Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
File:                     C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json)
Hash identifier:          CjuAOjEe/HUplaMYyNx3yXCRHDuJi6V8K/7vZ95Q370=
Subject key identifier:   4E:40:BE:43:87:B9:AA:58:1E:CE:04:7C:46:FA:B2:A0:AC:5F:27:5E
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Certificate issuer:       /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial:       01976C2B07BE080365F04167B856C3F50883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
Manifest number:          15AD
Signing time:             Sat 14 Jun 2025 02:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:48 +0000
Files and hashes:         1: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (hash: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=)
                          2: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=)
                          3: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: HGT252BT85g33ndmCA6T/tkQHAp0Ms3GJxfu3Y9SOnw=)
                          4: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=)
                          5: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=)
                          6: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=)
                          7: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=)
                          8: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=)
                          9: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=)
                          10: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=)
                          11: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=)
                          12: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=)
                          13: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:07:be:08:03:65:f0:41:67:b8:56:c3:f5:08:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
        Validity
            Not Before: Jun 14 02:00:48 2025 GMT
            Not After : Jun 15 02:00:48 2025 GMT
        Subject: CN=4e40be4387b9aa581ece047c46fab2a0ac5f275e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:bb:1c:d2:05:35:88:90:60:e2:16:e5:ac:
                    c1:9a:56:57:cd:39:ca:fd:28:43:84:8f:b9:07:63:
                    8b:f2:06:7d:58:5c:68:d1:38:7e:1c:10:71:e2:f8:
                    7d:88:39:bb:1a:4a:65:2e:dd:0f:3a:fd:b3:d6:92:
                    73:e0:a5:c8:ed:8a:da:4b:01:ab:98:4f:17:f3:47:
                    c1:51:28:b9:ed:05:ec:09:b5:1c:e0:c5:07:c7:e4:
                    80:10:78:cc:ae:5b:c2:5d:12:d5:95:35:54:fc:cf:
                    a4:b2:14:48:49:77:58:b0:d3:fe:ad:73:33:44:f8:
                    4f:ff:02:58:de:c4:71:fa:78:c1:66:04:22:b6:a0:
                    ac:1a:40:7b:ba:44:7e:a9:79:1d:37:d9:3a:06:b1:
                    1b:fe:28:9d:55:64:04:b4:20:1a:01:ac:fb:d0:37:
                    9e:41:ea:ad:c7:0e:0f:13:59:ae:cb:c0:c6:e4:14:
                    ee:20:e8:64:8b:38:0c:e3:ad:e9:72:85:90:43:a9:
                    61:e9:6d:77:99:19:d8:d7:ca:eb:21:5c:46:dd:39:
                    7b:5b:e8:d9:ef:1b:5a:a6:bc:d3:e0:89:4e:2d:ab:
                    00:35:dd:b3:9f:ef:6f:c0:af:0c:c5:dc:80:27:65:
                    b4:2f:ec:54:5d:44:d9:c6:a1:4c:ce:04:8e:c7:12:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:40:BE:43:87:B9:AA:58:1E:CE:04:7C:46:FA:B2:A0:AC:5F:27:5E
            X509v3 Authority Key Identifier:
                keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:4d:b2:89:3f:4f:86:9a:08:d8:79:05:4c:3c:06:da:57:
         c9:f5:8c:3b:cb:0e:d0:8e:bd:09:7a:ac:21:47:a3:ab:75:d9:
         1a:01:e1:a7:e9:df:42:b9:88:23:d7:42:31:84:7a:48:09:f6:
         dc:8d:62:fa:57:72:fe:57:36:74:b0:c3:6e:56:1d:89:35:d8:
         3b:fd:57:b9:d9:2a:7a:c4:86:22:74:b9:8d:d1:7f:97:33:5a:
         ab:94:9a:bf:bc:a1:e5:64:d2:c5:3f:82:18:22:8d:9d:0d:b9:
         ef:cb:6d:b4:1d:f0:65:f0:a0:98:27:ce:ec:d0:12:e4:24:92:
         e1:3c:09:03:e7:2b:58:0d:12:f4:96:d0:26:a9:ca:6e:93:73:
         b1:f7:2b:28:cc:3f:cc:fc:77:6c:d9:c0:ac:b4:c9:00:7f:fa:
         8e:46:a7:f1:99:45:d8:3b:13:c1:f9:1a:fa:cf:fb:1c:34:0c:
         7b:bc:f9:39:f3:4d:23:77:e1:12:d5:a1:83:1f:fd:fd:ec:85:
         0a:98:ca:e8:6c:04:f9:35:79:90:d0:86:2f:e6:35:7b:f8:31:
         ab:54:c2:a7:b4:d7:ea:73:b9:4f:08:08:6c:4d:85:0b:b6:47:
         b4:99:48:be:33:85:94:2e:5d:b9:6f:e7:01:6f:f0:42:16:00:
         be:b7:5b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:04:33 2025 by rpki-client