Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File:                     v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier:          3xSCbUFXAmzqsP3RJ9KiAt9gElXODxIdkN0+Cfh6HBU=
Subject key identifier:   19:28:00:A5:CF:36:EB:3F:07:CF:57:42:82:5C:97:1F:72:99:D5:67
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       0197782F7C957BDA1AE4600E0D6B75E6E1BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number:          0E68
Signing time:             Mon 16 Jun 2025 10:01:07 +0000
Manifest this update:     Mon 16 Jun 2025 10:01:07 +0000
Manifest next update:     Tue 17 Jun 2025 10:01:07 +0000
Files and hashes:         1: Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa (hash: C2g4als5ZUHI2t4/02+/9yFNtLBjw/6au4Fyo7199Fw=)
                          2: FL4VCP2ebS0KpzdEEjgpeOZ0WHU.roa (hash: a8hxfR30jfZG7itjDgkJbvAUR1rTEz6wQmvQZHvY+Vg=)
                          3: LWIsGZerMX3p84vU2rGIj-HLsj4.roa (hash: V653yeNd9OWwSecStXWVbNQrGBjKZX6SHpE0zx75CIQ=)
                          4: NXFNvPreWKmytgudduJxNubp9ag.roa (hash: x5KCpK9l6cPAujJ1sPogi+1hAmWtq6th1heWKUVMPlY=)
                          5: kbTOh855t8tddDIlGKiPIgCKjmo.roa (hash: O0yoE+XLznGQKt8h9/FERhJPYLw6A2Fz2mE/56qBkRw=)
                          6: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: X4qnF7u9iFbbywpnNzOS2zN0Lu+G9eQnZ4sw/ytxOCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:2f:7c:95:7b:da:1a:e4:60:0e:0d:6b:75:e6:e1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Jun 16 10:01:07 2025 GMT
            Not After : Jun 17 10:01:07 2025 GMT
        Subject: CN=192800a5cf36eb3f07cf5742825c971f7299d567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:76:56:76:7b:52:40:2b:c4:e1:b7:83:15:
                    bf:87:49:bf:12:3a:90:bb:85:e6:03:be:11:7d:e3:
                    5f:42:7d:17:66:8d:9d:ba:75:3c:dc:b4:77:68:be:
                    af:be:a3:e3:df:3e:91:12:da:ea:74:fb:0e:f6:a2:
                    b6:bc:a1:3b:23:4b:fb:5d:3e:f4:2e:9c:9b:57:09:
                    7e:b3:f9:1f:a3:7e:2a:d3:d4:d8:dd:50:cf:6b:7c:
                    6a:1e:22:d3:f8:f6:d6:49:47:b3:42:e0:94:78:88:
                    4c:c4:b4:b1:ce:f3:4c:25:53:c1:23:17:37:2a:d7:
                    0e:54:a9:bd:67:f0:5e:c4:b9:14:ea:ae:c9:cc:d7:
                    41:df:e1:fe:37:d6:dc:92:a9:bf:88:11:92:97:5c:
                    64:68:d1:d2:d6:e7:86:e5:ae:78:a3:ae:74:63:82:
                    f0:42:56:1b:e3:b2:33:03:56:64:1c:e6:3e:6b:91:
                    e2:60:bd:29:4f:8d:6d:9b:a9:31:58:e8:55:54:12:
                    31:9e:4d:ef:6e:ae:01:31:a4:a2:11:3b:58:a3:2a:
                    9f:79:ef:ee:7f:ab:27:c2:9e:cf:f7:7b:9c:15:6c:
                    87:c0:4d:a0:d0:2a:5f:3b:12:58:a4:31:b4:1e:a4:
                    50:47:e5:79:ed:a8:b0:a3:55:c3:45:47:c5:fa:fd:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:28:00:A5:CF:36:EB:3F:07:CF:57:42:82:5C:97:1F:72:99:D5:67
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:99:c6:12:f4:d9:d9:ed:3a:ed:1d:68:91:3c:6b:cc:fa:
         dd:07:b4:64:ee:c6:6b:db:0c:c2:11:8c:d0:c7:7e:89:cc:75:
         07:da:67:c9:1a:44:ce:f9:25:4d:a0:82:38:46:47:96:0e:32:
         79:a5:7f:a8:48:95:6d:a9:f3:8a:cb:cc:3f:ab:60:43:cf:c5:
         c1:e0:d7:da:94:92:88:c2:a6:af:5a:af:27:3e:63:34:48:59:
         de:70:aa:58:65:2f:0e:29:f7:33:fa:b9:bd:d4:40:66:ea:70:
         87:e3:51:e7:9c:b4:09:3a:35:d3:1e:ad:85:fc:9d:a1:0b:53:
         03:01:7d:77:b9:ed:53:2a:70:d4:6a:b8:bf:59:0e:19:1f:41:
         7e:c8:2f:f8:72:2c:01:72:2b:f5:91:c0:e6:a9:07:c5:3a:fd:
         2e:84:22:a2:6c:c4:86:54:2d:24:f5:4d:7a:ba:7c:6c:1d:a7:
         2c:32:a4:86:bb:80:bc:ac:b7:b8:1c:8b:7a:c6:48:99:10:c3:
         e8:b4:a6:7e:51:e1:c7:37:5d:43:9b:4c:5e:1e:c0:f3:4d:6a:
         ab:40:1e:10:37:22:bd:8c:e7:1b:4a:1f:8e:f4:82:e5:2b:41:
         e4:66:e7:a5:2e:0a:52:c5:cd:73:60:e9:a3:80:d4:8c:a0:00:
         de:0e:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:15:31 2025 by rpki-client