Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
File:                     C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json)
Hash identifier:          gHa/EAcggZTAkKrolb/WDmjaOlFlCHEA9zi4KiAS9HY=
Subject key identifier:   93:86:04:DE:ED:DC:9C:49:80:A6:A3:74:35:34:AE:F8:8E:2E:04:38
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Certificate issuer:       /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial:       0197665FCB2B6930B6F19BD1F5FEC4CA71AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
Manifest number:          15AA
Signing time:             Thu 12 Jun 2025 23:00:43 +0000
Manifest this update:     Thu 12 Jun 2025 23:00:43 +0000
Manifest next update:     Fri 13 Jun 2025 23:00:43 +0000
Files and hashes:         1: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (hash: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=)
                          2: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=)
                          3: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: Ovd4aDaCfYfVUosJX41FlQZ00biQg/u5h1OMDtP5N9Q=)
                          4: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=)
                          5: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=)
                          6: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=)
                          7: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=)
                          8: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=)
                          9: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=)
                          10: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=)
                          11: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=)
                          12: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=)
                          13: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:5f:cb:2b:69:30:b6:f1:9b:d1:f5:fe:c4:ca:71:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
        Validity
            Not Before: Jun 12 23:00:43 2025 GMT
            Not After : Jun 13 23:00:43 2025 GMT
        Subject: CN=938604deeddc9c4980a6a3743534aef88e2e0438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:a8:0e:63:93:89:11:6b:6e:3c:3b:08:32:
                    df:ac:ce:af:12:b4:2a:73:35:77:f3:25:6c:ec:73:
                    af:ae:6e:35:43:c6:a5:29:17:8c:92:2e:ab:1c:19:
                    32:2c:34:20:e5:8c:80:e4:ee:cb:51:65:71:8f:5b:
                    e3:5a:99:c6:8f:82:29:5b:c1:7b:50:e8:74:75:9f:
                    4e:85:e0:a8:37:2f:91:e2:a0:e5:81:d1:0c:a0:19:
                    42:b5:f7:55:e6:de:a6:b6:c6:5e:8a:94:ff:55:97:
                    e9:ee:d9:f8:c0:e0:f3:c2:4e:c7:fb:04:6b:c4:1e:
                    05:48:39:d7:cf:eb:e7:12:ae:01:5a:7c:f1:06:17:
                    c4:46:32:81:31:58:31:9f:a7:24:d3:55:1a:b7:11:
                    fb:15:8d:63:97:22:c4:10:c2:c0:70:b0:3d:11:4b:
                    be:4a:68:10:b8:7e:92:f3:3d:9b:c4:29:31:db:84:
                    44:03:1b:e9:51:4f:a3:71:16:89:6f:24:dc:d7:5f:
                    ba:18:93:54:4c:bf:48:e0:dc:35:37:e8:87:68:9f:
                    b4:90:7e:ec:62:a5:5c:1e:40:5f:3b:b6:ab:4a:42:
                    19:b8:d2:87:c3:12:8b:94:92:02:43:8d:cc:84:45:
                    32:81:4d:43:77:86:bf:0a:97:5e:3c:1f:54:b2:2f:
                    d5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:86:04:DE:ED:DC:9C:49:80:A6:A3:74:35:34:AE:F8:8E:2E:04:38
            X509v3 Authority Key Identifier:
                keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:53:0a:06:30:18:10:5c:5a:74:57:d7:3f:3b:52:fa:cd:f8:
         38:38:ec:c8:90:ad:ec:47:26:bd:93:9b:36:0c:66:62:58:c6:
         99:f1:77:88:ea:a2:2f:1b:80:0b:cf:09:e7:9e:28:76:a2:74:
         70:e4:61:82:a9:cd:50:19:ad:a6:50:6c:b0:2c:46:7e:c1:ac:
         c1:dd:02:1e:da:c2:db:06:c8:15:eb:f8:09:09:5e:8e:cd:2e:
         cc:90:e0:af:1d:d2:20:28:09:bd:82:ac:0c:53:aa:39:e8:a8:
         e8:e2:d1:09:77:42:31:02:b0:61:ce:3f:c2:25:c6:64:c9:0c:
         ad:e3:a7:4a:94:76:79:54:4e:7a:26:68:f4:9d:1c:c4:52:14:
         fb:06:84:e6:ae:1a:ec:13:f7:7b:8c:3b:68:cb:24:34:c5:74:
         51:a4:8c:91:a1:6a:0e:6e:0d:df:cf:50:b8:a3:13:fb:3e:da:
         4d:85:18:16:ca:e9:6e:27:cc:d5:71:7f:4f:c2:f0:cc:8d:56:
         9e:1b:29:df:d8:f3:59:fe:a6:56:30:2e:bb:80:4b:3f:50:81:
         3d:9e:d9:5b:59:79:ee:95:00:1a:f3:a4:9e:91:5c:c7:da:52:
         8f:08:ab:dd:cf:7f:c6:04:b6:d8:a1:81:24:b5:89:49:b2:b4:
         4f:dd:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:40:29 2025 by rpki-client