Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File:                     V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier:          L824tdDoIna2Si5jBRI4/skGcZFD2Dv30K7Rb76/6Lo=
Subject key identifier:   EE:7A:E0:72:2D:D9:6F:79:D1:E1:F6:F3:03:9D:1E:F6:98:D1:A3:0A
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer:       /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial:       01976E1949778B0AEB76FD256AAFF4049F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number:          0EB9
Signing time:             Sat 14 Jun 2025 11:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:40 +0000
Files and hashes:         1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
                          2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=)
                          3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: nuyaK+ptt0OCLcC1IjaSdrO2NEXleOFZ1t/FRUJZVC8=)
                          4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
                          5: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
                          6: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
                          7: zaxDDa76odJm9ePdrwAGeOqRpTk.roa (hash: LPUFtmetdpPIYathbUV2AsqucuRhOg7pKFky/Ou4leU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:49:77:8b:0a:eb:76:fd:25:6a:af:f4:04:9f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
        Validity
            Not Before: Jun 14 11:00:40 2025 GMT
            Not After : Jun 15 11:00:40 2025 GMT
        Subject: CN=ee7ae0722dd96f79d1e1f6f3039d1ef698d1a30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:bb:36:ca:78:bd:8f:0b:cd:4f:b4:75:9d:
                    94:8f:0f:4c:17:20:c1:f8:e3:69:a6:0c:82:28:80:
                    bb:be:34:c6:de:39:fd:eb:a2:e4:b3:56:ad:80:a5:
                    1b:00:9b:34:a1:a2:67:3b:65:3c:a5:d8:54:6d:d5:
                    67:e2:ff:28:1a:bd:63:83:bd:3e:db:fa:b7:86:40:
                    d9:d2:90:b1:1a:e9:88:05:7c:db:68:ab:51:a0:c8:
                    2e:e6:8c:ac:3a:0d:8a:37:51:04:4d:43:c3:4f:65:
                    73:55:b2:83:37:43:34:9f:a3:45:19:c6:e5:1e:a3:
                    d8:d5:99:90:16:1c:30:29:05:f5:42:02:70:b0:f9:
                    ae:7a:f5:dd:9d:7b:ca:78:fb:e7:ac:ec:30:b9:60:
                    47:2b:9f:83:6a:03:26:55:3c:70:4d:38:8d:7e:4c:
                    2d:5f:5d:a3:de:04:e1:fe:c3:9d:c1:43:28:b9:38:
                    24:84:5a:a2:bc:6c:36:d1:b6:af:e4:c7:1c:ab:f5:
                    1d:5b:b7:b9:5a:87:1e:7a:dd:f7:50:ce:ed:b4:d4:
                    1d:8a:42:8c:64:53:62:5e:4f:94:52:bb:10:38:3f:
                    4e:a1:d8:c0:cc:ea:ae:cc:c4:da:ff:60:b0:4e:cf:
                    01:5e:74:5e:0c:d2:b4:fc:68:df:25:ab:cd:a6:7f:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7A:E0:72:2D:D9:6F:79:D1:E1:F6:F3:03:9D:1E:F6:98:D1:A3:0A
            X509v3 Authority Key Identifier:
                keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ad:a0:de:2e:03:b2:d3:fc:7f:90:c3:54:36:7d:03:4e:cc:
         ae:38:54:65:3d:2f:7c:ff:98:5b:5c:ce:1f:b1:26:4e:7d:50:
         ac:32:54:a2:76:7d:66:4f:ca:94:d0:63:da:44:cf:e6:e4:c6:
         fb:8a:4e:a5:24:4d:1a:18:22:71:c2:43:11:a3:69:30:c9:19:
         47:a2:3e:4e:f6:3d:19:a5:bf:97:44:5c:2a:3c:dc:52:00:ef:
         97:7a:a9:33:ff:57:a9:a8:85:f1:b9:a1:6a:20:ef:29:ac:cb:
         97:b1:34:2d:7d:a5:85:2a:1d:ae:f6:78:77:bc:15:50:d4:66:
         fb:57:50:ed:ae:80:99:c0:a9:5f:ca:48:8e:06:0c:f8:d4:4c:
         dc:82:8c:7f:74:1d:72:8d:b3:23:c9:c5:9a:d0:a3:03:c4:71:
         08:60:c9:fe:5e:07:02:a7:e2:44:16:ff:53:d3:32:e4:46:b3:
         48:ac:88:aa:43:4e:40:84:61:66:b1:02:06:5a:73:f8:f6:5d:
         fb:e5:08:86:0c:f8:b5:fe:a6:4f:27:b4:d9:74:c8:6b:da:00:
         a1:fe:a8:08:5c:95:8b:b6:a0:cd:7c:4f:34:ea:6a:47:95:c4:
         9d:6b:56:bf:e6:b1:5b:8f:6e:62:3b:6e:22:3e:cc:f4:c6:38:
         ee:5b:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:15:00 2025 by rpki-client