Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File:                     9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier:          xAn92chiEgAxeEffFQjBMNO3gvbvX2moKALRWgXUUVg=
Subject key identifier:   AB:C7:6F:A0:0B:B5:3F:BD:33:4C:8A:87:5C:F0:94:3D:7D:2E:2B:BF
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       01974742D6A429FDE523966239218D864CE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number:          15BB
Signing time:             Fri 06 Jun 2025 22:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:52 +0000
Files and hashes:         1: 2It_I9J9BgRnnQT5C-V712e3yx4.roa (hash: ESMa8M4XpFdW7jSu8zHJhrebxwQNF93LMCKBGt+hLE4=)
                          2: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: QzFjwzrSyEgj0AypeP96ra3jbzg/jEu52tBOtTE0Ewk=)
                          3: KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa (hash: RKZNdSizbytDBkbsChEKMTDt0/k1bzP9vgLbksKhVuw=)
                          4: PueZ2Saibe_grnff0WyfuKxQBLM.roa (hash: ASz9qPcsScVDhnrxdRTZGa/ifE1te7I/3UbW2qncNLQ=)
                          5: V7pzudrBvKtyWxKZWO0x6f4_reQ.roa (hash: ad12O7f2C5d8aoYSLL5ymITCCLpvSolDNgnwjYiuMkk=)
                          6: bIOnLPyVT4HMkOF207Y-bxFgW_o.roa (hash: sgHv3RFNqOpH2R7wPkXbngTzHaihOut0tmB1GHo2cvM=)
                          7: iNeJPd86ukMD5LJRKI03IcI4aR8.roa (hash: zF30P8QynaOrv8qAmVAHNi6YCjV5/lmN6BVFSTJGcBU=)
                          8: julraPqS2QSJ2CA0Adqt_PgJx0U.roa (hash: NxlNqXL0wqzFcIItDSgkJqkpdEhcleIRL/5cK6P63CI=)
                          9: mYwzdqAY7_S9Fk60kMnWASIug-A.roa (hash: 52FaK7zJCUXQtBsYKmcDyOdvm3LIQVlGj6112gPSUr8=)
                          10: rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa (hash: FCFQH85pPvPZL6nivkLqilRYIo7O5H0KAY3npTX/SAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:d6:a4:29:fd:e5:23:96:62:39:21:8d:86:4c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Jun  6 22:00:52 2025 GMT
            Not After : Jun  7 22:00:52 2025 GMT
        Subject: CN=abc76fa00bb53fbd334c8a875cf0943d7d2e2bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:61:e3:a9:dd:a6:70:86:51:42:e1:a8:66:
                    51:bf:59:8b:c5:dd:75:2c:46:6c:45:57:62:44:85:
                    bb:0f:35:bd:c9:b2:cc:90:4f:b7:9d:88:f4:39:41:
                    e1:74:ce:e2:21:88:1a:3c:fc:cc:57:a3:b7:a8:46:
                    02:0f:0e:39:59:cb:8a:0d:67:40:4d:d3:64:7c:24:
                    6b:82:a0:01:68:92:6a:a1:b3:2b:07:28:d0:0a:cc:
                    8d:7d:75:4d:32:52:5b:5f:af:64:cf:b1:fc:6a:79:
                    be:79:f0:b9:ca:28:01:bd:06:8c:29:8f:f2:be:27:
                    74:a4:46:03:12:23:06:b8:32:3c:98:8a:63:74:41:
                    26:8b:ed:a0:de:6f:dd:93:2b:ca:b9:c0:fa:7d:02:
                    5b:fb:ac:85:f9:fc:ea:cd:a5:56:b3:fc:78:bb:61:
                    09:bb:d8:52:76:a5:e8:52:31:47:13:20:00:58:e2:
                    3c:ae:ec:e2:78:09:69:20:e3:bb:b1:64:be:48:42:
                    ac:2d:cf:2f:73:03:6e:c3:44:55:32:aa:29:a5:91:
                    58:c4:a7:6d:73:41:ce:6d:f2:f6:c6:1a:0d:35:ac:
                    4b:d9:c3:f7:48:8b:0e:47:92:ac:2d:bc:cc:35:7f:
                    73:51:fd:24:5d:25:16:28:bf:f5:16:2d:66:d3:37:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C7:6F:A0:0B:B5:3F:BD:33:4C:8A:87:5C:F0:94:3D:7D:2E:2B:BF
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:5a:e1:23:8e:30:65:51:4e:ac:9b:7d:b8:6e:40:44:b8:34:
         3d:56:dd:35:9c:15:5d:2f:c1:3d:35:45:4b:d9:4d:0a:6e:5f:
         21:71:1c:26:4e:98:22:08:ea:53:bf:f5:6d:78:6a:ed:3b:64:
         95:8d:3c:3c:25:8e:f5:76:3d:0d:24:52:33:cd:5e:99:eb:1c:
         44:f6:4e:6b:e7:55:99:4e:c8:99:c2:5f:b7:9f:8e:72:7b:68:
         bf:d7:bf:9e:c1:30:40:a0:93:6d:6b:05:75:70:c1:14:9f:b3:
         b6:da:45:ef:c1:57:5a:95:a2:ed:60:20:c6:70:61:2a:5b:1a:
         63:66:0b:6d:a4:bb:01:43:39:f9:ac:4a:92:70:1e:ab:8b:21:
         e6:f7:98:da:04:10:d7:d6:02:df:3d:a3:2b:13:34:62:5e:0f:
         5c:af:c6:e3:d3:28:e4:11:94:57:7d:6d:58:29:45:07:20:3c:
         27:f6:3c:4b:0a:ac:92:4e:0d:8b:77:a9:43:78:fb:f3:8f:11:
         75:1f:a9:b8:2b:d0:ee:61:19:8d:9b:fa:43:df:7d:d0:8b:87:
         a4:a3:a1:57:f6:38:c7:28:39:6d:81:8c:20:c5:d3:e2:53:a0:
         d9:6c:bc:e3:a7:b1:8e:b4:e9:ea:cf:5b:a4:f4:ef:2f:f7:cb:
         74:f3:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:31 2025 by rpki-client