Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
File:                     v-nxLJa6IGg6_1yVi_rY5MV39_4.mft (raw, json)
Hash identifier:          SMAiZCsMId3GC4bf/VCRnVj9bzaRx5foQ4sA34pxKOY=
Subject key identifier:   33:12:7E:88:5A:26:DF:C9:10:80:2F:AA:6F:29:4C:C0:0D:A8:23:07
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Certificate issuer:       /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial:       01977263EBAC1D70BD5A41A0E8C65F082DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
Manifest number:          15CD
Signing time:             Sun 15 Jun 2025 07:00:40 +0000
Manifest this update:     Sun 15 Jun 2025 07:00:40 +0000
Manifest next update:     Mon 16 Jun 2025 07:00:40 +0000
Files and hashes:         1: 6ibI6qCcc8WLdcP6CMTGiz_BdI0.roa (hash: LCx+/HsI5W/kRvmOW9i/GOPId5FYnywG1rm77J+nvfU=)
                          2: DnIZzoqhty_tg2bYNrh_vDtOBCw.roa (hash: UOVHlVipqtCkCU4NWu9RPIeuEbJNMZ2hNXSGsc+R+F8=)
                          3: ZTvZSbWIWloIdqV37DbtQi07aIY.roa (hash: lQEka4orv2/BKmCxU3FSbBYnm+siKkoc02AVPM16hvk=)
                          4: lDrZTd-Qb0rmvsSDqpVuWQPpdvU.roa (hash: l2541i2M1/tlvbUDelaRjH8ZrgWNAkwAm74fRpod33w=)
                          5: v-nxLJa6IGg6_1yVi_rY5MV39_4.crl (hash: sCOv8fnVrlZ3Rh4kEe6z8DUIBzEQRf347H4+W0NdfEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:63:eb:ac:1d:70:bd:5a:41:a0:e8:c6:5f:08:2d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
        Validity
            Not Before: Jun 15 07:00:40 2025 GMT
            Not After : Jun 16 07:00:40 2025 GMT
        Subject: CN=33127e885a26dfc910802faa6f294cc00da82307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:18:1e:0c:f2:f6:38:5a:3d:bd:7c:ac:19:
                    e5:47:d5:7f:5e:5f:9d:b2:05:62:10:b0:ab:f4:6c:
                    0d:c2:53:c6:26:e5:15:99:aa:c7:e7:97:c8:e8:94:
                    02:b1:4e:7f:62:1f:78:d4:d2:b8:e5:ef:9e:a3:8f:
                    23:5e:83:7d:92:24:d2:b1:f7:cd:35:47:de:3c:dd:
                    1b:a7:90:ee:0c:02:c7:e9:c1:0c:9b:ce:af:44:8c:
                    d6:fe:ee:f2:d8:c2:ab:3c:06:c0:f9:1a:e0:7d:4f:
                    70:fb:80:d5:2d:6e:d6:12:4a:d0:41:c8:9f:1c:27:
                    37:9a:c2:be:89:33:d9:ab:62:1b:6d:a7:a0:92:d6:
                    6d:1a:82:46:78:5c:06:57:59:52:39:63:a0:59:2d:
                    a6:a0:95:70:b5:6d:54:de:a9:99:69:a6:5e:81:63:
                    9c:92:b5:6f:cd:db:f5:0e:65:4c:d2:ec:62:5f:7b:
                    0c:8a:12:9d:7a:11:ac:71:ca:aa:87:c3:7a:91:72:
                    e3:36:cf:9f:e5:a7:6e:cf:eb:e0:9a:77:97:29:1e:
                    dc:8a:b1:45:44:d4:4b:3c:cd:23:52:0c:e6:fc:65:
                    ef:a0:74:b5:49:bf:f2:be:23:14:29:60:0c:15:32:
                    3e:f1:3b:f1:1b:66:71:d1:3d:c8:58:51:89:c7:08:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:12:7E:88:5A:26:DF:C9:10:80:2F:AA:6F:29:4C:C0:0D:A8:23:07
            X509v3 Authority Key Identifier:
                keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:22:1d:dd:20:78:01:0d:61:c2:9a:8f:e6:3b:e3:d5:5e:9c:
         91:11:37:ce:02:2a:ef:db:67:e0:cf:0a:94:a7:5b:f6:05:2b:
         50:80:8f:89:4d:5c:54:80:59:37:dc:75:7b:f1:e3:87:ba:ec:
         19:15:fb:e5:1b:a4:22:a9:2e:66:96:0f:4c:0d:13:17:2a:a5:
         43:8d:d8:7b:e3:98:fa:97:22:f9:ae:3f:91:21:93:26:4f:56:
         72:72:59:bc:c7:47:32:b2:2d:e1:4e:d9:2c:38:79:3d:ea:99:
         fb:4f:e9:65:62:ee:0c:f3:a1:c7:ad:f5:8e:1c:61:0a:86:fa:
         d1:23:70:b1:27:2e:71:a8:0a:61:09:9e:a9:4c:64:c5:45:83:
         ce:4b:78:82:e7:34:ea:7a:f5:e6:ea:f4:0b:4a:41:44:13:ea:
         12:73:12:96:2c:8a:5a:75:8c:06:55:a4:be:51:57:ff:31:95:
         72:08:e6:0d:34:d1:6a:fc:19:8e:e0:9b:81:82:a6:b1:19:45:
         7f:ef:31:76:ce:f8:5d:95:9b:fc:c8:5d:44:76:fa:55:28:eb:
         9a:37:15:a6:26:c5:5c:31:35:be:ba:fc:ab:94:a5:cd:f7:eb:
         46:d0:06:7f:e0:84:20:cf:a3:55:16:6c:c3:74:58:7b:fb:bd:
         0c:3c:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:31:02 2025 by rpki-client