Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File:                     sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier:          0xBsrz+Jx7qryMBHy3+P4QcWCohqjQHYud5lJLfj6TQ=
Subject key identifier:   70:31:3A:D7:18:90:EA:06:DE:32:99:10:5A:E7:33:43:F5:4C:79:03
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer:       /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial:       01976929CB9B4524720CC43236F94D02BCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number:          08E2
Signing time:             Fri 13 Jun 2025 12:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:36 +0000
Files and hashes:         1: JCqxOWvRMd2lIIGe0fYoaGdhwgI.roa (hash: q79BmLDis9K2JVt9ulN+DMiX99ELtsqzHLGGugITbVk=)
                          2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: qJyTDkVjD304g8gqOdJedq+7XmN/D2CfSodVZqIl/dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:cb:9b:45:24:72:0c:c4:32:36:f9:4d:02:bc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
        Validity
            Not Before: Jun 13 12:00:36 2025 GMT
            Not After : Jun 14 12:00:36 2025 GMT
        Subject: CN=70313ad71890ea06de3299105ae73343f54c7903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fb:80:f1:72:b7:27:28:96:fd:94:91:ce:c1:
                    94:03:f2:2e:6a:35:86:d3:bf:04:f8:dc:f2:80:dc:
                    fe:a8:60:d9:ba:fe:bc:5f:cd:c7:97:e0:7b:6c:20:
                    78:8d:b9:e0:0e:db:33:b9:ad:f1:22:1e:d4:71:c0:
                    50:77:b6:4b:50:91:94:83:34:aa:a1:d1:b4:fc:14:
                    80:40:b8:57:38:82:ec:81:9b:b4:ac:04:3b:cf:d2:
                    ed:20:f5:9b:a6:2e:0d:d4:3d:97:fe:37:78:70:5e:
                    3b:c1:f6:68:56:2d:39:ff:9d:e9:7d:ff:ba:84:c4:
                    e1:64:35:3a:b9:7e:eb:32:e7:08:cd:79:7e:0a:bf:
                    c3:ab:0d:a2:37:31:1a:1c:fc:1d:25:a9:30:a2:9a:
                    a9:9d:48:01:ab:5a:b5:11:68:2c:58:bb:d9:0f:3f:
                    f8:f6:92:57:ba:c3:44:5b:77:0a:fd:39:66:e6:23:
                    41:a2:47:e4:e6:d1:a6:ef:26:76:9d:f9:61:a8:52:
                    1d:74:21:b9:9e:4f:e1:be:e6:66:6a:93:9b:fa:87:
                    a6:8a:b2:98:ee:d7:81:b2:86:73:28:9f:6d:12:f9:
                    0e:b1:4b:81:12:76:dc:cc:60:c5:e5:f9:43:36:92:
                    84:85:e6:8f:6f:07:dc:19:80:ac:6d:7b:24:0d:32:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:31:3A:D7:18:90:EA:06:DE:32:99:10:5A:E7:33:43:F5:4C:79:03
            X509v3 Authority Key Identifier:
                keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fc:8f:5f:49:7c:98:42:f9:34:23:86:62:e2:ef:55:85:5d:
         9f:62:ea:34:ef:a2:f0:0d:49:49:54:cb:77:46:79:2c:08:3a:
         65:83:a0:cc:40:01:81:73:cf:44:fe:0b:de:c6:5b:34:78:af:
         50:22:e7:9f:15:f7:86:92:a8:6b:7a:ee:1c:f9:7e:3a:47:6a:
         4b:2c:2f:6a:0a:90:71:e4:36:0d:1d:b8:d7:33:28:c1:87:d4:
         3f:3a:2f:26:a2:08:fd:aa:72:c5:76:cb:f5:c3:24:c4:f7:a3:
         1c:78:d8:86:fd:42:62:bb:97:c2:ce:b2:c4:5b:03:d6:ec:b9:
         70:a7:c6:07:d6:03:d5:0d:17:19:cb:e2:bc:7f:b5:66:30:a2:
         0c:2b:20:4f:44:a6:25:dc:cc:4d:b7:03:ff:79:fa:ab:89:86:
         79:17:38:be:11:84:96:79:bc:03:0b:2a:45:bb:a7:59:7d:1b:
         33:9d:f7:e4:f1:60:be:4e:6f:5d:a2:a9:b2:26:30:f6:e6:9e:
         7d:fe:59:56:41:01:5c:84:b9:c0:a8:8a:ba:e3:88:f7:c3:72:
         48:32:7d:08:d9:31:29:43:b0:85:46:32:6f:89:1a:a1:74:cc:
         48:eb:fb:f9:c0:f0:ff:e4:88:64:f7:6a:28:e8:15:f5:b6:50:
         0e:b1:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:09:46 2025 by rpki-client