Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
File:                     sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json)
Hash identifier:          tiQjOniZ3qalwY0QsIY+xvwg8jP+kDcba3dfzS2/nGg=
Subject key identifier:   DD:29:F1:17:D6:B0:3B:56:95:8E:67:93:8B:A4:37:68:A6:54:0E:39
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Certificate issuer:       /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial:       019752A1C17ABAB12AB9CADE09BDE6BDDB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
Manifest number:          1182
Signing time:             Mon 09 Jun 2025 03:00:21 +0000
Manifest this update:     Mon 09 Jun 2025 03:00:21 +0000
Manifest next update:     Tue 10 Jun 2025 03:00:21 +0000
Files and hashes:         1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=)
                          2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=)
                          3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=)
                          4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=)
                          5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=)
                          6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=)
                          7: Ud1-qg4EKtzsyzWQNEDC3VcBphk.roa (hash: tG3V/2PvCU18KU7wZhF4EU3GKrtt9KLBzuF/XDqtx0A=)
                          8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=)
                          9: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=)
                          10: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=)
                          11: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=)
                          12: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=)
                          13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: 93ggGS/y0mfckjBN0qf6GD+BuFtPOwsH/wT0T2zPxmE=)
                          14: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (hash: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a1:c1:7a:ba:b1:2a:b9:ca:de:09:bd:e6:bd:db:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
        Validity
            Not Before: Jun  9 03:00:21 2025 GMT
            Not After : Jun 10 03:00:21 2025 GMT
        Subject: CN=dd29f117d6b03b56958e67938ba43768a6540e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:59:d9:82:1e:40:4c:47:7b:3e:97:9d:61:
                    25:de:7d:24:9e:b9:72:0e:7a:f2:2f:70:20:82:c7:
                    6f:b4:a6:50:06:11:b3:72:3d:50:41:17:66:c7:c2:
                    6f:b0:cc:5e:ce:5f:77:41:80:1f:66:8d:dc:72:df:
                    37:55:6b:f5:15:68:dd:a9:a6:1d:b3:a7:63:2a:22:
                    52:98:7e:fa:a6:51:6f:5b:52:7e:56:b0:8e:01:d9:
                    6e:f5:82:db:35:3a:02:3b:86:cc:3e:c1:2c:2d:a0:
                    a6:02:17:ea:13:ef:03:f1:92:80:ee:83:f9:93:cf:
                    84:2a:e4:90:54:2c:d5:cb:31:a2:08:7e:44:63:c4:
                    12:71:32:65:25:b1:5c:0d:0e:dc:b0:11:b5:87:79:
                    00:f4:07:5b:aa:32:ca:24:a2:f8:49:a9:81:af:30:
                    d5:7e:2b:50:b2:55:d8:44:82:82:20:a3:02:d4:f3:
                    c8:fa:5c:38:53:af:ab:a5:cb:45:9e:b2:e0:5f:87:
                    3e:25:b1:ba:78:b9:67:24:d7:38:5e:6d:d5:af:57:
                    8c:ed:f2:50:86:0b:b8:6f:52:c3:1f:c2:88:a1:6f:
                    47:53:24:c8:3b:af:20:53:d6:cd:a4:e9:21:ff:fb:
                    29:0d:b7:8e:6d:e3:ec:10:d6:f5:bf:ac:dc:2f:39:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:29:F1:17:D6:B0:3B:56:95:8E:67:93:8B:A4:37:68:A6:54:0E:39
            X509v3 Authority Key Identifier:
                keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c2:e2:eb:0f:ed:eb:65:d7:af:fc:46:c2:92:86:8a:c6:c2:
         47:61:c5:82:b6:35:b3:ba:32:10:ba:69:11:3c:8d:e0:21:9c:
         52:ba:2f:bc:44:12:30:c7:03:e2:43:ef:b2:31:d9:af:65:57:
         e4:db:fb:56:53:c3:3d:47:6a:a2:bf:6c:87:28:ce:e9:08:55:
         5c:e6:11:e2:b0:0f:ac:e0:92:b4:06:bd:ef:a7:ae:1d:62:50:
         b3:67:dc:31:bb:ab:8e:44:59:12:e0:17:73:8a:5f:75:89:44:
         e0:e8:fa:60:a0:db:d2:46:d2:c4:ad:11:5a:bd:46:44:8c:18:
         2a:98:aa:f2:bc:ac:c3:c0:fe:80:a5:01:75:52:c4:a0:cf:19:
         0d:ad:05:80:01:7c:9a:f7:00:07:3c:2b:4a:ec:15:26:b3:d1:
         0b:c1:c4:35:85:a0:1b:10:a8:d8:6c:8a:50:75:58:7a:f1:b1:
         46:af:e2:a4:f2:79:82:f6:51:d7:47:7b:7e:9a:e3:db:7e:d0:
         6c:bb:25:0c:56:a2:70:51:fe:80:17:df:66:68:a2:ba:05:14:
         fa:0a:2c:1c:b0:a8:f1:97:3c:48:50:f1:f0:c2:66:6a:4f:62:
         29:96:d9:e0:b7:d6:62:f0:c0:93:23:f4:ff:d7:39:3d:7f:ea:
         5e:0e:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:22:18 2025 by rpki-client