Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File:                     psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier:          odOHpbULqUAIesI5ZPeD5wN//edaaRDdd7uoo4UqVvg=
Subject key identifier:   D9:EB:D0:80:11:C8:03:5C:22:AF:B3:B8:8E:B1:B0:8A:A6:F3:04:65
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer:       /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial:       01974C31E7ACBA92CD0F1E323ABC2020A7DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number:          1581
Signing time:             Sat 07 Jun 2025 21:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:28 +0000
Files and hashes:         1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
                          2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: s3an9M8AqBplIoa8obqxb8vThZE8NWVXc0Wxl/RdywQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:e7:ac:ba:92:cd:0f:1e:32:3a:bc:20:20:a7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
        Validity
            Not Before: Jun  7 21:00:28 2025 GMT
            Not After : Jun  8 21:00:28 2025 GMT
        Subject: CN=d9ebd08011c8035c22afb3b88eb1b08aa6f30465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:82:45:b3:3f:af:35:0d:5d:79:26:15:d8:
                    24:17:81:88:7d:67:75:e8:3d:8b:af:5f:0d:b8:10:
                    bc:d7:44:13:5d:09:8d:d4:b0:d5:f5:72:8f:85:ef:
                    a0:78:af:0d:24:36:16:3b:3f:7c:ba:43:ce:ce:65:
                    22:57:64:6a:40:a2:5b:55:4e:72:5e:91:ad:c6:cf:
                    87:c8:e4:9c:a0:ff:29:e6:c6:88:cb:2d:f3:f6:61:
                    06:ec:08:44:a8:cb:e5:e8:21:99:62:a6:62:19:d2:
                    85:13:a4:66:b2:20:2a:4b:7d:93:91:31:92:d2:b8:
                    15:69:69:dc:39:b5:66:66:ab:9e:71:9c:c3:d4:f7:
                    11:77:52:30:25:47:a0:92:20:50:a6:bc:3c:f3:c9:
                    e1:0a:8d:e8:dd:b7:55:2a:e4:71:3c:18:51:d5:22:
                    33:1f:4a:86:6b:50:f1:41:1c:c9:7a:c4:20:fe:ae:
                    be:79:68:23:1a:aa:a9:70:28:c8:58:47:19:f8:4e:
                    19:59:0d:38:1a:09:4b:25:c8:a9:99:50:17:76:f2:
                    f3:7c:66:a1:47:e1:c3:36:cd:7e:9b:64:fe:af:ad:
                    ca:bc:c4:33:b5:1b:65:7b:ef:78:31:8a:c3:91:9d:
                    20:2f:41:5c:e2:8b:c1:72:2e:80:5f:a5:37:cb:9d:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EB:D0:80:11:C8:03:5C:22:AF:B3:B8:8E:B1:B0:8A:A6:F3:04:65
            X509v3 Authority Key Identifier:
                keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:14:7d:91:7d:57:b0:4d:67:e8:54:53:1e:a1:7b:8a:66:6a:
         cc:57:83:6d:08:dd:62:d9:a8:a0:f9:f5:6d:bf:38:4c:f8:83:
         c1:2f:3e:c3:dd:7e:2e:b5:6c:31:08:36:a1:da:79:b4:91:ed:
         90:95:bc:40:49:d3:10:33:47:9a:9d:8e:3a:9b:7c:db:ac:8f:
         af:0a:df:4a:1e:b9:de:d6:7a:f4:a4:01:9e:54:15:77:a0:94:
         d8:9a:e4:04:44:2d:6e:7d:9a:81:73:99:91:bf:f0:90:b8:74:
         fa:02:a1:8a:08:4a:be:2a:a3:02:40:34:52:9d:9c:2f:f6:1e:
         66:b5:0d:30:f3:73:8b:0b:d0:b6:51:ff:14:38:09:3a:37:d9:
         da:7e:ac:07:f2:d6:2f:27:7e:6a:40:a7:33:74:d0:88:10:97:
         1a:13:f3:38:91:08:5b:01:c5:75:60:4d:2d:d4:da:34:a3:04:
         fe:aa:50:02:1e:17:55:bc:f6:c9:fc:b1:c2:3f:aa:4f:bf:ed:
         ac:7e:84:1e:51:80:af:9a:0d:b9:cf:b7:ee:4e:23:12:1b:93:
         97:c1:cc:22:a0:a5:f6:3f:d3:be:ef:10:dd:af:77:38:6c:20:
         4a:16:af:3d:e2:5b:c1:5d:fb:18:e2:d9:66:7c:4f:dc:ec:90:
         d6:31:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:30:12 2025 by rpki-client