Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File:                     k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier:          FZLEmnUtzOCPwIVuKbCk9kXXkCrusBpPlmPnPuvJ7uc=
Subject key identifier:   AD:DF:76:FA:B3:4A:AA:A7:5C:95:64:A9:CF:2F:0D:CE:10:EE:99:BB
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer:       /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial:       019771880CA6E9860B6804108AD7649C27F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number:          1295
Signing time:             Sun 15 Jun 2025 03:00:30 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:30 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:30 +0000
Files and hashes:         1: SboGMTB-9QHWroFpAbYSHcl3CKo.roa (hash: rffHNVeJmra0y8Rg18pTmGMriRjMrSI/KkXaHsDinBM=)
                          2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: zG0apBj9qSg14ZIzjb4Piwq1mfqrtGJ+j2SJ+kC9cVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:0c:a6:e9:86:0b:68:04:10:8a:d7:64:9c:27:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
        Validity
            Not Before: Jun 15 03:00:30 2025 GMT
            Not After : Jun 16 03:00:30 2025 GMT
        Subject: CN=addf76fab34aaaa75c9564a9cf2f0dce10ee99bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:59:bf:1c:fc:40:10:e3:d3:6c:17:70:b2:94:
                    0c:69:6c:7c:9d:99:ac:5c:33:b2:17:b4:31:14:bb:
                    16:11:86:20:00:f5:3b:e3:17:3e:8a:52:84:bb:84:
                    64:41:d0:41:cc:90:0c:94:62:7c:08:db:10:a8:81:
                    80:f5:27:2f:b2:11:00:d0:5a:a1:00:5a:eb:4b:e8:
                    45:cb:61:bf:a7:db:7b:69:69:5d:4c:b2:01:b3:fa:
                    1a:60:16:ab:66:d4:18:60:8b:46:a0:5c:f6:70:c7:
                    ba:8f:e4:60:39:a0:97:f9:74:14:e0:a2:99:98:49:
                    5f:35:84:47:75:3f:ea:cc:09:67:55:d6:b6:49:ba:
                    eb:5a:90:07:9c:72:b1:c0:44:f7:bf:c0:a8:e2:70:
                    05:b7:26:70:0a:f0:0e:a7:b8:cf:e7:d4:44:4f:05:
                    e4:02:a8:3f:57:f2:7a:6f:d3:8d:15:10:c7:4a:7c:
                    ef:1e:d2:e6:4f:51:e0:6e:cc:de:5e:54:23:ae:d9:
                    88:c0:ea:26:c7:31:59:33:c6:d5:d9:40:84:ca:23:
                    cf:df:db:49:32:fa:79:de:09:17:e3:04:bb:c2:7c:
                    bf:fc:dc:65:65:f4:a5:ac:d7:03:e1:aa:55:00:ef:
                    ae:ad:09:57:92:78:ec:0b:8a:fd:6f:51:46:2f:24:
                    47:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DF:76:FA:B3:4A:AA:A7:5C:95:64:A9:CF:2F:0D:CE:10:EE:99:BB
            X509v3 Authority Key Identifier:
                keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b6:05:4c:16:cb:2c:a2:66:9b:f8:c3:18:bd:15:f7:56:38:
         39:78:56:4c:9b:f9:c9:77:ce:56:10:95:c0:26:de:6f:a0:e3:
         71:43:82:82:30:97:5c:fd:07:f5:d7:47:5c:05:e8:05:cf:e0:
         98:ec:34:6f:e3:38:e1:57:02:8b:e8:ef:19:c0:55:37:61:a2:
         5c:cd:8a:51:e3:d4:07:59:25:be:54:6e:71:6b:07:9a:d3:5a:
         ba:f2:b1:76:51:f5:e7:af:0d:82:e2:16:32:77:9d:b9:8e:bc:
         c3:2f:d2:ed:53:b7:79:83:7f:b4:e7:52:05:f2:76:ec:ba:11:
         ce:82:65:42:c0:2d:c0:38:31:ea:04:42:50:28:0f:6e:f6:3e:
         38:5b:ff:54:d3:72:b8:a0:f3:80:1d:2a:c3:8c:27:05:a1:5a:
         ad:76:2e:39:c2:2f:5c:b4:74:c1:bc:97:2d:df:d3:b0:56:92:
         17:61:20:72:37:92:98:23:7d:a3:4e:40:19:40:0a:b6:6c:5c:
         00:07:e5:b6:a3:a2:0f:68:7b:05:29:61:58:b8:99:35:44:4b:
         67:6a:46:cf:dd:8b:d7:85:2b:5e:da:fb:77:7e:ff:57:a7:e5:
         50:c3:3d:11:43:cd:34:b0:51:e8:bd:91:2e:a4:3d:b1:29:9a:
         bd:f6:a3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:01:12 2025 by rpki-client