Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          xGXPfoCK7yVQhcPsW01zPdNxnGlRE5fWvS223Gotk4o=
Subject key identifier:   FD:CC:DF:FC:95:FE:41:D4:45:05:35:B1:79:9B:9C:53:2B:FE:16:09
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       019769CF15CA214ECF57A0BABEBA0BD738A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          1395
Signing time:             Fri 13 Jun 2025 15:01:08 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:08 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:08 +0000
Files and hashes:         1: 9dLAFBA3yZtxQ3Sz-i3bboY76i8.roa (hash: XKwu2dm5EiilAMiU6vQWAsMs3u94DmEeOaG3OlX3RRc=)
                          2: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=)
                          3: mLzt7xGUveLWBI5KBd3nPnlkK34.roa (hash: gBHkMYqm2CFNHYl0R32/z6OsqeoYFanglt5qYzw7wHQ=)
                          4: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=)
                          5: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: E8Ygqosi7+0m+ol5kGZVmqAN/dqyGZkMpYHI+U1KAq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:15:ca:21:4e:cf:57:a0:ba:be:ba:0b:d7:38:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Jun 13 15:01:08 2025 GMT
            Not After : Jun 14 15:01:08 2025 GMT
        Subject: CN=fdccdffc95fe41d4450535b1799b9c532bfe1609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:fa:55:4c:9e:c7:de:b7:d8:ba:45:3d:50:
                    d2:eb:73:95:e7:4c:fa:b6:bc:de:d3:74:94:f7:16:
                    ad:8a:21:1f:b8:26:9f:0d:6f:e1:d2:99:0e:e8:f6:
                    f7:6e:50:03:62:a9:44:aa:ca:95:c9:4f:1b:1b:7d:
                    1b:b5:94:11:4f:0e:2a:43:ed:a8:b2:dd:3d:bb:dd:
                    a6:f2:6a:f5:b2:2e:78:1f:61:65:32:6b:ec:71:77:
                    65:13:a9:f6:90:2f:38:d7:78:98:ee:55:60:d1:95:
                    5a:b5:b4:33:de:4b:bc:89:d4:ae:ff:b7:25:10:40:
                    87:f9:60:93:db:e9:48:99:1a:1b:0c:f3:04:f1:ce:
                    c9:8e:14:2a:cd:c3:a4:7d:71:dd:fd:53:f3:cb:a6:
                    1e:87:3f:f0:c7:cf:23:35:23:6a:69:c5:45:7a:f7:
                    4a:b5:02:78:6e:d5:4f:ec:84:19:32:19:21:ed:42:
                    a1:0d:fa:3c:ba:d0:8a:e3:94:c9:ea:95:a4:f6:b1:
                    05:b0:2f:f2:2f:2d:bf:3e:21:89:9e:0a:b3:23:d1:
                    d6:5f:8a:e5:9e:69:a3:00:00:d9:36:31:54:2f:c3:
                    1a:c1:58:65:8b:40:c7:d5:90:b7:be:4b:55:19:37:
                    3c:aa:d2:bd:f0:9b:80:4a:0c:be:62:fa:a2:24:9c:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CC:DF:FC:95:FE:41:D4:45:05:35:B1:79:9B:9C:53:2B:FE:16:09
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b3:cd:d6:6f:07:94:85:d1:a3:02:2e:8e:b5:c6:f3:07:e6:
         39:f2:93:88:98:5b:4c:b6:d6:e9:ff:26:d7:91:cb:92:98:0f:
         c0:69:21:df:27:e6:34:bd:d5:0c:6c:bb:55:dc:a5:02:72:e5:
         60:48:75:1d:45:41:1b:d6:a0:73:ef:71:05:61:37:20:4c:b2:
         69:a9:e2:0c:0d:6b:97:b5:67:2d:69:48:41:c5:0e:8e:09:83:
         f7:55:58:f3:2e:80:93:f1:cb:ac:96:1c:e3:4a:2f:4f:8f:fc:
         ca:4e:eb:bc:54:1b:87:59:79:d3:55:91:f5:67:e5:4c:37:24:
         93:75:87:51:b1:7e:8f:11:f5:8e:5d:37:a0:bc:1f:74:08:3b:
         6e:a4:17:c1:02:ad:dc:22:90:25:ca:f1:12:d0:64:c0:0d:f7:
         a7:04:69:74:74:0e:95:86:72:68:10:d1:f9:e5:86:7a:2f:e2:
         5c:fe:4c:9c:42:71:8e:fe:77:4f:54:16:7d:de:26:bb:3b:43:
         ee:cb:a9:c3:e0:e6:06:e1:c2:d3:8a:3e:a7:77:6b:53:67:78:
         31:47:44:e8:7d:88:f1:70:23:33:f6:4a:34:88:97:db:7a:4f:
         f7:85:6f:fb:4b:a8:57:a5:b5:36:0f:8b:19:a7:38:28:dc:60:
         27:fd:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:28 2025 by rpki-client