Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File:                     crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier:          cbrKu0qTod21z7SOcwk/GsGrMoeN55HMydNDHmub8/k=
Subject key identifier:   10:36:26:52:9E:C2:2A:00:B1:62:18:8B:4B:F3:83:D2:A0:EE:DB:EA
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer:       /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial:       019774BFFD83DB94A0C9BE5C2530F4367A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number:          1633
Signing time:             Sun 15 Jun 2025 18:00:28 +0000
Manifest this update:     Sun 15 Jun 2025 18:00:28 +0000
Manifest next update:     Mon 16 Jun 2025 18:00:28 +0000
Files and hashes:         1: 0OZkbbyiMfqEfV6yyCrB9dZN96k.roa (hash: yh5A+U+9EnV2n5u+gDax0tr2hQqxxV1tomwYV6gGiGM=)
                          2: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=)
                          3: 7J5qgHesr8wWK2TtMcGOHR0g-CM.roa (hash: m+yeQoMNlQS5YjZnJ89DZy7/qcwwyYmIihQriZ/SkzI=)
                          4: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=)
                          5: BL8I68n0S5EatljR0k4XZsKHA24.roa (hash: iOoLcUwIbkzuVCDzFIpNedtLQogspd3V7HdfhJiPZWg=)
                          6: BxtsjwaylqDgyShxS785H67TnbY.roa (hash: tVOA9jGSji8cVYr6ivVtJAHBG6QSJ270Wt89fBmSzFA=)
                          7: DS5gBLYyptdZ9y27hbFJurp9kuI.roa (hash: zoDKZtl19sULYhyiEZp0I4zijHRFp+OWa8jMMxoXiV0=)
                          8: DskJ3QKfzbRX76wY5Y62eU4erR4.roa (hash: Om0rFiAWDXCVX1P62G7M/6mKMjWs5VmA/8EV8q++G+4=)
                          9: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=)
                          10: JgPouA_jmpHV5hDbLij9YLal33o.roa (hash: 7YwHFYuVdRf9mWnshpfvLYgyOJrwWP6qz4/AQwJWL+Y=)
                          11: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=)
                          12: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=)
                          13: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=)
                          14: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=)
                          15: Q7A84Re88TEGuWZsIYTnNdLRtqQ.roa (hash: 62XanU5j/TVPu9hICaR497zqHzXQbEaOUBFnOheHiVs=)
                          16: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=)
                          17: Vb_RpJ-2VDeLhxtyu1EnKEq8cTI.roa (hash: H3HLjc2fYtCp8h81NRRKqe5UGP2PQxcS5tkL3rkueM8=)
                          18: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=)
                          19: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=)
                          20: ch0MG1Pf_PwDPyZwFVxvjBk8eXE.roa (hash: v4I5l9w0eZIAMijusASzIenyF5WUP0NZIKYlKivPmyQ=)
                          21: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: 9cGWID/EH+qpH3UyRpZEw6yBMDeiNoC1Wt7bgENwTwQ=)
                          22: f9zO6CoqO3IdDJ2sCc8aCS7MLYo.roa (hash: 0lS/IGd/1FNWeyp8qTQLTXLYoqsEWJxdvhxxV1xrQj4=)
                          23: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=)
                          24: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=)
                          25: mJ-PnuZffkBvMXhplb_lo8QtEyc.roa (hash: cnmwpchuXHms2rojiNGzRDXyf/+oMqIEDUIf1Odq2us=)
