Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
File:                     8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json)
Hash identifier:          zWlx26lQccliPnyi/JiVzUTvg7SNp3jqC6YqZg5aAAw=
Subject key identifier:   FA:E1:A5:69:1F:99:7A:FF:FD:A5:72:9E:9B:A1:A9:5C:A2:0F:E2:B7
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Certificate issuer:       /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial:       01976EF5298ECAC0B0FE1F2146AFC623D74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
Manifest number:          159B
Signing time:             Sat 14 Jun 2025 15:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:50 +0000
Files and hashes:         1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=)
                          2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: nq/POW/LKdRfLQBG+t/3L70lRm4LD63Ao7zOaB6lzCY=)
                          3: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=)
                          4: _nUioJBQYiP_fVr8BJqtm1b4PRs.roa (hash: 8TwcjLFByQyQOwz+CZFr+OHfzp46TUFKqsAmkEkj8SM=)
                          5: aTc8S3bYqZoD9jiepL9oUB_LXc8.roa (hash: ZM0nvVCM2yUnFFGdw51jOTnM2p1Qj9SS/GteRoRmdLI=)
                          6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=)
                          7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=)
                          8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=)
                          9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=)
                          10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:29:8e:ca:c0:b0:fe:1f:21:46:af:c6:23:d7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
        Validity
            Not Before: Jun 14 15:00:50 2025 GMT
            Not After : Jun 15 15:00:50 2025 GMT
        Subject: CN=fae1a5691f997afffda5729e9ba1a95ca20fe2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:c9:73:b6:d5:e6:c1:e9:31:7d:8d:7d:f0:
                    ce:27:f9:9a:3f:4d:08:93:0e:af:0c:fc:95:fb:5e:
                    17:46:88:f4:bf:61:8d:d8:1d:e8:e3:8b:43:54:88:
                    7f:db:93:5b:e6:d3:78:3d:36:11:f2:11:ef:10:47:
                    e1:d8:e3:7f:8e:ec:de:0a:7d:1a:ff:23:c8:fe:5c:
                    fa:ab:a3:d6:31:0c:f3:cf:6d:0f:f5:ec:b0:90:8d:
                    2e:be:7e:64:2c:e1:de:6f:97:f8:8c:5f:26:43:58:
                    d2:49:b2:f6:c5:d4:32:b1:b3:02:0f:35:84:f8:0b:
                    34:6f:15:05:27:c4:f4:c2:b6:b6:0b:16:71:dd:84:
                    b1:b7:55:19:2e:cf:5f:85:bf:56:eb:f5:39:c5:c8:
                    3e:50:96:7a:de:3f:89:1a:4d:54:49:7e:64:86:3f:
                    80:05:2c:a2:2d:17:0a:28:1f:40:66:39:6d:fd:22:
                    46:cb:5d:0e:e5:f8:70:a3:b5:9c:ad:41:86:83:b1:
                    a7:5f:47:13:83:22:ad:5b:9b:f0:54:c5:ba:5f:c6:
                    1f:f0:f8:e4:41:bb:65:93:1e:08:ab:41:ee:68:46:
                    b6:2e:b6:40:d5:78:8c:0d:a1:0f:e6:36:5e:3b:12:
                    59:2c:ac:0a:7f:2a:ee:bd:2d:fb:9f:f7:b0:33:d3:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E1:A5:69:1F:99:7A:FF:FD:A5:72:9E:9B:A1:A9:5C:A2:0F:E2:B7
            X509v3 Authority Key Identifier:
                keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:25:94:85:4c:30:1f:ad:18:c4:23:79:cf:28:1c:0f:89:11:
         40:25:58:48:3a:5f:e6:b3:73:8f:67:f2:24:1d:f9:df:51:d9:
         91:bd:57:a6:11:de:2e:75:17:b4:57:fc:e3:49:4e:5d:10:6d:
         84:be:f3:58:76:77:45:98:0b:93:26:1f:d4:28:c8:2b:29:3b:
         fa:41:7f:f8:93:73:9d:9c:3e:cd:69:59:b8:b2:ca:5e:5e:03:
         f9:ba:38:f6:62:8f:05:04:a2:d3:00:28:82:bd:3b:b3:e0:2c:
         61:3c:71:7c:44:5b:11:02:be:78:ae:2e:68:50:3f:5f:08:16:
         b4:5f:4c:99:45:f0:b2:44:b2:bc:77:57:b2:29:01:bf:f4:b5:
         e8:92:d0:a0:24:39:69:d3:42:e4:72:7e:42:47:48:f7:76:99:
         ad:db:ac:a8:a6:9d:ad:c1:af:79:9e:65:dd:85:06:9c:5f:a0:
         ba:93:0f:dc:44:85:e6:d2:95:f1:40:d0:eb:da:41:ed:1d:98:
         38:c6:5a:6b:40:a3:39:ce:cc:2b:b4:44:96:4b:8d:83:11:ef:
         3d:c9:0d:4e:fe:d4:01:b7:51:8d:74:cc:ab:ec:c8:3f:ab:5b:
         46:e2:6d:ec:49:65:c3:44:8c:ad:df:8e:58:14:a5:15:14:e5:
         c5:12:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:04:30 2025 by rpki-client