Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File:                     qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier:          cFy8yrE+gOLsZch6iihzYrV3iBlJROHeYqBe70N8SQ8=
Subject key identifier:   16:AA:24:3C:C6:5E:B8:2E:59:40:0C:46:29:1F:33:6A:00:E0:F3:EB
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer:       /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial:       0197469DC74853A7DDE5ECC0652265BD9EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number:          09BA
Signing time:             Fri 06 Jun 2025 19:00:34 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:34 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:34 +0000
Files and hashes:         1: LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa (hash: dGCLqqCykyXwmqrTu57eC+iNpUcOeyFsBoySlkBpsAY=)
                          2: f00necdCYsOtLA09vtcvA-KOmsA.roa (hash: Ln1z19NPMKA7PbsbJsMQ04rbx28+DicO/rDcVFYN3W8=)
                          3: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: qi7MWR1elVVFn9B6ceqnEr+C2sV0Pm246bhPOVJ1Xz4=)
                          4: tPirfcovOkq_f6ORw4qTDcBMYwM.roa (hash: YI04iLKTA2ElngcnawjReFNoZnCJvny+G11HRulhdOo=)
                          5: wCVsvqWRahQ-a8qZpU_P5hfC6fo.roa (hash: zXnXIwQPC/ukVsvs/CWHd4opckhB/IeyNk2RyXjvBzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:c7:48:53:a7:dd:e5:ec:c0:65:22:65:bd:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
        Validity
            Not Before: Jun  6 19:00:34 2025 GMT
            Not After : Jun  7 19:00:34 2025 GMT
        Subject: CN=16aa243cc65eb82e59400c46291f336a00e0f3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:28:e5:be:51:60:93:78:0b:db:e6:cc:48:
                    af:26:94:b8:33:38:7b:6a:a4:a1:00:2d:fb:66:31:
                    c4:d5:48:04:43:8c:70:3e:3a:a2:72:89:6a:39:12:
                    1d:99:58:2c:75:f7:ae:a0:72:b7:14:b7:ef:5b:d6:
                    47:d7:6e:c6:c4:c3:95:0b:75:fe:fe:8e:14:b6:56:
                    e4:25:1e:19:7b:c3:44:47:b7:11:9f:e7:7d:c5:eb:
                    bc:04:98:17:84:f8:66:54:26:ec:8a:e5:25:6a:85:
                    76:83:9e:d6:44:ff:f0:2b:60:03:e4:90:1e:fd:ed:
                    bd:c7:75:a5:58:01:a9:19:06:55:56:0b:5b:22:ed:
                    61:24:df:16:b1:f5:38:81:e0:3e:02:8e:83:f7:b4:
                    0f:46:ca:d0:60:c1:a5:a0:08:bb:e6:80:79:0f:c9:
                    53:ee:46:c1:e0:33:24:8e:33:6c:16:eb:8d:42:82:
                    45:74:0e:e7:a0:9c:82:92:27:94:34:a8:6e:e5:6d:
                    7d:05:9c:d8:e3:31:1d:f3:98:b7:f8:98:26:56:c5:
                    1f:b2:5a:01:3b:9e:f6:f3:98:c6:6e:2b:2c:7b:31:
                    3b:b3:af:ec:81:1a:48:a2:de:a6:5e:c4:01:66:94:
                    04:7f:26:83:62:b0:84:72:90:07:51:4c:97:2b:30:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AA:24:3C:C6:5E:B8:2E:59:40:0C:46:29:1F:33:6A:00:E0:F3:EB
            X509v3 Authority Key Identifier:
                keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:84:a7:a1:79:29:33:c2:d8:44:7a:49:66:cb:71:70:f4:b2:
         d0:69:60:e7:ea:af:01:3e:25:5f:08:a1:b4:0e:50:36:99:17:
         5a:b0:12:db:c2:63:71:c8:25:94:59:27:53:5e:8a:e6:c4:88:
         84:b8:e3:29:aa:ef:73:f5:f7:75:9d:8b:3e:e8:67:3f:5d:30:
         27:45:24:73:c0:b0:b4:63:2c:de:01:45:b6:ff:23:7d:6d:3a:
         4c:d7:4c:65:fc:21:99:1d:48:9f:4b:73:26:42:b3:cd:fc:19:
         97:28:fd:c6:5d:a1:00:b2:bd:13:e4:70:22:9a:95:1b:c0:a9:
         ee:da:21:30:1c:c4:c9:1c:da:c1:da:5f:9c:b2:70:e8:97:29:
         4b:d8:bf:43:21:8b:70:64:c7:0f:88:f2:9d:c8:6e:ad:63:16:
         f0:de:90:c0:6c:b9:c9:0b:bd:4e:7a:bc:f8:43:8f:a3:89:84:
         df:bf:e6:4d:5f:72:83:f5:bf:32:dc:fc:b3:af:87:53:08:85:
         4b:81:b1:03:28:77:f0:71:82:0a:a6:4a:9d:1b:1c:bc:c8:2f:
         da:14:25:00:7c:ef:fb:f5:47:64:79:a4:f6:95:0f:00:58:80:
         2c:08:70:6e:15:1c:12:28:8a:24:ef:e5:3d:7a:d8:3f:cd:a4:
         d1:24:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:47 2025 by rpki-client