Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File:                     Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier:          Wb+QE4Ywm/6hsZ5f7Q0+WifDZ3F+HlXY+q2Fxw/k+mE=
Subject key identifier:   41:18:1B:03:F8:2F:CC:F4:CA:86:24:C6:94:A2:49:40:98:B2:03:60
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer:       /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial:       0197469E9FAF28E6F92DFB64F1C83EF0BD38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number:          0280
Signing time:             Fri 06 Jun 2025 19:01:30 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:30 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:30 +0000
Files and hashes:         1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: OQHXFkM83O1IIbizVQX4HDbhB/9RRCmCI6R+PcYfVrQ=)
                          2: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (hash: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=)
                          3: TVVwgauLv5P4p_N1MbSMDHrhgkU.roa (hash: nBwDhWyQjjSPhhqjp9xgHoZZMM8YBA0mhGeSxmJeXVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:9f:af:28:e6:f9:2d:fb:64:f1:c8:3e:f0:bd:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
        Validity
            Not Before: Jun  6 19:01:30 2025 GMT
            Not After : Jun  7 19:01:30 2025 GMT
        Subject: CN=41181b03f82fccf4ca8624c694a2494098b20360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:b4:39:39:87:c8:ee:0c:6a:ef:2f:ae:7e:
                    ed:38:ed:66:17:88:eb:5e:fc:6a:d9:22:15:5c:d5:
                    7f:da:8a:79:ef:b3:d9:14:90:ef:11:0f:28:9f:6f:
                    66:c7:d4:77:55:39:e0:bf:0f:32:e6:4c:09:db:b5:
                    8e:56:84:f9:fb:ed:30:c6:3c:b6:a3:70:d1:d5:ed:
                    98:e5:0e:9a:25:c7:2e:38:f3:65:05:02:ac:71:6f:
                    76:11:ef:25:c0:00:ca:95:94:82:8e:75:6d:31:33:
                    41:9b:1b:02:a7:5a:1b:d9:da:73:09:20:3b:dd:65:
                    4e:09:38:4b:85:a0:83:4f:d7:4b:5a:a7:e5:b1:c5:
                    ee:9f:a7:26:5a:c2:d2:89:ae:78:ee:b5:d5:50:82:
                    b8:74:73:8b:02:0c:b0:b3:d7:4c:40:33:7c:fb:ed:
                    31:48:6d:63:06:e3:f0:3a:9d:88:f7:b4:c8:49:c4:
                    9c:5d:ec:3d:4c:19:8d:f5:c9:e3:d8:01:20:b3:f4:
                    63:0a:0e:76:4d:75:57:8a:be:16:75:1f:06:10:27:
                    0d:98:7d:34:95:08:c4:45:7b:f3:ac:da:99:f6:3a:
                    3a:8d:fd:ea:0a:c8:99:26:1d:27:41:7c:37:a3:dd:
                    2b:98:b8:b1:64:48:2a:78:e6:d9:85:d3:a9:d5:16:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:18:1B:03:F8:2F:CC:F4:CA:86:24:C6:94:A2:49:40:98:B2:03:60
            X509v3 Authority Key Identifier:
                keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:42:5c:50:0b:d6:cc:cb:0e:85:e0:07:7e:ef:82:f7:d2:50:
         f5:6c:a8:d8:4d:ce:95:22:41:3e:8e:bd:f4:a9:a2:be:3e:5e:
         7e:e6:61:81:d7:25:4e:cf:08:8d:be:ae:97:1d:4a:f4:77:e3:
         fd:c4:c9:44:25:a0:a2:c3:df:0a:8b:cc:0b:96:2e:2e:c2:36:
         e4:84:35:7f:c3:14:cc:9e:a2:ca:1d:2d:8b:00:4b:66:c2:85:
         13:f1:f2:bd:80:71:57:ce:94:cf:7a:25:4d:20:b0:15:84:f4:
         2f:4f:2e:36:13:fb:13:6f:3c:34:86:47:ee:df:32:1d:c9:23:
         97:3d:df:69:31:a2:a5:ac:1b:fa:38:28:73:2f:b0:a8:e2:d9:
         d7:95:46:03:35:d6:49:5c:7d:09:45:38:c0:be:57:e5:73:90:
         55:5e:6e:61:1f:5b:24:d0:31:38:9a:2b:48:ca:e7:3a:1d:5b:
         b4:1c:0e:c4:23:41:1a:d1:de:71:52:11:76:72:f2:9b:94:12:
         60:7a:cd:7f:f3:7e:45:32:0b:08:fe:57:bb:80:7c:c4:89:e9:
         cb:4a:e6:fb:3a:82:7d:98:9c:60:71:ef:4b:f1:96:a2:8b:9e:
         fd:56:dd:d8:61:ee:5f:09:54:7a:e8:a1:48:85:f1:6c:60:f8:
         e8:98:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:46:34 2025 by rpki-client