Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
File:                     Akbop20wx8BJW8XOjuURD-qyhuY.mft (raw, json)
Hash identifier:          SvyqY6b30d0uY4QrP51X0lxxDdYJc0u8fx1+zxCvdvQ=
Subject key identifier:   49:B7:9B:C8:4A:45:CE:FD:0C:CE:3C:15:C0:86:27:35:97:CF:40:01
Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
Certificate issuer:       /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Certificate serial:       019753475E569D0BB2E7480631747151D382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
Manifest number:          1433
Signing time:             Mon 09 Jun 2025 06:01:15 +0000
Manifest this update:     Mon 09 Jun 2025 06:01:15 +0000
Manifest next update:     Tue 10 Jun 2025 06:01:15 +0000
Files and hashes:         1: 3uIWyZ2-NdDfWkBz-Cz4ehXcDXw.roa (hash: MQ45FFneVJjtvuTav7T4FKF/BiqudQZo8fk5fSUR0xU=)
                          2: Akbop20wx8BJW8XOjuURD-qyhuY.crl (hash: mWwGD9Rabsfcj/bLzkeRczNB4vDBrrx2uyVMRg9q1Wo=)
                          3: PawZ63YCzLh66nBk8KkHzYsa-D8.roa (hash: MbGnyPjYsuuNw4Rc4to6au5h1LGwPajvRQALk91Nf/M=)
                          4: XFa9l_0cz21XUFqVHAhuFVoXl64.roa (hash: O42Bcxzs4yOQXX2kULBWDWVCdsdJQDwpjOWp8Rqh6bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:47:5e:56:9d:0b:b2:e7:48:06:31:74:71:51:d3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
        Validity
            Not Before: Jun  9 06:01:15 2025 GMT
            Not After : Jun 10 06:01:15 2025 GMT
        Subject: CN=49b79bc84a45cefd0cce3c15c086273597cf4001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:d4:63:11:06:70:dc:4f:64:6a:a3:42:64:
                    49:2e:3e:fd:f3:ca:55:17:a1:e6:98:bb:2c:66:5b:
                    90:eb:9b:e4:3c:1f:fe:f0:7a:a3:9e:3c:35:7e:7f:
                    2f:55:ef:9e:8c:1c:f6:8d:44:8c:e8:ef:88:02:51:
                    0a:9d:fe:4c:24:26:b1:28:5f:47:7b:ce:ed:09:10:
                    41:ca:c4:d0:53:95:a9:b4:1f:55:f5:81:b5:49:17:
                    b3:4d:6d:97:19:86:e3:1a:c7:37:d6:b5:4f:b7:cc:
                    0d:fb:90:eb:fa:62:4f:a1:d7:27:57:e0:07:72:b3:
                    47:18:9f:12:46:cb:d6:dc:4d:40:c3:b5:82:7d:3c:
                    07:72:7e:bc:a4:df:77:12:b9:26:25:ab:40:f0:be:
                    d2:20:54:c0:eb:58:6e:04:7c:3a:0c:b8:a2:dd:40:
                    69:2c:14:13:a7:06:86:f6:88:42:3b:b1:19:a8:8a:
                    de:43:0c:e6:df:9f:0a:d6:02:e3:da:41:bc:7a:ac:
                    d6:5a:aa:35:8b:35:ed:8f:65:22:88:5d:24:21:d8:
                    72:aa:1a:c8:03:5d:1e:af:c9:eb:42:cd:68:b6:d8:
                    8a:8c:cc:46:ff:43:71:7f:e7:46:84:a0:70:b5:11:
                    ce:87:92:49:4f:07:cb:f4:b4:5b:12:f6:0f:76:b8:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B7:9B:C8:4A:45:CE:FD:0C:CE:3C:15:C0:86:27:35:97:CF:40:01
            X509v3 Authority Key Identifier:
                keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f8:0d:4d:5d:72:33:62:64:f0:8a:5b:49:e4:04:95:a3:68:
         a8:86:95:74:61:98:55:c8:d8:6b:59:2a:fe:2a:6c:54:c4:31:
         75:90:f2:c3:86:02:f1:4b:5f:25:93:8e:82:6d:b6:05:44:ad:
         1a:e6:3c:85:0c:d7:78:a1:59:ab:70:3c:eb:0f:83:b8:bc:37:
         24:de:cf:52:5b:6c:21:2b:f3:54:0c:53:7e:3f:de:e2:01:e0:
         fd:8f:8f:e7:5a:63:98:6b:ad:81:29:b5:31:6b:b6:af:ba:40:
         50:c0:15:87:8c:62:57:47:d8:bc:61:e5:0b:fa:08:70:d5:c8:
         e6:5e:00:35:a1:8a:39:e3:d0:b1:81:2d:3c:64:ed:f1:51:2e:
         89:5b:1c:13:77:05:81:5f:99:e0:af:1b:1e:ff:97:51:7b:26:
         f4:b1:9b:45:64:26:7b:4e:89:26:93:69:47:d9:c3:93:a1:72:
         dc:65:f1:49:89:97:e0:a9:a3:ab:28:d0:99:80:4e:69:d2:5a:
         88:97:d7:32:cc:48:38:c3:aa:f8:d8:f6:46:3f:01:4e:50:b3:
         b3:32:14:d1:f0:48:f1:97:e0:ef:a5:5d:e4:b4:8d:fe:8e:93:
         94:86:71:f8:4b:0d:6d:7f:81:f4:1d:27:6c:84:f5:48:bd:05:
         57:2c:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:37:27 2025 by rpki-client