Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
File:                     AsSROCOjGf66InDhuiygnkNb1Vs.mft (raw, json)
Hash identifier:          3+h4QrlKzz7YnOTpJWufWCQWimmuzS/YSA+nshf6aTk=
Subject key identifier:   04:7B:B0:DA:0A:F5:E4:76:A3:69:EF:95:11:B4:F0:13:F9:46:8C:96
Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
Certificate issuer:       /CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Certificate serial:       019768850E5D93A580266E2E340ECA3B4F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
Manifest number:          1243
Signing time:             Fri 13 Jun 2025 09:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:39 +0000
Files and hashes:         1: AsSROCOjGf66InDhuiygnkNb1Vs.crl (hash: G5qv8lHxsysUXx/vVhkPhf9P9YB0/vwgeUXSGjx8qp8=)
                          2: zqiwP0xb8bytzAumv2YPA_fNwb4.roa (hash: zCaLlPBZ2WB2CsOiMiyWuvWQI6GwLJcAhYLvd/2+eA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:0e:5d:93:a5:80:26:6e:2e:34:0e:ca:3b:4f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b
        Validity
            Not Before: Jun 13 09:00:39 2025 GMT
            Not After : Jun 14 09:00:39 2025 GMT
        Subject: CN=047bb0da0af5e476a369ef9511b4f013f9468c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a0:ab:48:3b:3c:4e:05:d7:9b:9a:9e:f0:01:
                    34:3e:81:aa:de:88:1c:19:e9:17:60:e1:9a:bd:52:
                    32:42:da:7e:f8:c3:ea:8f:91:23:39:5e:4d:82:ad:
                    08:5d:2f:12:2d:4c:e4:c8:05:4b:9e:d2:f0:07:61:
                    70:e7:19:7d:35:3e:31:34:12:1e:64:78:7a:a3:80:
                    58:d3:64:d9:9a:75:1a:cb:67:cb:fc:a6:5b:5a:7e:
                    8a:ee:b9:b5:23:92:f7:36:3a:b8:f0:dc:ed:77:ff:
                    ac:de:ad:00:17:06:ef:d8:f4:6e:fa:c6:db:c3:43:
                    3a:24:92:2f:99:23:c2:42:4e:c0:f6:c8:b0:ae:0d:
                    6e:b1:4d:fb:78:8e:9e:13:44:50:3a:ae:ee:a0:10:
                    86:bc:8a:0d:7c:56:52:42:f3:01:6d:8e:35:0a:8c:
                    3b:66:db:1b:97:5c:26:44:4f:2d:34:64:1b:9f:00:
                    34:53:ea:5a:da:f0:00:88:fc:54:e6:3f:ad:90:8e:
                    18:ff:13:c0:f5:b6:e0:bd:e5:ca:47:cb:ef:21:ed:
                    66:da:c8:6c:11:be:26:0e:e5:07:21:45:10:ef:7f:
                    91:4d:8b:93:bf:13:91:e3:29:27:d7:c8:c7:4c:4d:
                    fb:8f:63:5b:fc:6e:3b:d7:f0:4f:9b:d4:5d:c4:e7:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7B:B0:DA:0A:F5:E4:76:A3:69:EF:95:11:B4:F0:13:F9:46:8C:96
            X509v3 Authority Key Identifier:
                keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:59:1d:16:80:b3:bc:e4:c0:0e:f2:95:8b:eb:76:e5:54:e4:
         43:48:bd:49:30:72:f1:6a:70:35:6d:46:c7:e0:74:78:e4:7e:
         65:9e:7a:2d:d5:91:41:d9:19:67:14:e3:eb:1e:f3:8f:e8:55:
         25:c4:12:96:fd:29:02:c5:db:18:74:6c:16:e3:e1:95:16:f7:
         a3:cd:01:a1:b3:b2:f1:a6:6b:63:e9:c9:81:80:df:23:0d:5f:
         d3:30:eb:d6:76:6c:a8:6c:46:55:90:2e:e2:e7:c7:e3:13:ea:
         e2:91:29:14:46:96:42:f0:dd:8c:5d:e6:10:6e:63:8b:9c:47:
         40:6e:19:69:4d:f9:73:0a:ca:bd:48:1d:1c:95:94:8d:76:4b:
         1e:66:2b:6c:37:a6:42:64:7a:3f:a0:94:64:72:98:80:eb:7f:
         ae:a2:17:a5:75:aa:43:fa:fd:43:c6:7c:db:bf:39:f7:92:d5:
         93:6f:7a:a8:93:70:09:af:06:67:1a:49:d3:e9:83:eb:5d:f5:
         dc:2b:d6:d5:a2:e4:ac:51:20:fb:96:fc:02:97:e1:74:a2:3e:
         1c:07:b7:7f:a4:08:25:67:52:7a:76:07:5f:e3:e5:42:2c:f4:
         24:4c:86:eb:32:40:8d:20:92:db:4b:4d:b9:f3:8c:24:c0:4c:
         df:77:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:18 2025 by rpki-client