Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
File:                     lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json)
Hash identifier:          YhBtVCpuKpOqNECi406G8Vxf4ivaMFoNsHkZlSFrurE=
Subject key identifier:   45:4A:72:21:3A:7C:C2:9F:FB:1E:CC:0F:0C:DF:E7:44:C5:BB:FF:C6
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Certificate issuer:       /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial:       01976960BB825FC7F069FBFABDF2509E5C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
Manifest number:          0CD6
Signing time:             Fri 13 Jun 2025 13:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:36 +0000
Files and hashes:         1: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (hash: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=)
                          2: abefSJyNsQ4kIHg_JbBrvyMZNs0.roa (hash: R4sEc9WgkQp8S9L0gh+lAeV2TR1f+UNjjiBWxu0UkWE=)
                          3: guRmkEKKRi3yIA2ms7Lm_Uw6LLU.roa (hash: GzLvOZNBYSJ/eLCppkRql6pMeRHG+UlZlmhw3iYs8mo=)
                          4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: Ah6g1h0ZFbA0FrWMbWsPrYmeoH+s/t7K9cl6/DiJTSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:bb:82:5f:c7:f0:69:fb:fa:bd:f2:50:9e:5c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
        Validity
            Not Before: Jun 13 13:00:36 2025 GMT
            Not After : Jun 14 13:00:36 2025 GMT
        Subject: CN=454a72213a7cc29ffb1ecc0f0cdfe744c5bbffc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:20:57:71:b4:a4:60:e0:42:1d:d4:7d:43:
                    e4:62:f4:15:9e:fb:14:30:ac:76:b6:9e:47:b8:be:
                    49:d6:27:5a:b2:a3:80:61:f5:9d:5d:84:2a:66:1c:
                    56:dc:3d:40:31:5c:01:86:5f:85:c6:c3:a5:0e:8a:
                    df:c7:be:09:b8:ff:b9:b2:8d:de:65:3f:31:ac:76:
                    e0:83:ab:59:96:84:c9:38:67:b5:b4:40:e3:ea:58:
                    a6:0d:de:5a:78:d7:68:4c:13:be:1a:67:6b:93:be:
                    d2:49:a6:db:8b:a2:51:5e:c1:be:b1:fd:ea:c3:f6:
                    1a:43:7f:47:8c:1a:13:fe:e6:ef:59:6d:a0:00:f8:
                    35:af:16:b7:ea:cd:8d:46:74:ad:a2:55:b8:46:cb:
                    86:1b:ba:c2:7a:bc:df:05:d7:b7:d5:fd:01:74:d0:
                    2f:f5:7f:a7:cf:4f:20:ee:45:45:ea:bc:e7:b6:95:
                    1c:be:b4:8d:a2:5a:56:d3:db:df:f6:f9:97:02:1f:
                    68:f8:78:b3:27:f5:25:9f:56:f9:13:da:d9:a9:ac:
                    9b:11:fe:56:73:15:2f:ce:6b:0e:70:85:f7:5a:47:
                    cc:d6:c8:22:aa:ee:5d:2c:0e:1f:97:0c:9e:09:63:
                    15:4d:45:ad:20:6d:ad:d1:06:9a:49:ec:cc:5b:14:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4A:72:21:3A:7C:C2:9F:FB:1E:CC:0F:0C:DF:E7:44:C5:BB:FF:C6
            X509v3 Authority Key Identifier:
                keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:63:82:24:55:d0:3c:98:0e:90:57:b4:f3:5e:3a:8b:60:d9:
         b7:8c:42:ae:6c:20:02:70:b9:c5:6e:d7:f0:19:b8:09:ea:c8:
         53:f0:a4:68:f3:e3:15:79:79:27:8d:71:6a:20:fc:ed:c3:10:
         b1:d1:cc:26:03:04:f3:8e:83:94:00:4e:c9:19:d8:21:5f:99:
         81:8c:a3:bf:4b:d3:3c:1d:3e:bb:da:25:a1:2e:d4:1e:f2:64:
         a4:1c:8c:bb:cd:f6:bb:95:f9:03:9f:ac:69:f2:fd:d4:44:a1:
         65:9c:81:d0:8c:d8:2b:c9:a0:1f:32:b5:4a:8c:14:da:26:a5:
         e5:e6:cb:60:0d:84:29:f8:6b:23:27:7f:62:00:c7:0b:16:af:
         9d:23:eb:62:2e:1f:09:f6:56:00:c7:45:22:77:34:39:08:73:
         eb:8b:c5:23:32:d9:b2:0c:a9:9d:b3:8a:de:b7:f2:e0:0c:ae:
         e1:11:00:29:31:4b:fd:26:96:11:25:5f:1a:8d:42:ce:f0:18:
         8b:fe:99:b4:d6:5a:7c:c6:e6:ed:38:5f:97:57:0b:86:de:5a:
         b9:e7:bc:97:2b:79:80:43:91:45:79:a8:fd:14:60:8b:5c:66:
         c5:4b:7f:22:b8:69:24:f4:62:35:0a:5d:3d:c2:92:3d:67:1d:
         e2:0d:66:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:48 2025 by rpki-client