Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File:                     sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier:          aqc2f7tEa5RjldhXkHbewgt8TYZijOOmfaTtgZVYWsw=
Subject key identifier:   05:DF:B5:D8:67:AB:61:0F:59:A6:FB:90:5C:5A:98:EF:D2:4B:2B:79
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer:       /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial:       0197499F6B301A19A86FBCBCDEAA784F2CF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number:          052C
Signing time:             Sat 07 Jun 2025 09:01:13 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:13 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:13 +0000
Files and hashes:         1: bx_l27hAP8O-cN20bSgkC97xE0w.roa (hash: CvRYAhtCHrK4e4xO6GAddJnUj7IW4xcxplg1YukPV2Y=)
                          2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: N0D3n3Gu2Rw3H/aanQvAg4kWr92bcHBCHf8Ngv5Ukcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:6b:30:1a:19:a8:6f:bc:bc:de:aa:78:4f:2c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
        Validity
            Not Before: Jun  7 09:01:13 2025 GMT
            Not After : Jun  8 09:01:13 2025 GMT
        Subject: CN=05dfb5d867ab610f59a6fb905c5a98efd24b2b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:9b:93:b2:af:3a:d0:94:07:db:1e:3c:8c:
                    d0:76:27:78:76:e6:41:28:49:12:ae:2c:36:1a:2e:
                    57:3f:56:f6:66:3e:02:1a:53:f3:44:4e:af:51:e8:
                    72:9d:4e:e3:8d:de:bd:83:b3:29:e4:b8:ec:33:66:
                    c9:d3:e1:9b:b2:79:eb:b0:3a:54:8b:a2:48:89:09:
                    d8:ec:06:63:13:17:00:8b:b2:48:6d:87:c3:7e:47:
                    79:eb:1d:c7:32:3d:d7:b9:36:ad:20:fe:f2:a2:61:
                    c7:2f:89:d2:17:01:05:d4:36:93:e1:92:b2:a4:c3:
                    4c:4f:bf:a8:32:d2:53:32:e4:50:a6:3b:8a:dc:71:
                    ec:6a:9f:80:07:2d:41:5c:41:e2:c5:ac:5a:3d:b0:
                    28:73:6f:d6:ce:7d:68:25:2c:f0:5b:9a:bd:13:82:
                    4d:72:47:61:74:9c:05:3a:2e:2f:f5:1c:b7:2a:83:
                    d9:a0:08:cc:02:4c:5b:4e:5f:19:f1:04:c7:cd:c4:
                    7c:63:ce:3e:bb:2d:95:78:48:f9:e6:84:e2:db:c9:
                    84:1c:8b:10:0a:1d:13:84:21:57:3d:4d:60:5e:df:
                    b6:2b:21:90:b0:61:95:f7:e8:f8:2a:de:e5:ec:14:
                    a5:a8:93:d3:b4:3d:0d:b1:59:fc:95:5c:63:a0:b4:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DF:B5:D8:67:AB:61:0F:59:A6:FB:90:5C:5A:98:EF:D2:4B:2B:79
            X509v3 Authority Key Identifier:
                keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:cf:cb:f1:8c:d7:44:1e:57:b0:30:47:91:07:5c:7f:53:c8:
         46:e8:0d:20:a9:e2:62:01:ae:f6:31:5d:9a:69:b9:18:ee:98:
         77:9d:b0:c6:b9:eb:f6:29:81:83:b7:18:29:b6:c3:31:c3:f7:
         75:7e:35:ee:ee:ee:b4:ae:1d:2f:ce:2d:d3:af:27:86:cb:d4:
         c5:30:50:d1:ca:76:76:7b:33:54:2e:c8:19:8a:0d:64:05:d8:
         11:4d:c9:ab:10:8a:8d:d9:8c:77:02:7b:1b:db:a5:1e:92:6b:
         a3:8d:be:5e:88:ad:85:98:95:8f:27:fc:66:fc:5d:5a:6f:94:
         b2:82:d2:f3:38:88:5d:18:12:c9:47:ad:d6:b4:fb:07:00:af:
         96:56:7a:83:97:71:9b:d2:65:d2:57:a2:81:55:ed:47:83:17:
         9b:60:1c:3a:2f:a7:7c:fe:ac:67:0b:15:00:50:13:51:01:94:
         81:2c:63:cf:5b:16:8e:fb:94:a9:97:b2:b1:ac:f0:b4:a3:89:
         21:e2:14:6a:56:e3:9a:0e:21:1b:b2:f9:e8:26:f6:34:14:00:
         71:f2:f8:4b:31:d9:43:8b:12:df:d2:14:1d:b6:14:52:82:df:
         2e:ff:ed:f8:9f:51:e0:b3:96:c7:33:59:73:5e:74:2f:4e:98:
         99:21:53:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:18:47 2025 by rpki-client