                          26: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=)
                          27: tVVPJt8BYRtl2dfGI34tW-1ncpU.roa (hash: eJCGFadx+OvG3OgK6PxfcX9iXCcThEI+1VCJ4h+/DrY=)
                          28: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=)
                          29: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=)
                          30: zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa (hash: OeT1n7LBHt2BLA6NJKyqqdEda9ZFBBnrzNwADjp7exA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:bf:fd:83:db:94:a0:c9:be:5c:25:30:f4:36:7a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
        Validity
            Not Before: Jun 15 18:00:28 2025 GMT
            Not After : Jun 16 18:00:28 2025 GMT
        Subject: CN=103626529ec22a00b162188b4bf383d2a0eedbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:6d:89:06:31:6f:fa:c5:3d:9f:d3:5f:2f:
                    84:4e:5e:2b:6b:87:93:d1:14:7c:0b:73:ad:87:37:
                    36:50:0a:85:25:6c:9b:b0:f4:34:49:de:c5:e1:b9:
                    28:41:ac:aa:c3:aa:10:18:81:a7:7e:a1:58:3e:1d:
                    82:f6:fe:0a:f9:51:e7:a0:e1:96:ed:79:44:80:19:
                    9e:cb:55:98:76:5e:64:f1:ff:f9:ee:a5:43:a7:aa:
                    ef:7c:5e:83:68:01:9d:c9:9e:86:71:9c:11:f3:70:
                    6a:1a:15:53:64:a9:ed:04:00:5c:60:66:4f:8a:00:
                    df:84:ed:8e:c7:c0:54:bf:23:b8:be:5e:a7:db:b5:
                    64:c1:b2:e4:fd:f2:82:c3:42:b6:c9:60:e8:24:4e:
                    0b:06:62:90:16:b2:ec:53:12:5c:b8:b7:03:54:c7:
                    ce:54:c7:5b:0d:80:e0:70:5b:df:0d:65:a6:f7:49:
                    5d:be:c5:42:da:95:25:8b:43:d8:d0:fd:5d:a3:78:
                    5e:11:f9:c9:09:0d:64:31:ad:19:82:04:a5:be:44:
                    1d:13:e3:70:5c:cf:df:6f:43:9d:9d:35:1c:ba:a4:
                    53:6c:05:6c:9e:e0:d5:37:9f:c1:13:d5:6b:46:69:
                    03:a1:53:0b:ca:cd:f1:04:85:9b:9f:46:be:b2:4a:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:36:26:52:9E:C2:2A:00:B1:62:18:8B:4B:F3:83:D2:A0:EE:DB:EA
            X509v3 Authority Key Identifier:
                keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:04:c8:29:4e:5d:09:9a:df:96:84:b6:8f:e4:be:ae:45:
         4b:74:dd:d4:ec:3c:b9:b4:81:56:55:c4:e2:be:aa:f7:c2:14:
         6f:b3:85:b7:e3:31:b7:22:4e:f2:d2:1c:49:a5:a4:7c:f4:a3:
         47:30:a6:01:93:6d:5c:3c:65:64:5b:8e:d7:f7:79:22:a3:e6:
         a4:c1:fd:eb:dc:55:64:00:be:cd:ef:d4:19:0f:17:5e:70:bb:
         d5:18:58:7d:8b:f2:8a:ef:46:3a:69:36:13:5a:0e:a6:7f:d1:
         ac:3f:77:ee:10:94:a4:73:b3:55:6d:74:fe:ea:ec:aa:fe:2a:
         f1:da:f0:88:9d:89:65:eb:64:b5:fb:83:99:55:ec:35:2b:73:
         d5:9a:05:80:62:9f:38:29:ce:7d:01:ca:7f:e0:d1:3d:20:76:
         7d:cf:98:5b:eb:f2:eb:9a:f9:33:b4:b3:24:4b:8d:33:aa:9e:
         26:49:3c:23:85:31:26:d0:ec:5b:c9:d1:a3:6b:d0:1a:18:c1:
         04:1f:44:5a:eb:08:7e:e1:7a:2e:9e:ec:d9:5e:f7:fa:19:cc:
         15:1b:f9:9a:d3:03:1f:b7:90:82:a6:41:ec:42:87:61:60:ea:
         9b:5c:f6:fb:d0:57:2c:74:8e:9f:80:e2:e2:da:ac:a9:8f:2f:
         20:68:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:38:45 2025 by rpki-client