Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File:                     8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier:          6/7bL+2xeI2dsq4OsEByG5JV+UpiDu3o+Dk5xW5GOu4=
Subject key identifier:   9B:4F:30:11:E7:6A:34:53:75:08:6C:07:BF:C3:6C:42:37:0A:9E:75
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       01974AE8E5EBDA892567F066A4FBBF80F25D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number:          0F9E
Signing time:             Sat 07 Jun 2025 15:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:06 +0000
Files and hashes:         1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=)
                          2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: IKIuwYPocy69FyZjXNlghcY2nlXM3Gl6E8N6aS/FF3U=)
                          3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=)
                          4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=)
                          5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=)
                          6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=)
                          7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=)
                          8: Y1odvpmyDgd_SZNft3LtP_Y9m5Q.roa (hash: 6tgo1juOE3j4wf1OK40ZNiTNEBkar47yAuVkY/NJHx0=)
                          9: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=)
                          10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=)
                          11: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=)
                          12: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=)
                          13: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:e5:eb:da:89:25:67:f0:66:a4:fb:bf:80:f2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Jun  7 15:01:06 2025 GMT
            Not After : Jun  8 15:01:06 2025 GMT
        Subject: CN=9b4f3011e76a345375086c07bfc36c42370a9e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:ec:62:d5:7c:45:72:f5:da:1c:e9:8d:cc:
                    f9:75:24:76:6c:ec:50:3a:92:2e:04:59:56:f8:1b:
                    74:09:f3:15:0a:fa:ac:e9:9a:4f:22:b2:35:cc:0b:
                    7b:57:f3:f6:cb:78:af:5e:42:93:ab:52:3a:e0:6a:
                    5f:01:38:b8:2b:09:31:5b:09:4b:2d:24:f5:61:b2:
                    c7:44:ff:91:3e:60:cf:47:51:b4:32:49:4c:ee:6d:
                    bd:cb:37:09:c1:2c:57:f4:13:fd:79:0f:b2:2d:7a:
                    3d:7c:8a:21:19:6c:e7:36:37:b3:e8:fe:55:a8:a7:
                    8e:3f:e1:52:3e:fb:0d:7b:e3:42:dd:5e:da:1b:65:
                    5e:9a:2c:7b:a9:c6:72:3d:9b:c9:96:9d:94:56:25:
                    a2:3f:2e:43:f2:cf:e9:b9:91:ff:cf:0c:5e:96:97:
                    e5:81:75:aa:55:90:60:e0:a1:1d:28:05:d8:61:58:
                    87:a1:7e:e2:d6:b2:c9:7c:f1:b2:6e:1c:10:09:10:
                    06:1e:97:a8:5a:a8:16:96:07:c4:60:9c:b9:fe:f2:
                    65:64:de:ae:4a:09:9c:77:ee:33:14:19:7c:9d:b2:
                    4f:db:d8:9f:85:ad:94:55:4d:31:d0:dc:9d:c3:5c:
                    67:dd:e7:16:71:1e:44:ea:25:26:1d:fe:fa:07:f2:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4F:30:11:E7:6A:34:53:75:08:6C:07:BF:C3:6C:42:37:0A:9E:75
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3b:45:65:4c:13:50:82:3b:e2:d5:b1:a3:25:75:e6:13:bd:
         29:4d:be:e1:f7:31:3e:8f:5c:bf:86:47:f4:bf:71:47:3d:6f:
         8b:e5:d7:51:45:23:0e:f5:0e:e0:e3:20:f5:bf:3c:32:e6:de:
         93:ec:5a:30:22:73:21:77:4d:05:b8:19:ef:5c:57:9d:04:c0:
         03:4a:44:51:bb:72:18:25:b1:7b:da:58:14:b5:e7:a6:8e:a6:
         5b:f2:fc:d3:54:1b:c2:fd:97:c6:31:b6:17:73:92:2c:e6:b1:
         66:30:00:b5:8d:fc:e4:54:53:c0:3c:b7:7e:48:f0:47:95:ea:
         88:ee:4e:fa:33:10:4b:32:f8:ec:6c:48:61:99:c5:d6:79:86:
         aa:5b:91:52:dd:38:eb:19:8d:a8:84:87:94:5e:da:56:3d:de:
         e8:63:ef:9c:00:6a:7c:00:9b:48:eb:b6:84:6b:c0:5b:8d:1e:
         81:64:58:e2:2a:8e:02:87:fc:f7:5a:4a:63:f1:9d:d9:f8:e2:
         13:f6:96:ff:9c:3d:f3:f1:72:3e:90:2e:91:56:5d:10:da:5e:
         f9:79:d1:39:5b:ef:82:77:53:2c:b4:08:d0:ef:d8:66:73:49:
         7d:12:ef:2e:fa:41:46:1e:af:ef:cd:ae:80:8e:aa:35:2a:5d:
         33:a6:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:25:31 2025 by rpki-client