Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File:                     rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier:          Xntfvz+sfKOiapCIwK9CvlLrSHV9gZAnNP2XjkSt8GM=
Subject key identifier:   29:82:E6:54:77:7A:E0:F0:22:82:06:6D:0B:E7:7D:F0:23:33:CC:7C
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer:       /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial:       019776E5F90AD5D7D9D66CF72BE071A29D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number:          0C7A
Signing time:             Mon 16 Jun 2025 04:01:12 +0000
Manifest this update:     Mon 16 Jun 2025 04:01:12 +0000
Manifest next update:     Tue 17 Jun 2025 04:01:12 +0000
Files and hashes:         1: 1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa (hash: a5qc0h3BhqmeqSpAZh7GFmd10hjtqvPl4/lqfepgblo=)
                          2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: YH89EBEX9oQe2A/3ihKJx09K0zV1CnO7IwRKf2GTHic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:f9:0a:d5:d7:d9:d6:6c:f7:2b:e0:71:a2:9d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
        Validity
            Not Before: Jun 16 04:01:12 2025 GMT
            Not After : Jun 17 04:01:12 2025 GMT
        Subject: CN=2982e654777ae0f02282066d0be77df02333cc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:47:62:0e:a6:48:52:2e:bb:d1:07:a2:35:
                    43:f4:71:57:9a:59:e8:89:8e:be:a0:a1:75:39:78:
                    ea:96:e4:f1:50:9b:c9:ab:22:15:7f:9b:08:ec:38:
                    92:4a:1f:38:bd:b3:66:13:ec:ca:32:34:e9:8f:46:
                    d6:c2:5d:7a:b6:64:67:1f:73:2c:2d:90:7b:74:ea:
                    ee:da:18:ea:57:0e:61:7e:f7:f1:6f:04:69:ce:3c:
                    e3:18:e2:5e:33:bc:1e:b6:9f:91:a1:9d:d6:ea:b8:
                    d2:b5:76:5c:10:39:f9:12:52:0b:9d:c7:74:f3:50:
                    f5:ed:a4:ab:01:80:39:c2:4c:40:2e:5b:2b:8f:db:
                    03:fe:60:f8:0e:f3:0f:45:0c:b0:26:2b:63:df:b8:
                    89:91:a5:8b:57:88:5f:6a:0d:ed:c9:39:a7:11:f5:
                    cb:9f:00:1a:32:8b:ea:ab:0f:1c:f0:d9:02:1b:f6:
                    d3:b5:a9:08:c5:38:ff:4a:20:24:4d:c4:1b:be:8d:
                    47:32:e0:b3:2b:b3:93:47:6f:83:a0:dd:5f:8c:62:
                    7a:b0:95:9a:30:56:16:60:16:32:e9:bd:4c:8b:f0:
                    44:f8:7c:2d:27:6c:fa:73:c2:cb:fa:e7:82:2a:f6:
                    f6:d4:ab:59:5f:9b:c6:20:60:da:d4:dc:d3:31:c3:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:82:E6:54:77:7A:E0:F0:22:82:06:6D:0B:E7:7D:F0:23:33:CC:7C
            X509v3 Authority Key Identifier:
                keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:47:bf:86:f0:19:28:10:46:a3:ca:18:d2:a0:e9:3e:c3:f6:
         60:40:c5:ec:fa:7f:fd:aa:7a:5e:32:55:85:3c:b8:e8:dc:10:
         f3:87:07:1f:84:18:0f:ee:26:86:48:22:21:2c:91:b7:d0:f3:
         5c:f4:2d:0b:a5:48:c6:ff:10:78:bc:47:11:b1:f9:24:57:79:
         b6:74:91:3e:48:50:2d:5c:91:2b:b1:ab:fc:70:2e:9f:12:d9:
         39:45:b4:2a:c4:00:00:36:d3:30:03:2e:49:fd:ca:1a:a9:27:
         0e:10:23:2a:70:00:9b:11:63:7d:ae:5f:c5:c3:6a:76:be:c1:
         34:ef:4d:6a:84:ad:b5:48:e6:b7:21:85:48:9d:d3:97:53:21:
         90:d1:2b:51:53:c2:10:d6:26:e7:c6:c9:d8:b9:73:c9:17:aa:
         76:9d:7d:b2:16:b7:06:04:86:ea:32:cd:2a:4b:a3:ab:65:4d:
         a1:4d:08:36:2b:93:54:31:b6:9a:89:ed:9d:69:76:a8:3f:26:
         c9:8e:6c:7c:8a:7c:d8:35:b9:e7:b2:b4:8a:67:5a:b7:45:68:
         a2:1a:c5:a0:e6:71:29:c2:d8:09:1d:c4:c0:92:d8:8f:ef:1b:
         13:54:c4:91:64:a1:62:ae:d1:05:98:d0:ca:7c:8e:ba:43:63:
         a1:c1:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:14:06 2025 by rpki-client