Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
File:                     x5p8pEAn0uWtOJ8WntFZNteFEWY.mft (raw, json)
Hash identifier:          YoU/l/r12wri0scjtjgXVc1yQWqjgdErwsnjBKEcFHw=
Subject key identifier:   A7:D9:AA:AF:4C:47:D5:D9:CF:4C:AB:EB:C2:50:9E:74:E1:E8:5D:A4
Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
Certificate issuer:       /CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Certificate serial:       019764711353A4285B4894F8F805B284F228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
Manifest number:          0BB2
Signing time:             Thu 12 Jun 2025 14:00:21 +0000
Manifest this update:     Thu 12 Jun 2025 14:00:21 +0000
Manifest next update:     Fri 13 Jun 2025 14:00:21 +0000
Files and hashes:         1: abpRqtiQtQaZu4MHu087BH1phaI.roa (hash: Oq4Z5f20QFJa82wcUjWOln7tJ0DH2NRa/Bs4WGmPNhY=)
                          2: x5p8pEAn0uWtOJ8WntFZNteFEWY.crl (hash: kDy922FjGk4ORLU7FyOiLYoqX2RebuFFUdYI0/ECUAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:13:53:a4:28:5b:48:94:f8:f8:05:b2:84:f2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166
        Validity
            Not Before: Jun 12 14:00:21 2025 GMT
            Not After : Jun 13 14:00:21 2025 GMT
        Subject: CN=a7d9aaaf4c47d5d9cf4cabebc2509e74e1e85da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:04:fc:9d:18:c4:0f:3e:ed:20:af:dc:a3:
                    fb:76:ae:ad:3f:62:79:c9:94:87:0a:cc:68:79:1d:
                    1a:0b:e4:a2:57:fb:24:70:d9:f0:c3:fc:b1:49:a9:
                    c4:30:25:c8:e7:73:b9:4c:fa:da:8b:c1:81:94:2a:
                    e2:35:14:04:71:fb:d0:fd:15:8b:d7:46:e1:61:f0:
                    f8:a1:1f:3a:0e:64:81:4b:e2:eb:d7:7a:ff:02:1a:
                    63:08:7a:ad:36:18:f0:72:57:71:da:40:51:71:f5:
                    ee:19:a7:5c:47:31:6e:eb:e8:0e:44:54:92:61:63:
                    e5:d6:60:ba:0c:bd:30:c4:d4:88:a5:7b:c0:02:ca:
                    d3:58:c3:b3:52:e1:4b:35:f6:e8:f8:79:6c:9d:e4:
                    78:1e:b2:55:33:10:4e:9b:ef:a0:c8:5b:7f:b2:30:
                    5d:4d:fe:a3:b6:a9:81:69:80:4e:96:7a:7a:2e:8f:
                    8d:f9:9c:99:00:9e:f6:dd:f0:b6:7c:ff:21:59:5d:
                    71:67:cc:de:10:c8:9b:aa:ce:ad:09:cb:30:b9:c5:
                    ab:72:9d:97:45:37:83:38:1e:be:22:65:b4:9e:85:
                    b7:74:0e:3d:d9:91:56:e0:33:83:3f:8a:0b:b6:52:
                    37:4f:0d:2e:15:f5:93:2b:ec:1d:29:0f:66:50:aa:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D9:AA:AF:4C:47:D5:D9:CF:4C:AB:EB:C2:50:9E:74:E1:E8:5D:A4
            X509v3 Authority Key Identifier:
                keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:94:f1:99:a9:9f:c9:c8:15:72:ca:32:0a:1b:1e:36:47:67:
         7c:03:a9:81:73:45:44:4f:02:42:ec:1d:23:18:53:7d:6a:70:
         bb:c5:fc:f5:0c:cf:cc:50:55:11:dd:1b:86:e4:fb:f0:00:f9:
         58:5d:0b:56:42:e7:8e:df:3f:4d:fe:06:94:eb:fa:8c:a7:ed:
         d3:4c:35:91:bb:18:37:16:60:24:df:eb:cd:72:4f:57:2e:71:
         1c:92:26:9d:41:08:dd:91:ec:87:e6:c8:49:d5:8f:e0:89:1d:
         94:77:a8:61:8a:ae:b5:95:60:d4:51:a6:fe:b8:5b:57:9c:23:
         f8:8f:03:3d:cc:05:0a:ed:04:fc:f5:bd:26:e1:48:9f:97:97:
         d8:f9:3f:59:cb:87:9c:4d:b6:80:23:a1:ea:e5:69:ab:be:3a:
         62:09:87:68:3c:90:6c:54:9a:6a:d5:99:1c:b5:d3:55:aa:fd:
         86:85:70:9c:bf:f9:56:25:e1:3f:d5:e7:a9:d3:66:f8:98:38:
         23:1d:e8:26:7a:17:ca:e0:4e:39:d8:ba:08:24:7f:4b:d1:88:
         8e:59:80:52:ca:30:9c:e4:a9:d9:b0:45:fc:10:16:95:e3:a9:
         98:12:12:98:03:bc:71:5f:fb:2a:77:a0:a1:f2:f3:e9:64:33:
         3f:eb:89:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:07:40 2025 by rpki-client