Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
File:                     plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft (raw, json)
Hash identifier:          6VB30ezAN5hkYN3u6D3rCNGH+ANBEzhYEbgovvQlH2w=
Subject key identifier:   2F:7F:D6:10:4D:46:16:5E:EA:2A:C1:B0:48:5C:0D:F2:22:12:AB:EA
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       01977640FCCDBE1C1CFE34CC64A6B39739F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
Manifest number:          15A2
Signing time:             Mon 16 Jun 2025 01:00:59 +0000
Manifest this update:     Mon 16 Jun 2025 01:00:59 +0000
Manifest next update:     Tue 17 Jun 2025 01:00:59 +0000
Files and hashes:         1: FAJgXHKouxn1NIiI1ev8JXSE61Q.roa (hash: 8t7YcNGHmBNdk3Ehp7fmi3HGBZDTLV33VOOXqYdX/R0=)
                          2: FCLA8M032EwPVSliWKDu0fDlnPE.roa (hash: mxbROZOE42PzUqwm62cDGMgZG6BYzZ2DWS8LB2fyuxA=)
                          3: FzCE_2CmXVI87QCBjmMqmhPqvI4.roa (hash: xnBYv3l8pbmO/yFa4pavqkCSVOI2MUIexKvv0cmsLEo=)
                          4: QXuReFuFnm4r5YfXqKS-RkBXarA.roa (hash: pUUucPhRyENqlrukVYu+Ay5+vKGTKkXyK3KLmXDcylU=)
                          5: plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl (hash: vTF628wMTERtdJBtYpLW8I7cSpwt9nO1zlFTou/KQok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:40:fc:cd:be:1c:1c:fe:34:cc:64:a6:b3:97:39:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Jun 16 01:00:59 2025 GMT
            Not After : Jun 17 01:00:59 2025 GMT
        Subject: CN=2f7fd6104d46165eea2ac1b0485c0df22212abea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:5e:34:3a:30:79:fd:9b:07:26:73:19:da:
                    52:61:8b:e5:b9:24:4e:5a:74:20:42:92:27:cc:b3:
                    f0:2b:61:69:c1:24:63:e8:06:40:e4:ed:85:00:b4:
                    8e:a9:d1:b9:30:8f:d7:23:c8:de:d3:e2:cb:a6:68:
                    47:80:27:6c:c9:04:fb:13:92:2c:5a:ba:23:59:12:
                    bb:94:00:a0:0d:4b:e5:a5:11:11:18:32:cc:2f:ad:
                    25:12:bf:ec:d5:c3:7f:a5:00:eb:28:b9:c8:8c:5c:
                    3e:dd:48:c2:f6:fc:2f:99:05:89:8b:9a:5c:00:5d:
                    eb:e2:0d:6d:17:95:13:b3:2e:75:62:4a:d6:35:9e:
                    85:66:fc:00:0e:7a:a6:29:2b:92:b1:57:61:ad:14:
                    16:6f:81:e8:d6:5f:5d:40:52:c2:b2:21:83:72:9f:
                    71:7f:dc:1c:c5:1f:9f:28:d2:36:9f:cb:05:f7:0a:
                    e0:da:6b:30:42:02:5d:47:69:a0:7a:4c:d8:b5:79:
                    2c:43:b0:b8:5f:33:c3:8b:64:ca:a2:dd:3d:c8:f7:
                    00:22:2e:f3:d2:2b:e7:49:0a:a1:dd:b1:80:59:d2:
                    55:5a:88:2d:d5:e1:78:d4:a8:fe:ca:1a:02:cd:c0:
                    05:a5:38:f6:40:36:76:39:90:34:a7:db:e8:11:bc:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7F:D6:10:4D:46:16:5E:EA:2A:C1:B0:48:5C:0D:F2:22:12:AB:EA
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:14:12:b8:4c:1d:0b:75:5f:fe:91:df:db:fe:f1:87:54:64:
         2a:0a:34:79:79:6f:65:47:db:90:aa:ec:71:6d:d4:47:85:9d:
         b9:60:3b:28:43:82:e3:d4:15:3c:c1:66:e1:42:39:ac:d4:21:
         7d:e2:7e:53:37:d5:22:dd:ff:5b:5a:2f:e9:98:80:80:7b:65:
         93:15:04:e7:6f:d5:83:84:52:4f:3e:50:05:d7:58:50:02:07:
         eb:3c:dd:7f:2f:00:f6:f2:54:e3:09:a7:56:ef:cc:4c:15:62:
         f3:73:82:3b:12:3a:e3:1a:08:a1:dd:49:d2:90:9c:ff:66:c0:
         d4:44:6b:ea:55:d6:80:66:54:13:9d:12:e8:2a:b9:16:b5:ef:
         7a:2f:f0:62:9d:ca:85:96:26:ba:2b:b0:5e:17:f4:ae:3c:2a:
         f1:e9:f1:69:6a:7d:d2:32:76:0f:74:b3:e4:fb:a7:55:31:ce:
         52:20:c8:3a:34:a4:b1:23:c6:52:81:66:e2:ad:3d:ab:b3:86:
         07:cc:b2:a2:0c:e9:9a:74:0e:17:9d:30:bc:33:68:42:ee:74:
         45:70:d2:7b:10:17:e2:e3:69:6c:8a:5a:02:67:bb:0f:3a:70:
         4c:50:61:3e:6b:51:23:a3:1c:74:73:e8:f6:30:7d:5d:b9:5f:
         85:2b:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:12:31 2025 by rpki-client