Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File:                     CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier:          5fxzp4EJK+Ece9immfh5uNj0FYV/1DyAyiVCkDxgflQ=
Subject key identifier:   7B:80:E8:44:80:AE:A6:D1:DE:05:13:24:3B:E7:61:9C:ED:D2:02:92
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer:       /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial:       01976C2AAE5A64C2027FA5B76F5BD0AD01AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number:          1004
Signing time:             Sat 14 Jun 2025 02:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:25 +0000
Files and hashes:         1: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (hash: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=)
                          2: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (hash: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=)
                          3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: ev8nnDp8us1KgMzfV0tL/7x2K7hmAoBWsVdunAqRkVg=)
                          4: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (hash: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=)
                          5: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (hash: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=)
                          6: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (hash: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:ae:5a:64:c2:02:7f:a5:b7:6f:5b:d0:ad:01:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
        Validity
            Not Before: Jun 14 02:00:25 2025 GMT
            Not After : Jun 15 02:00:25 2025 GMT
        Subject: CN=7b80e84480aea6d1de0513243be7619cedd20292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:f3:dc:e8:c1:f4:e6:06:e6:2d:c5:63:c0:
                    4b:33:bb:ed:e7:c5:c0:9f:97:4a:24:43:14:36:ff:
                    9a:7f:b0:42:c1:47:e4:24:cf:85:23:d8:a9:2d:00:
                    9d:23:f0:c7:26:4a:d3:b6:3c:d4:51:10:6d:e8:aa:
                    8e:79:24:8b:38:bb:79:d2:d9:12:a6:44:c0:d4:04:
                    5a:d3:35:5c:11:40:fc:4f:8d:51:dc:9e:b1:55:f2:
                    17:88:0c:ec:33:fd:06:8d:de:2e:76:9f:2d:9d:00:
                    87:dc:fb:9f:8f:6a:6a:43:29:2c:bd:c7:63:93:9c:
                    f2:94:64:48:5c:6f:10:52:c0:98:ea:e2:36:04:ab:
                    b2:80:97:c8:80:1b:a1:7d:f6:75:ba:29:b5:17:71:
                    ab:ed:91:03:6a:c8:9b:e8:c5:da:50:94:17:33:80:
                    7b:04:6a:c0:ef:04:d8:90:47:11:53:1e:64:78:ad:
                    31:c6:60:49:14:3c:62:53:a1:81:1e:e0:c0:44:03:
                    47:ce:99:0e:60:30:a5:e0:62:1e:8b:87:86:52:2d:
                    e2:6c:99:1f:48:a8:0d:2a:be:7d:c8:a2:0c:43:08:
                    24:8d:a6:2a:cf:a3:2a:58:a6:5e:19:ff:bd:d4:56:
                    5a:74:c5:ed:2a:d9:81:52:0e:9a:98:b9:95:d7:69:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:80:E8:44:80:AE:A6:D1:DE:05:13:24:3B:E7:61:9C:ED:D2:02:92
            X509v3 Authority Key Identifier:
                keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:e1:71:b1:6c:87:47:5d:f0:82:87:4a:74:4f:a7:9f:d1:75:
         bf:71:04:78:53:04:96:f1:3a:a4:65:b4:c9:96:7a:12:cc:0e:
         3e:a1:ac:f1:4a:08:f9:f2:a1:6e:aa:52:b1:7a:52:2f:1f:4c:
         bf:69:6c:5b:be:43:be:38:84:c7:bc:da:8f:15:05:c1:40:7d:
         a7:e2:cd:00:65:f7:ab:22:69:ba:5e:61:f4:09:21:dd:97:35:
         dc:33:9c:7b:af:b8:d8:f2:f1:f0:ef:a5:fb:79:2d:83:70:40:
         06:14:c3:b6:87:61:37:00:e5:6a:3e:15:2f:71:70:a3:e2:4f:
         94:0a:9e:25:a4:e4:3a:b0:13:b0:ef:7e:2c:be:97:71:46:bd:
         17:0e:ce:17:f9:7c:a2:15:fa:6d:7d:47:a2:85:0b:57:62:93:
         c6:90:7f:39:c8:4d:ab:62:ec:3d:d9:dc:58:6c:b9:f7:e1:af:
         de:d1:e3:01:0a:1e:3d:be:3c:bc:f8:9e:27:88:a6:ac:e1:6e:
         d8:29:93:78:d5:a3:53:e4:c5:ed:c4:fa:da:3a:73:b5:48:9d:
         9d:c5:0d:a1:07:d4:a3:a0:c9:29:c4:be:1a:86:f7:cf:7a:7f:
         c5:e9:62:2a:16:d2:5e:6e:ef:f9:4d:ff:0d:2f:ae:ee:de:dd:
         de:7f:80:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:59 2025 by rpki-client