Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File:                     u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier:          9uC5oAlM4umNWa7mS/8fuYOQSujOd6y+mWK34NIkvmc=
Subject key identifier:   3C:A3:D6:F2:C3:FD:71:7A:D3:AD:D0:EA:27:95:AD:F8:77:FA:61:59
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer:       /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial:       019765F284FD9B0A987549176772C6804F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number:          1462
Signing time:             Thu 12 Jun 2025 21:01:21 +0000
Manifest this update:     Thu 12 Jun 2025 21:01:21 +0000
Manifest next update:     Fri 13 Jun 2025 21:01:21 +0000
Files and hashes:         1: Hd2tJFK8FHI5IxfZApcFzOSYT3E.roa (hash: M8+A1yW8hq7cWzg9bjqGF7iG0x4F0G6mxL/iqnm6fL0=)
                          2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=)
                          3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=)
                          4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: tOwAeBb1DtEbDTsMZiHMNJ5ayR9Yvn47DRnKBZCGxoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f2:84:fd:9b:0a:98:75:49:17:67:72:c6:80:4f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
        Validity
            Not Before: Jun 12 21:01:21 2025 GMT
            Not After : Jun 13 21:01:21 2025 GMT
        Subject: CN=3ca3d6f2c3fd717ad3add0ea2795adf877fa6159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:d8:1c:21:60:ac:d0:76:ae:16:cb:7f:d4:
                    3b:78:59:57:80:45:98:d3:a9:d0:0e:ba:7b:8a:d8:
                    f4:0d:05:8e:ca:ba:ae:cc:1d:d5:71:00:bf:13:ef:
                    2a:3d:54:6b:e1:17:21:6c:0b:38:48:ee:b4:d8:07:
                    d9:c7:4c:db:72:28:c1:95:88:df:9f:52:89:d2:6b:
                    36:81:f7:d4:51:f3:90:bf:55:9b:aa:b2:aa:84:73:
                    f3:82:75:16:7a:94:92:5d:37:82:fc:e2:6b:42:fe:
                    87:48:2e:e1:4d:fd:97:5f:d0:69:b3:63:29:60:d5:
                    bc:a7:1a:20:7a:77:95:1d:bc:7b:74:43:7c:ae:41:
                    47:77:d3:9c:6b:23:54:6f:55:d2:1a:e3:69:99:7b:
                    33:5a:52:b0:bc:ba:a6:d0:78:77:2d:ae:1d:99:20:
                    59:99:15:e3:65:44:9b:33:8b:1b:47:aa:0a:0b:2d:
                    8c:8e:0b:e8:3c:f3:1a:c6:86:90:d0:61:ab:8b:71:
                    11:3a:50:9d:28:f5:15:c9:c5:9e:e2:44:75:7f:39:
                    a4:e0:6a:4f:fe:00:69:8f:c4:f0:c2:87:cb:5f:6b:
                    07:b6:58:d3:f8:56:17:8a:18:fd:54:4a:f6:c5:b6:
                    d7:97:bc:8b:f9:9f:f2:6c:df:3b:f1:14:ce:df:03:
                    96:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A3:D6:F2:C3:FD:71:7A:D3:AD:D0:EA:27:95:AD:F8:77:FA:61:59
            X509v3 Authority Key Identifier:
                keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5e:5a:a2:9a:d5:24:4b:ec:44:12:e6:16:07:d9:26:ec:a8:
         ef:e9:25:82:7b:52:7c:66:b0:35:bc:b8:9e:da:9c:ad:1e:f8:
         75:99:64:4e:04:60:65:48:9b:ae:70:db:d0:35:7c:98:b9:5c:
         ed:8a:b3:97:34:04:f6:f5:1f:d5:a7:79:eb:f4:c1:f1:79:a0:
         71:5c:2c:46:7c:55:24:a5:45:5d:d7:94:94:3e:66:fb:46:5e:
         5a:0d:f6:56:8a:5b:c6:a5:1d:95:a0:99:1f:5a:1f:1a:ae:6b:
         89:1e:84:e4:fa:3c:73:63:07:36:b8:67:c2:d1:7d:7d:fd:d8:
         8a:af:60:9b:15:ba:03:3e:a9:0a:31:85:9c:d3:2f:41:1f:2d:
         41:d1:85:25:30:9f:a7:cb:01:8c:f1:17:66:14:d5:e2:9b:c7:
         7d:b9:94:b1:2c:87:30:88:fe:e6:9c:fe:74:ee:7a:b7:69:da:
         85:24:c8:fa:b1:6e:ae:cf:a8:77:01:d0:7d:90:98:b0:e2:6e:
         82:b8:6e:25:73:a1:f5:13:f5:50:af:9e:95:e0:65:22:77:3a:
         d6:f2:c4:db:61:13:75:71:0c:b0:d7:c6:e1:72:f8:c9:c7:67:
         ce:26:67:8c:94:3f:c7:75:6d:30:3d:37:df:45:6c:ae:00:c6:
         82:8b:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:06:00 2025 by rpki-client