Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File:                     83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier:          v3+Rq2GWoW69RlGSbCXNBVNKEHE7wDjsvXG4xGxLAgg=
Subject key identifier:   86:51:F7:2E:FB:51:10:B1:52:00:54:6A:64:4B:2E:D4:9C:14:4F:D2
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer:       /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial:       019748FA5A43F6315B92EB8153FAEFEB1280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number:          10B6
Signing time:             Sat 07 Jun 2025 06:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:56 +0000
Files and hashes:         1: 55zACBEV4ZrkKgA_PfqKETWoChA.roa (hash: B0R4BgAeGvCI3HMcrqcW5pltBvObBUfBObcQdCL+Wog=)
                          2: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: icmwBSPBYblSnO735s9MzEXZoyLUw/vvQuY6tWMGzKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:5a:43:f6:31:5b:92:eb:81:53:fa:ef:eb:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
        Validity
            Not Before: Jun  7 06:00:56 2025 GMT
            Not After : Jun  8 06:00:56 2025 GMT
        Subject: CN=8651f72efb5110b15200546a644b2ed49c144fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:1e:45:ed:c6:df:d8:61:d6:74:18:15:95:
                    a6:d3:1b:3c:69:f8:2d:16:09:a7:12:75:e1:3a:2b:
                    76:fa:0c:8e:72:f6:f7:77:0f:4e:12:bf:5c:e0:c8:
                    1c:b7:ba:39:fa:58:ca:8d:ca:b3:b0:98:7d:8c:5b:
                    fc:d6:ab:b7:58:d3:32:c1:cc:e1:7a:bd:8a:db:47:
                    f1:ba:7b:96:5c:73:77:08:cd:b2:3f:a6:e0:bb:c0:
                    cb:6e:a5:58:1c:0d:cf:52:d5:6a:67:f4:f7:bd:56:
                    c4:33:7e:eb:51:55:83:e3:7a:a7:d6:c6:af:63:10:
                    92:17:12:b0:f1:8b:6b:73:22:bf:e8:8a:69:ca:de:
                    07:d5:0b:81:b8:30:7f:74:00:15:b7:b2:7a:3a:b9:
                    01:39:cd:52:00:90:ee:3c:f2:93:d0:ab:2c:4e:f9:
                    79:30:6c:8b:0b:4e:f7:df:ae:15:d5:8b:db:c8:0f:
                    96:cb:5f:1a:6f:90:00:fb:98:6c:27:5a:e0:f4:1e:
                    f1:b9:0d:a7:89:98:2b:4c:2b:01:79:0d:c7:93:f5:
                    78:d3:3b:58:8d:a2:62:79:5f:c9:3a:46:e2:be:6e:
                    e5:69:0a:c9:f8:9c:ae:fa:a7:c0:4c:5e:b4:dd:f4:
                    e7:a3:bf:05:3c:c7:04:e9:3e:6f:ab:6b:c5:4d:ea:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:51:F7:2E:FB:51:10:B1:52:00:54:6A:64:4B:2E:D4:9C:14:4F:D2
            X509v3 Authority Key Identifier:
                keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4b:01:fe:e5:6a:27:ba:f6:8e:c6:9f:f7:ee:c7:a9:3b:1f:
         84:a7:13:04:e5:60:75:a3:67:4e:e5:4a:ea:e9:8d:84:54:f0:
         fa:2a:d7:0b:26:e7:ed:f1:25:5e:06:86:ef:71:5e:3d:13:76:
         f7:33:21:f6:bd:05:3c:50:d1:e3:fd:7d:83:0f:1b:53:f8:9a:
         10:60:9d:c7:da:99:75:da:de:cb:01:a9:e4:0c:15:21:99:d0:
         55:f2:97:f2:07:b6:b7:b1:cf:11:f9:07:92:5c:10:4f:32:55:
         ed:68:ff:1b:cf:64:0e:82:fe:bd:6a:5e:a8:78:7c:69:82:72:
         ef:bb:2e:d3:f3:5c:d2:fb:05:c9:59:34:27:22:ff:6f:23:13:
         77:53:7e:d9:39:35:7a:a2:8b:16:1d:ed:84:d5:b4:63:a9:fb:
         4a:0b:f1:b7:e5:27:27:74:2e:00:a4:08:1d:49:af:3b:35:65:
         73:6f:6f:ea:78:65:2d:ff:fe:ca:24:73:09:3e:d4:37:e9:b1:
         3f:73:ca:3e:b7:9e:13:b4:db:ec:48:aa:ae:62:7d:98:98:8c:
         be:01:ce:2d:b6:3b:c3:e1:49:a7:f1:9c:21:3b:ad:00:42:8c:
         9b:bc:67:a3:60:66:40:be:fc:ed:9a:67:d6:eb:21:db:bd:12:
         e2:92:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:27 2025 by rpki-client