Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File:                     V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier:          TyC1uOZthtiy0y4dVT9HBBdeijEN1GaLI27ni2prw5M=
Subject key identifier:   F9:39:66:78:36:C2:C2:46:AC:9F:60:21:B1:D7:46:31:1C:D7:34:38
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer:       /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial:       0197640404E02546976040E24FF4A92137B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number:          5F
Signing time:             Thu 12 Jun 2025 12:01:14 +0000
Manifest this update:     Thu 12 Jun 2025 12:01:14 +0000
Manifest next update:     Fri 13 Jun 2025 12:01:14 +0000
Files and hashes:         1: LGPCXsstqIHfBFoiMfK-mbsBUjw.roa (hash: 7stOVhfnEQBs17GDG+FcbDZCYanm4iM/V5R3N/Vll+k=)
                          2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: FWbBtF/n6atQYpOCAjSCoeLyR4ofkjJyXccTbhaWJMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:04:04:e0:25:46:97:60:40:e2:4f:f4:a9:21:37:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
        Validity
            Not Before: Jun 12 12:01:14 2025 GMT
            Not After : Jun 13 12:01:14 2025 GMT
        Subject: CN=f939667836c2c246ac9f6021b1d746311cd73438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:e7:60:76:b1:d5:4f:a0:c7:f9:d2:43:ea:
                    0f:a4:af:09:f9:f5:50:6f:71:2b:49:c3:be:6b:20:
                    92:f4:79:06:b9:0a:c6:ae:b6:96:2d:34:06:80:89:
                    35:a3:83:d9:49:7f:fc:1f:b4:14:5e:6e:76:3f:1b:
                    46:b9:59:c4:15:bb:fd:55:4f:20:f9:41:f0:1e:6d:
                    69:f8:97:2a:6b:6c:8e:6f:f3:49:3b:fc:23:22:d1:
                    0a:c0:8b:b7:6d:27:20:69:68:fa:36:1b:65:5d:57:
                    0f:ec:75:36:da:6d:d7:65:0a:59:4e:d0:a4:90:33:
                    cc:4f:8b:28:f3:df:b7:4a:cf:8b:f9:51:62:a8:78:
                    25:11:bc:60:1c:a1:2a:ce:b1:1b:a6:a8:dc:7d:35:
                    f9:fb:43:d9:e2:ce:4d:66:72:fc:40:fb:a4:89:34:
                    f7:b2:65:4a:52:8b:fe:73:6d:b3:94:02:25:94:9e:
                    a1:9d:20:d8:2d:68:50:58:63:9b:60:46:88:5a:20:
                    80:e0:cb:63:c3:87:ab:05:db:e2:7b:f5:2f:5f:ff:
                    d3:91:a1:92:e6:bf:4c:05:8b:a5:3b:69:94:38:c4:
                    f3:a4:26:a4:60:00:85:b1:1c:79:3a:0f:06:6a:e1:
                    70:95:cf:3e:34:5a:78:e1:a7:d1:24:30:24:9e:d8:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:66:78:36:C2:C2:46:AC:9F:60:21:B1:D7:46:31:1C:D7:34:38
            X509v3 Authority Key Identifier:
                keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cc:4a:b3:77:a2:56:42:ee:62:a2:99:65:60:00:2b:e3:5e:
         fc:5b:fc:76:69:3f:43:a3:d9:1b:49:bf:29:a6:57:3f:2e:69:
         1a:f4:7b:76:24:4b:04:0d:d6:91:82:87:a8:57:c2:7c:d7:16:
         ad:6c:18:54:ec:51:da:01:08:0a:8f:ee:60:f6:cb:71:c9:78:
         7d:d2:1a:82:d0:8a:2e:2e:e9:c1:0c:ba:68:5c:00:2f:88:93:
         27:ab:b3:ef:b7:79:07:43:b7:30:38:f8:63:f5:0d:0a:78:58:
         ab:b4:33:5d:85:83:a6:9e:fb:00:2c:e1:41:a1:f4:ff:32:ab:
         ff:7b:af:6d:30:c9:eb:64:ee:bd:5f:f4:44:0b:90:66:85:10:
         29:20:04:c0:33:d8:6c:64:3e:44:5e:7c:31:da:28:1f:f2:9f:
         e6:55:da:5c:f9:ae:54:75:2d:e5:59:82:73:e5:d5:01:1c:5f:
         71:67:ec:44:f8:c7:1b:f7:b0:93:13:2d:30:9e:ee:c0:d3:46:
         30:54:e1:39:fe:80:4d:c5:e4:88:9c:4d:5c:2b:1b:09:ec:f1:
         49:7b:75:81:7c:21:ca:75:21:ea:2d:84:f8:8f:0e:66:00:06:
         10:64:1a:a6:a3:42:54:c9:82:88:25:75:40:2c:a3:a7:07:bb:
         22:b2:64:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:41:00 2025 by rpki-client