Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File:                     q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier:          kS5ZP4M94SbBOds9+uq8xwH2OhwPViPFu6JZ7TqiqbI=
Subject key identifier:   5A:F9:DD:19:F3:C7:E9:83:0F:12:B8:29:01:C5:FA:93:22:30:2B:9C
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer:       /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial:       019771884722FF296F48C6E201477360F738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number:          0DF9
Signing time:             Sun 15 Jun 2025 03:00:45 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:45 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:45 +0000
Files and hashes:         1: evpxyC_xQr6-9_i5vhF3SSD60QY.roa (hash: F+Lkz2iLknBGekmgWZevszL+qAh6hnFUDMady9RqMNg=)
                          2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: I6qnyz6JvjV5Cha201NGIpniJBsKD3Mi5XRNwrbnh68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:47:22:ff:29:6f:48:c6:e2:01:47:73:60:f7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
        Validity
            Not Before: Jun 15 03:00:45 2025 GMT
            Not After : Jun 16 03:00:45 2025 GMT
        Subject: CN=5af9dd19f3c7e9830f12b82901c5fa9322302b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:75:51:81:48:64:a5:59:44:c1:51:36:d8:
                    3f:0c:d3:32:20:81:7e:c7:9e:8a:85:b6:14:c4:88:
                    fc:bf:24:8a:95:22:c2:76:9a:25:35:27:bc:1d:2d:
                    dd:06:82:ae:a0:43:ba:db:e7:cc:33:09:af:58:37:
                    21:f7:7f:16:37:fc:0d:9d:95:de:eb:93:87:dc:15:
                    aa:e2:d0:5f:fc:b7:3a:06:9c:29:af:3b:13:54:f5:
                    1c:53:e5:72:b5:b4:8d:b6:ef:10:b8:67:05:40:d2:
                    e3:ba:d7:90:1d:4e:e4:58:ea:31:a8:e3:d9:72:5e:
                    82:58:c4:27:0e:a1:af:01:4e:12:0a:76:44:22:c4:
                    b7:5a:6b:09:73:e3:87:28:bb:3e:71:93:6c:6e:a8:
                    a0:37:72:12:eb:c7:3b:6d:39:54:60:12:92:f7:35:
                    61:65:95:cc:59:d7:70:c6:61:7a:bb:c8:02:e0:13:
                    56:d0:8e:06:d0:57:d1:3a:57:6a:ca:14:08:aa:f4:
                    7f:37:f5:1e:98:5a:6b:18:0e:36:ac:1d:81:46:9e:
                    99:50:13:62:e3:07:ff:01:e8:a1:50:9c:d3:f4:2b:
                    8a:52:8c:6f:e8:2c:ea:2a:62:3c:9c:6b:81:66:16:
                    33:f9:1f:13:c1:da:6d:4f:0d:bb:c8:70:20:6b:a4:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F9:DD:19:F3:C7:E9:83:0F:12:B8:29:01:C5:FA:93:22:30:2B:9C
            X509v3 Authority Key Identifier:
                keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:26:3e:fc:78:b7:de:83:85:dd:1b:e6:d9:d7:7c:69:5f:9a:
         9a:68:bd:0d:51:65:24:31:6c:ad:ba:d6:67:4a:62:99:49:94:
         2c:97:ae:88:65:70:23:1a:05:50:44:86:0d:a3:ce:5a:56:16:
         3e:a6:67:6f:62:02:f6:70:87:48:b3:5a:31:3f:93:ae:19:73:
         0c:02:9c:9f:e9:a9:b4:53:15:9d:ba:e2:51:b4:57:47:f5:51:
         60:13:3f:f3:e7:96:09:73:95:38:3c:d8:f8:f8:48:f6:18:96:
         81:5b:6d:30:10:15:fb:c6:41:e7:26:5f:fe:49:d0:dd:7f:d8:
         9e:ee:cd:a1:09:6e:d2:ac:e2:e0:f2:ea:c3:1b:25:91:b4:99:
         6f:5f:ec:6f:27:cd:78:db:56:59:e6:a3:01:96:f4:70:d3:7f:
         ca:ef:b4:6b:38:c3:94:df:df:36:cd:c3:22:53:71:80:72:4c:
         86:af:c2:32:93:3f:fb:38:ed:13:60:eb:07:df:b2:0a:de:67:
         d3:d2:ff:ca:9d:3e:7f:f9:36:e3:de:37:73:4b:3b:46:3a:28:
         9d:05:2d:4d:49:1f:80:88:a5:ce:c1:07:55:c2:c6:97:95:47:
         95:6a:5b:ff:5b:d2:c7:37:3f:42:27:54:8c:03:13:3f:59:e6:
         d9:df:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:47 2025 by rpki-client