Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File:                     8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier:          iShdzktfTwHaixEtIHA5HOI2rv1Cr/l/EtUFUVf3FYw=
Subject key identifier:   90:18:6A:41:78:F8:7A:7C:65:22:58:2F:E4:7A:AD:53:86:FF:19:EE
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer:       /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial:       019775D2950E26E81D9EC9F7C91EC793E22C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number:          0B5B
Signing time:             Sun 15 Jun 2025 23:00:24 +0000
Manifest this update:     Sun 15 Jun 2025 23:00:24 +0000
Manifest next update:     Mon 16 Jun 2025 23:00:24 +0000
Files and hashes:         1: 12a0ipAHl5HJyqLJLtX-LoYRrXM.roa (hash: TnK4o3d13YBRBJ8LTBq2YYzMppBqNrf4+1qoGHx92pI=)
                          2: 7__iS0PC1sPpziieUf7cPR0483I.roa (hash: WMdPgkVAgvH1xgF/iLZlNWqwQWtXShkyRu4TdlhutJM=)
                          3: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: oSkpcisXFskoSxn8HSozftonwJkmmLnvj1JDqnaK444=)
                          4: F7yuxB3rSQXv2e3QR7lP2VYZOl4.roa (hash: Hb0YQdZj2T1tpCI4BSwoqOiW5xXUYr05ZCOvDEHOELk=)
                          5: N9l24h9HyK6kAtkXD09UL27Eum0.roa (hash: Xv+8Dv2RI7WnHgqmAi/VbFX+HLMpAXUADpkW2PUX/hM=)
                          6: TACuL0mRuuSZ00EUuEDQYYgL9nY.roa (hash: EEbhhtJ6TUNmkVK+nqQofMESLsYodUnzqvKr3ODtYdA=)
                          7: f0YSDbM5Fp4SqEnB7Svlvk1Cg-M.roa (hash: 3R84lvwDdPg0KG2eSA0cCdxuOFb1Dl8Y/DbEXSQVXcw=)
                          8: gz7229OR-UwSeE8Mrmip6_lWRzM.roa (hash: HqILwLXjV1tcVlx0sNjeuEAQfPHai/C6EYXvfZ4gHY4=)
                          9: v2HXLCZWsI0s9KIXOuBOD4NKWbo.roa (hash: /mndx1AHWJXPlNn93oMmIR/duKvVFpLSwcZoOaPa0GM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:d2:95:0e:26:e8:1d:9e:c9:f7:c9:1e:c7:93:e2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
        Validity
            Not Before: Jun 15 23:00:24 2025 GMT
            Not After : Jun 16 23:00:24 2025 GMT
        Subject: CN=90186a4178f87a7c6522582fe47aad5386ff19ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:17:23:b9:ba:74:8c:e6:68:bb:2a:0f:40:
                    97:28:cc:63:1c:c4:fe:c5:bd:12:a8:b8:73:e5:1b:
                    d8:fb:4b:9f:45:f2:90:1a:cc:61:79:ad:17:72:60:
                    b5:81:e1:ae:c4:06:a6:91:97:92:0b:8b:63:85:34:
                    06:ee:f4:e9:12:bf:13:ba:b7:e9:32:5a:ad:8f:c2:
                    3f:85:a4:29:cd:e8:eb:97:df:af:41:53:e1:5a:2a:
                    81:11:cb:d8:0a:e8:fa:51:3d:bd:98:cd:60:e0:b0:
                    09:f3:ef:ed:02:3c:e3:95:dc:a9:b2:f3:21:9c:cd:
                    05:44:32:d8:bb:f5:99:18:d8:aa:31:af:78:31:f4:
                    b1:ed:0b:59:a7:18:75:cd:cd:9a:47:1d:a4:76:86:
                    6c:a6:4c:4f:13:71:f7:eb:40:54:14:96:f5:37:68:
                    c6:6c:71:2a:c0:a8:77:09:ea:54:fa:0e:fa:cd:a6:
                    98:c2:9c:9e:4e:8d:99:0d:54:a8:a4:a2:6c:82:fe:
                    4f:cb:69:ce:16:31:d6:8b:7b:0c:dc:84:aa:e2:b0:
                    88:f4:6f:cd:e8:91:d8:fe:0e:85:51:a8:95:85:ce:
                    76:38:38:4d:66:a1:42:45:f2:5e:eb:87:62:9a:87:
                    67:b8:80:83:2c:6e:48:c7:b7:0f:5e:97:68:b4:83:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:18:6A:41:78:F8:7A:7C:65:22:58:2F:E4:7A:AD:53:86:FF:19:EE
            X509v3 Authority Key Identifier:
                keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d3:ae:cd:fc:c1:af:a3:27:7f:b4:91:af:90:d5:38:ae:c7:
         71:51:23:89:9d:37:bc:70:83:53:63:4a:71:d5:be:5b:a3:43:
         91:6e:ac:71:69:1b:b5:cb:a4:e0:56:15:05:db:b8:2d:02:a6:
         f7:70:e3:ea:dc:23:6f:4c:7d:57:7f:f7:fb:99:a4:62:a1:16:
         e1:7d:41:80:5e:ac:6e:38:5d:de:29:d1:49:12:06:6c:f2:b6:
         1d:a7:ca:42:b3:81:1d:c5:b3:cb:71:ea:41:37:a2:d2:75:cb:
         84:51:1e:b1:cf:bb:97:03:2c:27:55:4f:63:b7:9a:f5:6b:33:
         5b:c1:23:de:75:f8:14:b3:0c:10:85:ac:25:23:6b:9d:da:63:
         df:dc:fd:56:bd:c2:25:81:cc:13:5d:bb:38:c4:5a:3e:5c:8c:
         28:59:6d:7e:bf:8e:85:f2:ed:57:c2:d1:dc:39:a6:4a:59:1f:
         f0:df:25:48:7c:db:8a:1a:73:b3:23:47:e2:f6:f5:dd:8b:ab:
         7a:dd:fd:5a:14:09:2e:72:34:70:4e:55:6c:5f:be:77:57:4c:
         36:5f:51:bd:38:69:01:19:50:59:d3:22:af:5c:44:f1:a8:49:
         1a:b0:0f:0b:bf:54:25:1d:30:2c:d4:46:26:2f:f7:45:1e:f3:
         5a:b6:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:06 2025 by rpki-client