Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          s9wiETPgVDS9Oquy3SszBxOdYF7DjhZwABvHla6R3Cs=
Subject key identifier:   CD:DC:8B:40:4C:FD:81:4D:A2:FC:44:45:34:5F:F6:8C:EA:C8:53:9D
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       01976997CEECC2C5EF8947F86A90421BD242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          15B0
Signing time:             Fri 13 Jun 2025 14:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:45 +0000
Files and hashes:         1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=)
                          2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=)
                          3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=)
                          4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=)
                          5: OtDWlzXXKG39wBbpoY1vkYd9gq0.roa (hash: WdcFLxAQnCv2XswnBL9bzUjKIrKsdl6kvmFmkECpXVw=)
                          6: VHnEdWOU21TmJWTQH9-doQXQ0yk.roa (hash: pFCoqQmJJvFJk4sf3//959OhDhdVi2aYYgZGYzF037A=)
                          7: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=)
                          8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: fdrNSo8mvTqTm1n0j7/YGUMd7VDzjWmdP2uFJ97vkww=)
                          9: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=)
                          10: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:ce:ec:c2:c5:ef:89:47:f8:6a:90:42:1b:d2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Jun 13 14:00:45 2025 GMT
            Not After : Jun 14 14:00:45 2025 GMT
        Subject: CN=cddc8b404cfd814da2fc4445345ff68ceac8539d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:d9:87:48:58:da:b5:a6:70:dc:1b:51:8d:
                    63:05:bc:83:48:6e:61:b8:de:b5:36:f7:f2:1c:d3:
                    60:e0:13:6e:2c:40:7f:d5:14:2d:da:00:9b:e1:86:
                    bf:b9:0c:32:d6:ae:41:58:56:e6:ed:ce:7b:e0:12:
                    d4:bb:af:36:77:6e:25:c1:e9:05:7f:d3:0a:45:fc:
                    56:9d:2b:85:3a:9a:7f:96:d5:ef:06:10:41:44:58:
                    74:15:79:10:be:9f:33:f1:ff:a9:ae:b7:f5:ca:65:
                    de:24:80:13:49:e4:5a:21:c0:60:8b:9e:24:10:09:
                    d9:12:cf:79:25:f1:9a:17:af:04:51:78:f9:28:71:
                    73:c2:b3:a7:b3:af:e0:b6:78:52:ac:ef:ac:73:49:
                    45:47:eb:49:a6:d6:95:10:51:92:7a:b9:b4:93:19:
                    39:c9:d7:5d:c0:56:df:8a:fd:ee:82:ac:80:1f:13:
                    71:e8:16:34:c7:ef:9c:13:3b:54:7a:1e:50:f4:32:
                    6a:b7:89:62:98:f6:87:a3:85:de:3e:71:2a:69:df:
                    59:2a:b1:4a:92:3b:44:38:f5:24:c3:d9:74:b6:5e:
                    6e:1b:80:74:6f:25:91:e6:c4:da:11:f4:e9:0b:27:
                    77:ff:ef:cb:b8:8b:b8:b9:b1:73:7b:82:65:35:19:
                    ab:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DC:8B:40:4C:FD:81:4D:A2:FC:44:45:34:5F:F6:8C:EA:C8:53:9D
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:95:98:e7:c8:fe:2f:8e:86:09:10:bd:d2:da:9e:88:f9:58:
         17:70:7b:c2:05:0b:08:ed:81:6b:85:cb:6c:52:6a:16:ec:22:
         76:3d:61:d6:f5:20:8b:1a:09:d0:c7:58:d1:53:50:e0:7d:de:
         92:61:ff:de:a2:c1:21:1f:a4:71:63:f7:7e:b3:f9:ef:20:7f:
         19:bd:fa:9f:2b:52:1a:61:8f:2b:e8:db:2e:00:f4:6e:36:8b:
         63:4b:b5:7b:af:8d:76:25:89:60:96:49:c7:95:f0:aa:b9:f6:
         e9:b3:c3:13:5a:10:17:28:a6:f2:d3:b4:1d:8b:91:29:04:ad:
         d7:9a:c5:e0:e0:3f:2e:c7:72:19:be:67:03:74:62:c4:5a:cf:
         45:bc:c9:0d:4b:46:f0:ba:61:df:ac:0b:3f:55:84:b9:5f:ba:
         58:46:d2:13:af:1c:fa:04:d1:0e:11:cc:2f:3c:67:c8:ac:fa:
         4f:4b:a6:61:15:b1:90:c3:49:50:36:2f:1a:70:7a:65:2a:1e:
         b3:88:bf:86:99:37:a5:cc:95:70:e6:d5:fb:82:0c:53:56:84:
         bb:ea:f4:c2:84:6b:c3:52:0d:1f:84:9b:ae:4b:63:03:d7:40:
         19:0c:7e:fc:59:77:18:cb:0f:e0:64:a9:06:2e:14:60:6a:87:
         b9:8a:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:52 2025 by rpki-client