Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          BQsqLISFK6zMVBvm3YXNJb1+wB3HIyo6a4DiXhJJxRE=
Subject key identifier:   BF:F8:70:5F:C2:79:4B:8A:CD:8A:A9:82:47:A8:99:46:6B:A2:B6:DE
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       019769CEEFAD86B6EBAF401717E9A0679466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          1634
Signing time:             Fri 13 Jun 2025 15:00:58 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:58 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:58 +0000
Files and hashes:         1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=)
                          2: 0r24pIQSTUD5N5L07GOWGFKPpV8.roa (hash: trXkO9svjCxRC078/qaWkwZVcRw/r/RbNzaK05elAEs=)
                          3: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=)
                          4: KQ1oNR09mKgd5ku7SR1U_e9V9fQ.roa (hash: cs83TD53Tvlf/W2SbQnH3f+S/haNzyXJayHuIXfao20=)
                          5: PLHlOEI8OTEsrWEb9gcEoJkppTI.roa (hash: HqryYXEFzx4Aim3Zpzxpc+c6ErO0nPq1Js+lyJLuXYs=)
                          6: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=)
                          7: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: QT3SnuR+qreeBFk4PDzfom0xdNs+IKIn7TmrAc/AaPw=)
                          8: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=)
                          9: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=)
                          10: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=)
                          11: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=)
                          12: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (hash: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=)
                          13: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=)
                          14: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=)
                          15: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=)
                          16: pzkAj4_zAVXkRe0C_QHjEgzBj0Y.roa (hash: 3G1cxIfKvcRktJjL1ylmN8MQ4xGHLKTVnlOoY7cNz5o=)
                          17: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=)
                          18: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=)
                          19: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:ef:ad:86:b6:eb:af:40:17:17:e9:a0:67:94:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Jun 13 15:00:58 2025 GMT
            Not After : Jun 14 15:00:58 2025 GMT
        Subject: CN=bff8705fc2794b8acd8aa98247a899466ba2b6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:59:31:b1:e0:b5:a8:4f:1e:7b:da:c7:88:
                    e5:f1:bf:8b:5b:f0:4f:ef:37:44:9b:1d:09:5e:25:
                    06:bc:1e:82:89:1a:b3:25:0f:ce:9a:46:2f:2f:02:
                    10:11:61:31:94:9a:92:9b:4e:97:fa:39:2e:2a:4d:
                    40:16:2e:21:00:d2:d8:1a:b0:34:20:4c:da:bf:1f:
                    a1:08:36:e0:81:1d:52:84:74:51:ce:56:71:65:a9:
                    fa:9b:9d:37:4c:68:ae:74:c4:24:29:5e:62:99:33:
                    5b:d7:6f:53:16:1e:9b:43:e8:1c:ab:9c:a8:d4:ea:
                    40:7d:ac:4a:e1:90:19:f5:8c:a1:3d:26:de:89:c2:
                    45:8a:f3:8b:4a:16:47:7c:33:e4:37:71:d9:42:06:
                    d4:fa:b5:f1:3e:8a:7a:cc:fc:16:38:86:67:e5:4f:
                    eb:4f:1b:c9:45:20:5a:ab:40:6b:c8:02:41:0d:93:
                    b0:56:2f:fb:9d:c6:96:0c:f4:81:05:80:0a:9b:37:
                    b2:f3:ef:58:cd:16:1c:75:46:3f:9d:43:bd:fe:de:
                    98:5e:ff:e3:6e:da:85:9f:d8:ec:48:15:c8:84:73:
                    f8:b2:fa:0d:04:63:dc:0b:ff:7f:ba:2e:6c:b6:75:
                    57:1a:6e:5d:8f:76:14:7c:2c:56:dc:76:65:03:d3:
                    4b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F8:70:5F:C2:79:4B:8A:CD:8A:A9:82:47:A8:99:46:6B:A2:B6:DE
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:17:30:58:7a:ac:4a:88:0d:e3:1f:14:ff:f4:df:db:92:0e:
         82:27:0b:32:08:af:4b:8e:98:35:e0:56:cd:a6:20:91:07:9a:
         26:47:d0:5b:8a:cc:d9:74:c9:19:0c:a7:27:6b:2f:b1:c2:0f:
         58:27:d0:8e:ea:9d:79:77:1c:7f:46:66:3d:89:50:19:10:2f:
         d8:03:a0:be:d4:a5:07:20:12:d3:c3:bc:ed:8d:8f:1a:bd:15:
         e0:b1:6f:c1:9e:4d:ac:91:03:ce:84:32:cc:1f:16:1e:b0:f0:
         0a:66:f6:cc:0e:a7:e4:a0:13:8a:49:67:38:e9:d9:ce:24:d6:
         61:2d:32:05:92:0c:ec:67:6d:90:24:4c:5b:0a:f2:22:fd:b1:
         25:eb:b2:4e:78:1f:de:24:22:5b:ac:0d:f2:28:2d:41:05:84:
         07:ae:47:f5:10:95:33:fc:ff:bc:9d:62:6b:11:a5:ef:60:b8:
         ab:b7:cd:03:fa:e6:00:e7:5c:e2:29:39:ae:e9:98:67:0a:2f:
         4c:bc:a8:66:6c:53:77:9c:4d:93:81:88:10:0b:79:3f:97:8b:
         ab:bf:67:d7:c4:27:65:ae:9e:e2:29:aa:62:93:32:b3:8c:c4:
         67:c3:e8:0c:b6:39:70:16:4c:ff:04:b6:92:32:a8:19:25:72:
         20:51:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:20 2025 by rpki-client