Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File:                     MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier:          /HRt+s4/gJqWBjkqmazIa53mLcIeCMN196kbveHDnNU=
Subject key identifier:   10:17:44:82:5E:24:7A:15:D7:0C:27:09:19:C6:B8:1B:DA:EC:C0:FF
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer:       /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial:       0197692A184565482B8A137F17DBCF9A329C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number:          10CE
Signing time:             Fri 13 Jun 2025 12:00:55 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:55 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:55 +0000
Files and hashes:         1: GbEyk8ZWl0vqgj_sPWLMTAGno6s.roa (hash: JzRbeYoWUwlRVaKgJmm7hD8H9CYTCwAivI+PSmgKwME=)
                          2: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=)
                          3: MseO7vestFH8N1df65EU38zBzfs.crl (hash: xZ0rhsbqIawitI6RzKo+LiS3U81UuQDzlq7KbW7DyB0=)
                          4: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:2a:18:45:65:48:2b:8a:13:7f:17:db:cf:9a:32:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
        Validity
            Not Before: Jun 13 12:00:55 2025 GMT
            Not After : Jun 14 12:00:55 2025 GMT
        Subject: CN=101744825e247a15d70c270919c6b81bdaecc0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:12:88:ff:7e:e9:6a:c6:a8:cf:f5:91:d8:
                    26:b7:de:9f:bd:1d:14:b7:50:48:25:2d:ea:70:78:
                    c0:bd:24:93:d4:ba:1b:1f:b3:3d:37:3e:5e:61:d9:
                    79:57:bf:2f:fe:48:64:04:6e:79:ab:eb:fe:f4:c4:
                    e0:a4:45:bb:9c:8d:61:68:08:51:11:ba:a1:c7:21:
                    d4:bd:76:76:39:af:a8:4e:f5:52:6c:77:9b:46:71:
                    78:6b:78:89:7f:a9:ec:de:e3:e2:d6:48:db:3d:fd:
                    5a:d6:83:16:6e:bc:4e:2f:0d:47:d3:a2:28:1a:93:
                    f3:74:ed:e3:56:9d:10:d4:25:4b:89:34:1b:32:9f:
                    ec:a3:61:56:cf:d3:63:15:af:fa:70:e6:b1:f2:ce:
                    32:3d:58:36:3d:9a:cb:6d:3e:67:72:32:a0:74:50:
                    44:75:f5:f3:52:ed:66:d8:f5:fa:05:97:f0:8b:66:
                    60:2d:80:34:b6:c0:4d:b2:2b:d3:30:aa:28:2b:5a:
                    b9:0f:a1:29:eb:6b:c5:ae:02:5c:e2:59:9f:8e:03:
                    8d:41:6b:2b:43:3e:ac:72:4a:ca:1c:95:bf:56:1e:
                    a9:ae:de:9a:01:4d:4b:57:70:d0:87:a7:85:42:2b:
                    f6:16:1c:35:0f:74:c9:c7:4f:33:c2:f2:53:b1:d5:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:17:44:82:5E:24:7A:15:D7:0C:27:09:19:C6:B8:1B:DA:EC:C0:FF
            X509v3 Authority Key Identifier:
                keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:46:02:13:c6:1b:b0:dc:32:cb:e7:18:6b:59:98:37:ed:fd:
         4b:08:2b:44:a9:89:f2:83:40:d0:38:49:f4:98:14:53:29:73:
         b4:27:c5:a8:b4:e3:9d:4e:a2:16:74:9f:37:2c:00:05:fd:6e:
         ab:b3:da:04:65:b8:d9:4b:f4:35:db:10:c9:51:2f:7c:86:99:
         a6:10:ac:09:9a:84:96:14:d0:ba:ae:ba:08:f3:aa:4d:8b:cb:
         e0:eb:18:da:7b:e7:4c:12:80:8e:4a:15:c1:a3:b6:88:fd:fd:
         e7:ae:42:2f:10:17:2a:5e:9a:23:e0:f3:ad:ad:18:e1:92:22:
         ac:4e:2b:dd:09:ff:e6:79:d8:7d:03:b2:00:80:63:49:d5:51:
         9f:78:e5:9e:51:c0:21:da:a5:86:d5:32:52:f8:7a:8c:ae:9d:
         57:b4:e9:b7:66:2b:c8:ed:bc:5a:d5:cb:49:6f:d3:ea:fd:a9:
         e4:7b:2c:19:c2:67:11:e9:97:88:d7:64:5e:05:97:a3:38:af:
         a4:80:da:20:d7:a6:32:8b:d7:c8:58:69:44:c1:06:2f:0b:12:
         57:19:d0:d4:74:62:a3:76:0d:54:15:1f:b3:d6:af:e1:e9:cd:
         97:63:d0:67:f6:4b:b8:7e:2e:8f:f7:39:76:4c:18:d4:59:61:
         a5:b3:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:08 2025 by rpki-client