Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
File:                     c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft (raw, json)
Hash identifier:          9LqVIobXbilZ8A7kJw8I71FtxeNFL0OTG5hGNSeN6dA=
Subject key identifier:   41:8A:18:94:E9:FA:D9:2A:0F:CC:1D:E1:10:81:C7:92:6C:50:A4:8D
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Certificate issuer:       /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial:       01974B8D85A778665E552A49290A00F102D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
Manifest number:          1586
Signing time:             Sat 07 Jun 2025 18:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:55 +0000
Files and hashes:         1: 0PiYBdxARRXjKJ5FesVWJAu_FMA.roa (hash: w4vAM6MoKtVTj5z9YUnQQ55u8WtiSlBeHs3CzkimFHA=)
                          2: DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa (hash: pJjsYkDAabv/EkTWBVq7tQJ2cKhCWbGhb3faDIO/OsQ=)
                          3: GqOUJDMk-IFQdrsD-fU9eu4Qyek.roa (hash: pmdKsVvhyhUrb6RefnEOlCVulb4+abNUam2FCZO1InY=)
                          4: a-p1UhUt4t3M5odJCGB7R5m1rzM.roa (hash: 2U39CobRw9KssePwQXfRPFLNg8MC7aWq6D0bgHVvK7A=)
                          5: c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl (hash: /gaVZWtLNQtriQ7VG2HLkUlIOZIfmO7hFkEAfb2PVME=)
                          6: f0HMDLVx5t59P591PrAxrNnUs2c.roa (hash: /wxFlOgstgeKK54T7FynNE0uD4UjWWlnpZIecJhWOqM=)
                          7: h4W-VjJcy1QFeMUrhU0dF3Ixqa0.roa (hash: 5B5X7otDiidFA+PB/Jg+nfAWrr9IuoZCHyarTdrsmt0=)
                          8: jdGQJIZnkRjBDTTHnu0krS57iP8.roa (hash: e+2axTWyygbixhenSw9GiW7DCvps0Y82zf10NziEjRo=)
                          9: xyxr3pfItv9o4W3QbYDO6voIQ0Q.roa (hash: 8cnzmry/1ExM44UYvG1JFsqTRR1vf8KTHcvSzmwD5MY=)
                          10: yDomHUFVSb_vaV7A7wWb5nAhjlc.roa (hash: yYYELV3m9YlCfoig7ujzEpQib6RUtY2OkBAFEppcwPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:85:a7:78:66:5e:55:2a:49:29:0a:00:f1:02:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
        Validity
            Not Before: Jun  7 18:00:55 2025 GMT
            Not After : Jun  8 18:00:55 2025 GMT
        Subject: CN=418a1894e9fad92a0fcc1de11081c7926c50a48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:f2:8d:5c:2a:73:cf:ea:d3:e3:85:a5:ae:
                    7e:5f:5b:9c:ea:2f:b8:28:50:d4:26:ea:89:8a:c3:
                    16:c5:22:e6:12:98:80:cc:e4:6f:f6:52:ae:2c:45:
                    a7:1d:6b:07:23:86:4a:3b:4d:24:38:cb:a4:ce:f7:
                    80:ca:5a:b7:48:96:c7:f0:7c:9f:e3:b9:1f:fd:e6:
                    64:53:6c:5e:c3:bf:e2:de:ff:a8:b3:fa:e9:33:c0:
                    08:36:b3:43:41:95:3c:9b:9b:c2:58:c7:65:99:ed:
                    6a:07:e9:c2:a2:46:d7:d0:a2:40:c5:fc:e1:05:ec:
                    cb:28:b5:f3:a4:42:e6:bc:a7:60:29:30:86:a1:0e:
                    c2:35:ae:ae:34:d3:a6:c4:bf:b2:03:46:6a:0a:c5:
                    82:aa:b1:31:85:43:29:a1:bd:f4:40:e7:bd:03:e1:
                    11:05:34:51:bc:6f:ed:dc:ec:21:b5:d0:93:54:e3:
                    75:14:e3:da:27:e7:02:b3:7d:3d:f1:8c:fb:c0:8a:
                    77:e2:f0:40:bf:8a:37:cf:25:e4:3c:08:4c:1c:66:
                    7f:0b:d0:cb:e0:56:9d:b0:13:34:08:f6:4c:72:d8:
                    d3:64:07:35:ca:cf:6a:f8:c4:20:89:84:0b:1c:37:
                    f0:ca:dc:76:62:8e:e5:fa:43:5f:c1:c6:f4:b3:55:
                    0c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8A:18:94:E9:FA:D9:2A:0F:CC:1D:E1:10:81:C7:92:6C:50:A4:8D
            X509v3 Authority Key Identifier:
                keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b1:7a:0e:cc:aa:78:89:73:d5:f7:19:e4:f8:e6:5d:9d:ce:
         90:c0:d0:b3:78:d0:59:57:3a:2a:6f:8f:36:4d:68:2b:f1:53:
         ff:f2:37:8f:38:f7:c3:fd:32:71:5e:24:d1:65:04:2d:a5:a3:
         8e:e5:28:9d:a8:0e:f6:02:56:ba:ec:b0:c3:e0:a7:91:95:a5:
         8f:df:13:15:ac:0f:d2:9a:a4:9c:fe:91:f2:9a:bd:0f:e2:ad:
         c4:26:06:e3:ee:e9:2a:e3:a4:e9:00:53:b3:92:2c:8d:7f:b9:
         50:ae:22:5b:34:aa:a0:f8:77:ed:dc:a6:98:a0:b4:ae:d2:1e:
         19:2f:e4:3c:4d:50:06:59:8c:67:3f:bc:22:0b:b7:61:a9:18:
         8a:7d:ad:33:41:df:22:24:48:7e:d3:0c:84:24:90:c3:17:3d:
         0a:1a:d5:b6:68:45:fd:d0:95:7a:90:19:20:d3:3b:83:f7:58:
         59:df:18:39:5f:d1:78:25:1c:76:1c:7e:e0:42:3e:3b:15:83:
         bc:12:10:d2:8c:1a:f5:87:45:c6:77:28:76:41:c2:e8:70:f9:
         fc:ad:b5:33:99:f1:49:a0:f7:24:9f:c6:c1:9c:a5:94:5e:17:
         0e:25:a4:41:0c:74:d9:ad:03:4a:39:bd:98:34:1a:0a:4c:b4:
         80:e4:aa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:15:27 2025 by rpki-client