Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File:                     q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier:          RobtoCq3RpDZjUqzLe37/P+wiQCCvuT9TQyPIGwUQvU=
Subject key identifier:   A5:D4:D4:77:2A:89:85:22:74:C6:DE:39:D9:56:3D:B6:6C:FD:0C:74
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer:       /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial:       01974E58637E8122E6D6AD9B79659908519A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number:          15C1
Signing time:             Sun 08 Jun 2025 07:01:44 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:44 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:44 +0000
Files and hashes:         1: VAImUOtIDMTUQI76JnLfRrvllyo.roa (hash: 4SRj/s3ojBfQysGt03CIZScJZWxzkyEXZbgo7Y3hEkk=)
                          2: cqMsKKEpjqP4gOzkP6YxkMm3WxE.roa (hash: cpcpc/9CzEy+wkt4CwIjle5PkQNTLuHjrssCk9RjDo4=)
                          3: isUlANYjYqCjfC0Ok17mG4MP8p0.roa (hash: VTLE3KmkIit4Ru9ybnFT0PTCo031dbYNUSZynBG0Bx4=)
                          4: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: 8oWIk2dyDFw6BobV7+SYlKfMRcGGoHcADB3yrEsyPeE=)
                          5: ut3Ia6-mOfUCkcqND1t7uvinIqc.roa (hash: aJkTC/NqOQ2/INKdyvEr1miuxsKpaWRMdWzEAJzyDDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:58:63:7e:81:22:e6:d6:ad:9b:79:65:99:08:51:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
        Validity
            Not Before: Jun  8 07:01:44 2025 GMT
            Not After : Jun  9 07:01:44 2025 GMT
        Subject: CN=a5d4d4772a89852274c6de39d9563db66cfd0c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:1b:de:cd:8b:6e:63:a8:02:5c:f5:13:5a:
                    52:84:f1:31:ce:8e:02:ec:f4:17:98:11:ff:44:08:
                    9b:d6:aa:d4:8d:60:71:08:1b:a3:8c:9d:3b:92:e4:
                    0a:ad:17:d0:dc:72:c3:c1:70:6f:81:0d:ec:59:04:
                    d2:62:b8:90:2c:f8:54:28:b6:57:d7:df:48:be:20:
                    80:c6:60:0c:56:5a:af:80:a2:54:70:bf:f3:b3:7c:
                    0f:90:a1:cc:9d:ec:74:46:2a:ab:8f:57:ff:37:40:
                    90:ff:86:df:fd:c0:34:b0:b7:cb:5a:e5:ec:4f:54:
                    4a:69:ab:07:5f:cf:2e:1c:9e:73:3c:b3:5e:52:85:
                    2b:91:1e:57:80:37:15:2e:0b:75:cf:57:bd:6a:e3:
                    f6:b3:2c:7c:6f:69:d8:f6:6c:04:f9:a3:7a:b7:1d:
                    ca:9f:38:cb:32:2b:a6:53:51:88:fd:b5:9a:36:ba:
                    be:d1:f8:30:ea:cc:7e:7e:1b:9a:08:c9:0b:4d:0f:
                    6b:cc:d2:0f:3a:de:db:1e:4b:ce:4c:9c:ea:c0:45:
                    3f:f2:2e:52:73:4e:e9:4d:75:c1:61:9a:fb:64:27:
                    15:4a:da:c7:a5:bc:35:cb:34:9f:c3:c9:7e:c9:be:
                    06:7b:79:6b:a7:57:c2:7f:12:92:59:bc:03:64:7b:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:D4:77:2A:89:85:22:74:C6:DE:39:D9:56:3D:B6:6C:FD:0C:74
            X509v3 Authority Key Identifier:
                keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:11:6e:8a:76:31:76:61:41:9a:14:6a:c2:90:11:88:47:a9:
         c5:56:92:97:62:45:ce:61:e0:1e:83:07:b5:8e:dd:18:97:2e:
         ca:99:c8:db:3d:33:47:1c:36:59:a1:8e:60:2f:a0:b2:7c:9d:
         64:a9:04:c8:2e:66:a2:8d:59:e5:32:53:05:0f:31:4d:5a:88:
         c5:ed:5a:90:6b:08:b8:71:45:d2:a8:e1:53:7f:6f:97:99:55:
         39:ba:f2:4c:80:7b:68:55:2a:d3:8d:63:bb:2a:57:f4:55:3a:
         d4:f2:dc:65:5c:05:eb:9b:f2:c4:2e:71:9e:7b:e5:98:10:bf:
         22:5b:6f:5b:35:db:39:38:74:c9:ce:72:8e:f7:bf:58:62:18:
         a8:88:00:a0:da:7c:f5:5d:39:03:fb:06:3e:05:20:f1:a9:7c:
         d0:55:e8:f0:37:fc:04:cc:0d:cd:93:f8:6f:91:d7:05:3f:cf:
         9f:ca:8f:d3:62:80:f0:ff:85:1e:b8:f2:26:a6:8b:43:c4:0d:
         bc:85:db:89:4f:8c:3b:25:70:1e:80:93:cc:96:e6:a8:66:83:
         bf:d7:49:3b:2a:83:f3:95:5d:12:18:7a:c4:ce:7d:d6:1d:6c:
         60:24:3a:21:63:8d:35:b5:f2:9e:44:3e:21:08:39:a4:8a:db:
         5e:a7:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:06 2025 by rpki-client