Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
File:                     RRbrDuN6cQdkYexsuouSWsXiigQ.mft (raw, json)
Hash identifier:          2l7of1bD6M3DhFfk7iw9Z0t8ardOZHHuVL06+Ygbed8=
Subject key identifier:   D3:A3:FC:7F:88:AF:29:DE:32:F8:BF:8A:C0:FC:D8:DD:D7:0E:63:A4
Authority key identifier: 45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04
Certificate issuer:       /CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
Certificate serial:       01976C61E41E15127AD7B08426DAD3AA80F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
Manifest number:          0BCF
Signing time:             Sat 14 Jun 2025 03:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:44 +0000
Files and hashes:         1: 1-t2gnE5sOGltaGyK08vMro9QjaY.roa (hash: KqgeQLln5bUSPOutirb1nGDGQJDA+7LtG2hn/tE6y4I=)
                          2: 99QLROUQNHiiqB_a3SA6ZvSr3YI.roa (hash: sNlxkO/aixuwJo13PpX/CwbLGrB7NAaO23Tw9EkoOSE=)
                          3: RRbrDuN6cQdkYexsuouSWsXiigQ.crl (hash: 0yEH7fBRH1fzEUIca9LCTaD4J0stHMIovNp6Ec+H2mk=)
                          4: dvJNx6RbxjDoJCEwF7HnrhRhptU.roa (hash: DVANgVeWMmrYwoLblH+nDJmKwe1mEMcVwTPkEqM0534=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:e4:1e:15:12:7a:d7:b0:84:26:da:d3:aa:80:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
        Validity
            Not Before: Jun 14 03:00:44 2025 GMT
            Not After : Jun 15 03:00:44 2025 GMT
        Subject: CN=d3a3fc7f88af29de32f8bf8ac0fcd8ddd70e63a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:19:45:57:de:6f:5a:d3:aa:81:79:ac:61:
                    a6:9d:46:c3:91:98:d8:f3:3f:83:91:7c:4f:25:6c:
                    43:5b:b8:d2:ed:99:21:d0:4c:76:a3:2a:19:23:e9:
                    e2:58:9e:d7:90:c2:f0:60:46:d1:b7:49:0a:9a:36:
                    f5:a4:65:d2:30:c9:27:bf:c1:81:3c:bc:be:a6:aa:
                    97:44:0b:5b:1c:73:0f:31:39:f4:cb:6c:19:12:d6:
                    96:9c:2e:c5:1c:b0:0f:2e:37:57:55:83:84:9f:e2:
                    55:bd:ea:f5:7a:b8:fb:95:bb:86:eb:8c:ab:32:33:
                    69:a9:bd:7c:57:3e:89:a5:54:b4:80:26:40:d2:bf:
                    96:9c:8d:e3:6e:67:8f:e5:52:40:7c:13:fb:0d:76:
                    33:67:1e:fc:7e:78:8d:6d:bd:da:66:36:e4:8c:aa:
                    48:29:6d:b9:04:e0:3e:02:be:5a:4b:6a:04:4e:40:
                    10:54:6d:8c:32:90:c7:6d:ee:4f:e1:75:6a:c4:23:
                    91:af:d8:67:6e:04:9b:0c:5e:4d:79:72:11:29:95:
                    48:bc:48:56:b6:58:41:6b:97:e3:58:0b:ad:38:f9:
                    37:ab:7d:9c:13:51:6f:ad:b0:e2:86:4a:a7:53:75:
                    a8:da:fc:c2:ab:13:1d:e1:ab:a0:9b:f7:8e:be:d3:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A3:FC:7F:88:AF:29:DE:32:F8:BF:8A:C0:FC:D8:DD:D7:0E:63:A4
            X509v3 Authority Key Identifier:
                keyid:45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:0b:9a:a0:3c:9e:f4:0e:e5:8c:04:a9:55:3d:37:64:f9:e4:
         16:85:bb:4c:19:0a:9c:4e:13:4e:da:6b:87:25:3f:38:33:c9:
         80:94:1d:ac:44:2b:4c:90:3f:a4:43:26:b0:99:35:e7:97:50:
         4d:13:55:90:66:0d:79:94:a1:52:54:41:26:f2:ef:35:0a:06:
         a1:41:b6:98:fc:d7:fd:c1:2d:7c:c5:c9:3b:65:87:2b:2b:85:
         72:9c:d3:53:1a:53:98:df:cf:6a:5c:87:91:a7:fc:5b:38:eb:
         e7:55:1b:1b:07:0d:17:05:6a:52:50:e2:f0:92:f0:2d:91:58:
         6c:5d:86:36:4a:2f:e6:76:d1:fb:80:2f:f1:d1:6c:f2:90:48:
         54:99:fe:c8:fd:b2:e8:ad:70:3b:d5:1f:d0:ea:4e:5d:92:60:
         24:80:f1:ea:4f:4d:57:c5:c0:8e:2d:66:b5:f1:55:80:7b:87:
         e5:5b:ef:01:4a:7f:a2:5e:b2:7f:94:44:76:66:49:0f:6e:5f:
         e5:d6:c3:68:e5:b0:73:95:09:dd:c5:8d:ba:6f:13:40:64:e7:
         2f:4f:2b:0c:0d:de:b1:88:07:24:35:3c:17:71:84:67:26:c9:
         ec:bd:64:bd:13:94:cf:ce:6f:5f:1c:8e:3a:9c:4f:12:31:c2:
         40:c1:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:55 2025 by rpki-client