Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
File:                     sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json)
Hash identifier:          cCkWgFrOAPee2cJMpPyK5s4H/bN9wTJIss+PnYUlz6M=
Subject key identifier:   2F:91:FD:AC:32:58:DB:8C:06:13:E4:E0:2E:D3:45:68:A6:2D:69:26
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Certificate issuer:       /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial:       01976DAB79B8510E8439D91BE987267560F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
Manifest number:          1190
Signing time:             Sat 14 Jun 2025 09:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:43 +0000
Files and hashes:         1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=)
                          2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=)
                          3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=)
                          4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=)
                          5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=)
                          6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=)
                          7: Ud1-qg4EKtzsyzWQNEDC3VcBphk.roa (hash: tG3V/2PvCU18KU7wZhF4EU3GKrtt9KLBzuF/XDqtx0A=)
                          8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=)
                          9: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=)
                          10: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=)
                          11: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=)
                          12: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=)
                          13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: uZPbulCq+8C7FWcgDCQP5FP7gjDaaL4Nkl5TwNckBYs=)
                          14: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (hash: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:79:b8:51:0e:84:39:d9:1b:e9:87:26:75:60:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
        Validity
            Not Before: Jun 14 09:00:43 2025 GMT
            Not After : Jun 15 09:00:43 2025 GMT
        Subject: CN=2f91fdac3258db8c0613e4e02ed34568a62d6926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:f9:8e:9b:a9:a2:eb:cf:a0:ef:c1:67:7a:
                    26:31:c7:06:c4:98:9e:68:80:85:0e:e3:b7:fb:01:
                    ee:72:c1:72:21:76:01:90:9e:ff:b7:30:eb:dd:47:
                    2e:b3:f0:ab:9a:31:8f:72:61:24:00:a3:83:4f:89:
                    67:61:e4:96:2f:fb:63:ac:e2:95:8d:03:e0:62:c4:
                    ab:58:e2:1f:01:1a:74:c2:ee:d9:d0:71:f9:83:ef:
                    17:61:e1:88:58:dd:20:d6:49:38:ae:a7:f6:a3:be:
                    b1:c2:45:d1:3b:8b:d0:01:cf:11:63:ca:0f:0c:e5:
                    cd:7f:86:92:84:44:d0:d6:d8:e4:9e:2e:67:72:fa:
                    90:bc:b9:5c:d9:a4:ad:5b:be:14:24:bd:ba:9e:a8:
                    40:6c:89:80:86:5c:46:ad:2e:9d:a1:ed:0c:83:32:
                    c6:23:46:25:0c:2b:8b:72:0f:65:03:76:46:91:6d:
                    bd:9b:4c:4d:78:58:9f:7b:c6:d1:e8:ba:4d:df:ac:
                    ae:ed:29:9a:55:c2:9b:ff:1a:c0:13:4d:9f:95:b4:
                    18:42:8c:f3:06:bc:41:1d:08:82:77:7b:be:6d:4c:
                    ed:91:bb:5b:de:44:d8:b0:c3:ac:26:90:38:ee:54:
                    6b:51:a2:e1:1c:bc:36:e3:25:3a:c9:d7:18:19:49:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:91:FD:AC:32:58:DB:8C:06:13:E4:E0:2E:D3:45:68:A6:2D:69:26
            X509v3 Authority Key Identifier:
                keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8d:41:01:82:cc:b0:04:0c:a0:6e:99:4b:8b:54:74:b8:d6:
         5d:a2:7f:88:61:81:8c:a4:14:db:0a:f7:9b:79:d0:55:38:2b:
         4f:6b:03:2c:97:a9:cd:e2:5e:62:6d:25:4b:b5:b6:c4:84:19:
         63:d0:ef:73:b5:9b:0d:7f:20:8c:db:b8:8f:66:e1:50:d4:10:
         ef:07:41:d8:b2:28:9b:27:bf:ae:d0:e4:60:a1:fc:24:22:0a:
         e2:60:30:4f:84:26:f6:a6:ff:5b:77:3f:47:93:48:2e:bd:85:
         69:2b:5f:0c:0f:d7:a9:fe:e5:1d:f6:a0:11:9f:c0:ee:77:25:
         82:72:d6:f1:6a:68:06:7f:7c:4b:94:dc:a7:fa:0d:6d:fd:85:
         90:10:bd:57:d1:2d:ef:4a:b4:8c:d8:b3:ac:54:c0:71:06:7b:
         c2:14:81:11:6d:52:c5:88:10:30:d6:74:b1:57:80:43:a8:98:
         36:f9:ff:4b:e1:9f:34:c0:48:8f:22:4d:14:6a:77:57:51:f3:
         11:e0:94:9d:96:38:09:8f:35:7f:55:65:7c:2f:b8:b7:43:42:
         69:74:f1:21:28:40:39:30:27:54:c2:5e:2c:eb:40:eb:99:f4:
         76:7d:81:a0:05:09:e6:f7:42:82:1f:4a:20:c0:f3:4c:98:3b:
         a7:cf:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:38:09 2025 by rpki-client