Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          8EijzH9AMYtEI0HGYJG0zTcgAyNvalR9LFWb4a8qZmo=
Subject key identifier:   2A:18:16:76:A2:57:47:AD:75:D5:28:76:A4:A3:7C:24:54:A1:AF:06
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       01974AE925DA327F63DBD62F35400E9FDAB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          12BF
Signing time:             Sat 07 Jun 2025 15:01:22 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:22 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:22 +0000
Files and hashes:         1: 34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa (hash: 0+PPWp0o1/rwBJiAmqaqRlxFY24T5j6RDdie2DfGC7Q=)
                          2: CqJnQHuWTrr1JOb1x2qlCn7qYBQ.roa (hash: raq5ehc6BfIUJsoK2h14SXHgtvt48xPVADOcv/2fuZ8=)
                          3: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: i0dhBobE+BzY+2PMSlGhpuCcW7tVShc1A7IM1kYMSW8=)
                          4: n5tnQjmPsSAa7e0U_BISzqIEQuY.roa (hash: MzEMfBEyS0reuH82ojDXQdP0KgBQQ3sK4Mxn6oyxx3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e9:25:da:32:7f:63:db:d6:2f:35:40:0e:9f:da:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: Jun  7 15:01:22 2025 GMT
            Not After : Jun  8 15:01:22 2025 GMT
        Subject: CN=2a181676a25747ad75d52876a4a37c2454a1af06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:5a:f2:53:a4:f8:49:57:fc:dd:c2:54:96:
                    38:c1:5c:68:95:e4:a8:39:43:a7:c3:f8:cc:75:49:
                    df:83:2e:cd:0b:74:41:3e:ac:91:98:ec:b2:9a:9f:
                    ee:46:37:7b:2a:96:b2:0c:25:55:30:20:c4:bb:ca:
                    1d:e3:65:26:9e:2a:30:68:de:02:38:4c:00:d4:f2:
                    bf:b9:23:67:67:4c:f3:9b:11:23:a3:85:99:c7:64:
                    72:00:e7:f2:92:dc:fb:73:11:78:d3:55:c7:fd:f2:
                    3a:32:e8:39:64:9e:c2:de:98:96:58:75:f6:b0:d7:
                    60:ce:ca:68:d2:91:1c:33:2f:fe:32:95:af:16:1d:
                    d7:cf:72:6e:e7:01:6c:b9:34:e9:38:27:30:9b:12:
                    e8:22:3c:d0:e1:b3:36:3d:c8:55:eb:de:64:b7:d8:
                    11:81:d0:5c:e0:64:6d:01:4f:a6:28:f3:a1:d6:e5:
                    db:93:18:7f:5d:87:cb:b3:db:0b:18:23:7f:6c:1c:
                    c3:9f:69:bf:da:0e:2c:d6:16:33:69:ff:8c:d2:8c:
                    5e:06:d0:6f:90:26:df:b8:af:25:9c:0d:59:ec:cf:
                    66:56:f1:8a:bc:e6:5c:ab:17:b8:cc:29:2f:bb:d5:
                    80:60:24:94:f4:6a:91:43:37:e9:54:3f:97:db:d6:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:18:16:76:A2:57:47:AD:75:D5:28:76:A4:A3:7C:24:54:A1:AF:06
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:13:0c:4c:4d:60:df:cd:f4:ad:35:7e:85:b5:0a:3d:0c:
         58:9a:f9:0f:dd:41:9b:c8:bf:8c:fd:7f:53:04:40:51:11:b6:
         f9:47:c3:f3:bb:da:09:4b:3a:f5:45:12:65:9f:c1:03:3b:d0:
         f6:49:17:b7:b2:ee:12:68:00:34:03:f5:dd:c7:e0:3b:7c:42:
         fa:23:06:e3:9c:a8:a8:2b:0f:85:a8:35:16:30:55:6b:4a:19:
         f2:00:71:94:5c:d2:6d:09:b5:52:ff:f2:93:fc:72:a5:ca:96:
         09:4e:a2:68:ac:ff:86:46:2a:f7:0c:06:68:27:79:29:1f:e8:
         82:3c:78:c7:74:9a:d2:4c:1d:b0:1d:42:08:b7:e2:b4:bc:15:
         9b:dd:39:e7:1f:c4:45:23:0b:20:65:86:34:e5:7d:fb:37:d8:
         b7:67:aa:50:ad:d2:ff:48:df:63:cc:0b:f9:06:ac:0b:95:b7:
         5b:5f:fd:2a:30:79:bc:89:e4:de:98:c3:b6:3a:b1:d3:72:50:
         cd:57:04:14:6a:05:dd:98:40:07:cc:49:d4:59:36:95:46:3d:
         02:7a:3d:4d:f9:93:85:9a:39:26:c8:c6:65:da:d8:69:5c:89:
         2a:9e:74:73:e6:36:cf:7c:5b:b0:fe:5b:8f:51:d1:43:c3:38:
         de:97:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:20 2025 by rpki-client