:57:56:10:22:7d:df:ee:85:
         bd:05:2c:7d:d1:a8:75:9b:de:37:84:f0:6f:01:e2:43:fb:02:
         2b:46:df:dd:39:3d:cd:4c:16:f2:e9:bc:95:f2:85:62:13:85:
         20:b6:ae:c2:21:f8:43:e7:cb:fe:07:93:91:88:14:56:ac:27:
         8e:70:c1:66:9f:d2:13:cb:5c:d2:87:54:d7:7e:b9:55:75:c8:
         c3:7e:d9:c8:1e:05:db:2d:50:67:7f:94:89:47:cc:20:61:2a:
         39:80:a8:4c:c3:37:26:59:af:63:c6:6f:c3:e7:3e:87:d9:03:
         c4:cb:d3:e9:0d:75:2e:88:7d:d4:e3:8f:8a:fb:f5:9e:7f:90:
         53:67:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:26 2025 by rpki-client