Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
File:                     ga63YipE0jwqRbTQ30DWzcwzJB0.mft (raw, json)
Hash identifier:          XxTrMZK+TzRMnpGOALy5ffkDQ8U6yWev6ZI0iWGtX5g=
Subject key identifier:   9B:02:4D:67:40:A9:AD:88:9F:A5:D9:28:0C:34:FD:9B:0F:C9:43:E1
Authority key identifier: 81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
Certificate issuer:       /CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Certificate serial:       0197493178119B2385D8BA87E2D978408AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
Manifest number:          060A
Signing time:             Sat 07 Jun 2025 07:01:08 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:08 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:08 +0000
Files and hashes:         1: TdvnZ-pSKLZ2di0IsrjKM1Y6TNQ.roa (hash: 3haz/IHoayXe0sYmFVaRZdqvibPOZRqi6vqfWqU727k=)
                          2: ga63YipE0jwqRbTQ30DWzcwzJB0.crl (hash: 0extRNtKh4xQF85LKJ1LapNMVykrgxR1qWUuiR62e+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:78:11:9b:23:85:d8:ba:87:e2:d9:78:40:8a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
        Validity
            Not Before: Jun  7 07:01:08 2025 GMT
            Not After : Jun  8 07:01:08 2025 GMT
        Subject: CN=9b024d6740a9ad889fa5d9280c34fd9b0fc943e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:62:cd:46:49:bf:e5:93:b6:73:67:41:8c:
                    8c:bd:60:14:51:91:25:58:04:c3:7b:dd:db:3d:91:
                    7b:e0:3a:04:61:ea:ad:ed:3c:26:32:62:f6:9a:c9:
                    62:c6:4a:18:8b:bc:87:e7:66:db:27:51:98:fa:09:
                    ef:61:9f:88:87:67:43:a9:46:e6:ef:93:b7:f7:26:
                    d2:98:7b:89:e9:63:e9:f0:59:e8:5b:07:44:f0:f5:
                    49:1f:8a:ac:0f:db:86:9c:b2:a2:07:fd:99:80:48:
                    77:71:b4:12:5f:a5:d9:8d:f4:96:12:a5:aa:37:97:
                    72:d0:fa:d2:6a:00:9b:66:1e:6c:2a:0d:e2:e7:fc:
                    37:d3:47:c8:92:02:e0:85:a2:15:7c:9d:b3:ab:b1:
                    7f:29:52:7e:90:1a:e3:b7:43:44:75:24:5e:fc:d6:
                    b6:eb:7c:c0:ed:0b:8f:3a:c4:e5:de:91:4d:70:0b:
                    41:3a:6c:0f:ac:2d:07:ac:d5:cd:15:50:e4:c9:88:
                    04:da:ce:cd:81:b4:a9:25:cc:ad:1e:2c:a7:d2:08:
                    b4:d8:3a:14:40:85:98:32:f6:a7:e3:3d:d1:e3:0d:
                    ff:b4:b7:e7:41:90:9c:d7:1c:30:16:55:c1:d8:dc:
                    6a:27:3b:fe:ea:81:a6:bd:23:08:06:9c:51:ab:3e:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:02:4D:67:40:A9:AD:88:9F:A5:D9:28:0C:34:FD:9B:0F:C9:43:E1
            X509v3 Authority Key Identifier:
                keyid:81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:31:b6:08:aa:2e:51:b5:1e:ae:55:9f:bc:ff:fe:f9:59:db:
         08:b9:de:d0:5d:47:cd:40:ab:7f:f6:77:63:91:a8:fa:e3:75:
         d0:ef:d4:4b:84:da:17:aa:03:e5:16:1b:33:73:0e:d3:81:da:
         4e:d9:e0:f7:1d:48:c0:ce:68:10:ae:b5:de:58:7b:81:17:62:
         8a:67:6b:5a:a6:d5:9e:ea:1b:7a:ba:c9:cf:f8:64:56:09:1a:
         d5:3d:b1:6c:da:67:e4:51:32:5b:72:40:10:36:7a:c3:c8:04:
         f6:32:3c:4c:c5:04:1b:09:14:2b:40:10:4a:86:14:7b:af:c2:
         ad:1e:4a:f7:56:ac:c4:40:87:aa:d7:13:8c:8e:7c:14:ad:dc:
         40:24:16:ce:93:59:67:cc:65:04:9d:ed:07:ea:d4:bf:3e:e3:
         26:d2:41:9e:a5:f3:b4:d6:68:76:fe:75:c6:88:65:75:9e:99:
         fb:23:66:47:8d:d6:4a:b5:ae:16:d8:e2:55:60:60:e5:1c:8c:
         fd:1d:66:6d:70:36:af:da:6e:0b:fe:93:2d:44:4b:1b:7a:dc:
         ab:76:93:4d:b2:88:04:fc:de:d8:04:d9:f7:4e:52:20:ca:10:
         0e:50:71:cc:bf:5d:0a:4d:0a:2a:a5:22:6c:10:cb:82:45:27:
         3b:15:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:07 2025 by rpki-client