Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          f2HceVebgoUWUnWQsb1j3d5kouonBair4Yh5u8NIjms=
Subject key identifier:   BF:87:B6:C4:25:24:37:02:FE:FF:2C:71:EF:02:7A:6A:09:98:F5:F1
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       01976D74616E87C66D56E1C10240F35139A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          12D3
Signing time:             Sat 14 Jun 2025 08:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:32 +0000
Files and hashes:         1: 48xH5tEXWZ2vsePNnUQpi1Rtp9M.roa (hash: WHr/LpVgK5v2vj342g/pLR9Q+sJ3hUKQeA6ICsPwqVA=)
                          2: ETntAp8qWJdvAD1JKZJVCJAE9wA.roa (hash: hfJtS+VPVR6qaIkwB60e9Ssm1Fsvf2mGWUvaOy9P8yY=)
                          3: alVgOiGQaygKKfRiNXMQm1ojUWU.roa (hash: aOJQStyVH2msGIdBHorM0kl3RBtrxvSgZcDUWInDqNM=)
                          4: q3J9TtOoI-IBP0Qit4nrBm2KIQ8.roa (hash: 6P7QPyce2/pI9ok7uG9x267locOdLMrJCvEmCKSQLwA=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: Nilbl4AKNXpkdE5NC5H5HakNKBSNWFQZ/AhpHpBMpNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:61:6e:87:c6:6d:56:e1:c1:02:40:f3:51:39:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Jun 14 08:00:32 2025 GMT
            Not After : Jun 15 08:00:32 2025 GMT
        Subject: CN=bf87b6c425243702feff2c71ef027a6a0998f5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:78:56:42:ec:d8:8d:25:67:00:7c:a0:bc:
                    71:dc:17:de:3f:cd:8a:fe:62:32:5c:4a:6b:8b:06:
                    4a:12:16:87:fb:5e:53:75:55:09:c0:47:f0:92:c7:
                    03:f5:ff:32:de:de:34:c1:e6:75:4d:5c:cc:f7:41:
                    f9:81:7f:21:c1:2c:d0:ef:7c:29:25:06:23:93:59:
                    d4:63:ea:c6:0e:e1:75:dc:d6:88:bd:c6:18:49:45:
                    49:87:19:a6:26:3f:e7:2f:c4:4f:4a:4c:aa:bf:7a:
                    30:26:ef:47:9e:7e:91:7a:5b:d9:37:86:4c:a5:1a:
                    ab:32:d3:36:9d:7f:5c:a4:fd:d2:24:b9:7e:79:cc:
                    34:50:cb:2b:d3:40:56:3c:6d:f7:9d:44:66:ed:10:
                    cc:9a:e1:dd:ad:c8:f0:c1:7e:5e:29:4e:a7:90:89:
                    b7:55:f8:a8:c5:5b:46:d5:10:7e:e1:a7:39:22:a4:
                    05:8c:e8:2d:99:fc:84:47:a1:83:da:49:74:b4:21:
                    31:45:1e:d9:9e:73:09:3d:75:d3:85:89:42:56:f1:
                    c5:5f:1d:31:e2:4e:f1:ec:6f:c8:02:e9:ff:e5:20:
                    63:cc:67:92:fd:fe:50:82:eb:6b:aa:03:41:f4:e7:
                    8f:93:3d:84:c3:45:60:8a:09:e7:e3:75:62:38:5f:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:87:B6:C4:25:24:37:02:FE:FF:2C:71:EF:02:7A:6A:09:98:F5:F1
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:d0:6d:98:5a:35:05:13:d1:77:3b:fb:49:67:6f:44:b4:
         4c:91:56:c9:18:60:90:5c:0a:0f:94:c1:69:22:7b:53:13:31:
         95:7f:cc:24:4d:a1:51:08:1c:4c:1c:3c:c0:a8:55:8f:89:91:
         74:33:17:1e:b8:10:af:eb:fe:eb:eb:5e:e0:4e:a9:11:46:59:
         c1:a8:fa:88:fa:c9:6b:c1:d0:c9:d9:b0:c3:e3:99:7e:cb:c0:
         90:e2:60:31:8f:4d:b8:99:96:7d:9a:56:1a:49:2d:b8:cf:99:
         8e:e2:88:71:63:9d:db:98:e3:07:ed:ad:cb:61:28:7d:55:a0:
         46:12:d2:42:88:f0:65:d2:00:5b:fa:86:d9:6b:7f:3e:bc:2b:
         b6:80:18:27:ac:3c:00:ea:a5:cc:03:e3:42:65:5f:85:84:c1:
         27:5f:93:a7:09:c0:d5:54:34:02:eb:f5:46:63:41:6c:23:eb:
         ad:6e:4a:a6:8c:92:fa:85:d6:3b:0c:b5:21:b8:8f:a3:11:94:
         cf:1c:a8:e4:9d:96:5a:3c:f3:f7:85:bc:5a:db:86:47:03:39:
         36:84:fd:a5:bc:01:c6:42:4b:14:c4:86:24:c4:b8:c5:db:76:
         30:29:b8:11:6b:39:34:4a:03:8f:8c:b8:5c:32:58:cf:e1:13:
         3b:dc:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:21:12 2025 by rpki-client