Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
File:                     RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json)
Hash identifier:          36m8UCk8aUHEy6YIX9Mt/Iqgir0ZwAmOV8WcLrAOG2U=
Subject key identifier:   89:6C:41:43:59:07:D6:38:C9:4A:25:3B:B1:51:28:AC:E9:AD:A4:96
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Certificate issuer:       /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial:       01976F9A5A84A90D9FBC9014BBEF655DC7E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
Manifest number:          06C0
Signing time:             Sat 14 Jun 2025 18:01:15 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:15 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:15 +0000
Files and hashes:         1: Mr0WRrlMlv0_Evxeakjpwz7LiPg.roa (hash: gsCCcQlF73dWTqboxZPlvCMCNzkEYN7/m7aejhTDik0=)
                          2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: CGu+SBSD30Nbi5MsYWFe7dDrRwDcnCigJqWifV8zNYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:5a:84:a9:0d:9f:bc:90:14:bb:ef:65:5d:c7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
        Validity
            Not Before: Jun 14 18:01:15 2025 GMT
            Not After : Jun 15 18:01:15 2025 GMT
        Subject: CN=896c41435907d638c94a253bb15128ace9ada496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:98:5c:55:35:d7:db:1f:eb:f2:ea:98:67:
                    05:b1:3c:d5:6c:6a:01:38:04:28:1e:c6:c0:57:85:
                    08:20:79:19:76:c2:9f:01:b4:12:01:13:1d:3a:2e:
                    a4:b8:7a:af:9e:18:dd:cd:9b:43:10:16:17:c0:45:
                    b1:b6:82:4f:0f:70:24:26:77:cf:0f:f4:41:04:da:
                    94:54:c5:ac:67:3f:cd:33:b6:2a:98:30:67:d4:e7:
                    48:cd:03:d8:77:cb:84:23:59:a3:7a:bd:56:e6:dc:
                    15:30:73:32:4f:b9:a5:6b:d2:1c:85:33:bc:e4:c7:
                    b7:ef:90:d1:a7:b4:16:0c:84:e8:f8:a2:0f:e6:9b:
                    4d:88:86:fa:62:b8:1a:45:0d:ac:b8:94:65:4e:d6:
                    12:df:07:e6:bf:7b:88:41:22:70:85:95:ad:55:4e:
                    bd:da:16:7d:55:67:15:c8:e3:a8:b9:77:0f:2a:87:
                    c3:cd:e3:ff:53:dd:55:c0:ff:28:2a:fd:fc:50:1f:
                    2e:97:6c:df:a6:85:5d:09:97:7f:f0:10:85:6d:5e:
                    21:5b:e7:05:a5:71:52:24:95:8b:a5:55:59:60:42:
                    89:ed:97:a0:f2:2a:94:d0:10:9c:3f:6b:74:3a:38:
                    74:7f:fd:87:f9:0c:0b:c1:42:53:ea:c5:4b:b5:43:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6C:41:43:59:07:D6:38:C9:4A:25:3B:B1:51:28:AC:E9:AD:A4:96
            X509v3 Authority Key Identifier:
                keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:41:cc:c0:92:3a:13:5d:20:ed:5f:8b:97:c6:fb:7e:db:27:
         37:c1:6f:d0:c5:63:31:e9:ac:30:7e:d6:76:d8:6f:e0:10:76:
         3a:61:f6:ca:ea:07:aa:a2:00:8d:77:f8:b5:05:ad:ef:51:9c:
         26:a9:f1:c8:b8:4e:81:61:8c:9b:56:3a:22:92:fb:cd:05:fe:
         04:79:b4:3b:43:02:58:05:41:56:8f:25:11:cf:87:78:f6:db:
         66:5a:5c:a4:80:5d:ac:d2:a1:e2:e5:eb:6c:0e:44:29:e0:db:
         0c:4c:7f:8c:52:6d:2d:38:eb:b6:48:70:5a:cf:be:3b:15:d2:
         37:f5:33:a6:61:82:7b:fd:c0:a7:1e:d0:74:a3:18:51:f4:d1:
         eb:5a:94:d0:74:8f:64:16:bf:cf:d8:40:f1:62:45:0e:91:5d:
         0d:a8:3d:c2:50:22:ea:43:27:b3:95:a1:b3:86:83:86:05:7d:
         e0:1e:81:9d:29:95:8b:fc:e9:36:15:f4:8f:cd:f1:1b:3d:8f:
         86:64:c4:aa:2c:18:d7:84:f6:8d:dd:e3:d6:9b:ab:8b:50:5a:
         e4:cf:3a:1f:28:59:ed:4e:17:e8:0b:4f:1e:6d:25:46:3c:8c:
         70:53:50:c1:29:92:31:04:0d:65:e5:9c:fb:da:23:67:f1:10:
         3f:2b:34:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:58:12 2025 by rpki-client