Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File:                     B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier:          rqjtlwAnIzFDJ2GyWNH653P7wlqfRPbUQLkJZN82sVM=
Subject key identifier:   C6:EF:3B:4E:7F:9E:6E:3C:0E:B9:B1:1E:8B:99:99:8C:29:46:BD:D5
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer:       /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial:       0197499ED4921E42CD2B5E3FE0F4BF1CD94E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number:          1580
Signing time:             Sat 07 Jun 2025 09:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:35 +0000
Files and hashes:         1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: ehcEPit18Fo0YeaSWwNHjR8XDnfd2AZeShws7E2lfbY=)
                          2: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (hash: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=)
                          3: hfYnlizg3MwR5qQug8OaGFYUftA.roa (hash: DTFlk5aAr3e9+sYI7V08QHNOE3ZymaaIt731TRyJnHQ=)
                          4: tBNDimUXEukADWJF9dJCQTAu8Xs.roa (hash: xy9pbAco54L3WlU6x7baSUsepcCgwp7AyR8Cg3prULc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:d4:92:1e:42:cd:2b:5e:3f:e0:f4:bf:1c:d9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
        Validity
            Not Before: Jun  7 09:00:35 2025 GMT
            Not After : Jun  8 09:00:35 2025 GMT
        Subject: CN=c6ef3b4e7f9e6e3c0eb9b11e8b99998c2946bdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:7b:e9:8b:cb:1b:6f:a7:65:73:a9:d7:94:
                    8f:05:86:cf:4f:9f:62:08:8f:c8:e5:16:cb:81:ae:
                    2a:a8:94:07:3f:03:77:61:73:68:5d:49:6f:aa:d1:
                    20:29:59:6b:ff:2b:6e:a9:a1:ef:6c:d6:3b:8a:1e:
                    c6:fb:dc:04:e1:14:79:0c:1a:07:0e:74:08:f2:18:
                    37:c6:b3:c2:df:e5:9c:00:79:49:f1:df:f0:94:1a:
                    01:ff:55:ae:af:cc:dc:a4:c1:68:5c:38:27:7c:f0:
                    29:f1:2d:10:fc:b0:86:4a:95:84:5c:69:7e:95:79:
                    78:fd:c1:a4:68:3a:9a:57:4f:41:d4:e9:45:2f:e3:
                    9d:eb:0a:bc:f7:71:d1:4b:dd:ef:c4:05:0e:55:e0:
                    c6:de:a8:a0:68:00:82:1a:b8:8e:29:73:cc:6c:b6:
                    6c:3d:f7:23:d9:f0:0e:d7:fc:49:55:97:ef:b5:41:
                    9f:b3:6a:f3:98:af:83:5f:e7:45:87:e2:65:f4:e4:
                    30:df:2a:19:29:06:e6:9c:fd:5f:d5:5b:94:7a:34:
                    9f:b0:b4:37:8a:88:be:38:44:a6:9c:de:f6:2e:a4:
                    25:73:1f:6a:e7:18:d1:f2:6c:28:73:66:04:df:04:
                    cb:ef:77:ee:94:54:e3:f0:99:33:59:c7:1c:90:11:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EF:3B:4E:7F:9E:6E:3C:0E:B9:B1:1E:8B:99:99:8C:29:46:BD:D5
            X509v3 Authority Key Identifier:
                keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:3d:55:ab:04:01:9f:58:57:03:53:f5:63:2e:96:f9:f7:
         6b:44:63:a9:af:0f:aa:43:3d:9e:a9:77:bc:d7:fa:24:a0:84:
         92:1d:08:7b:6a:7f:b5:d4:98:33:d8:e6:50:aa:ad:f1:c0:a7:
         96:ec:34:8b:ab:a5:b8:a1:d0:7d:5e:c5:fc:58:b7:2e:bb:12:
         6c:cd:89:87:f2:88:32:a1:4b:b9:9a:e3:ad:27:8b:80:2b:b9:
         f5:38:7d:ed:5c:01:20:86:95:89:3a:56:63:a4:06:ff:55:7a:
         e8:22:89:65:dc:cc:d6:4c:24:89:ea:95:8d:24:fd:d7:a9:2f:
         57:49:ee:60:1a:78:b6:14:2d:69:a5:f7:d0:f4:fa:a8:ff:d5:
         a3:3e:f4:39:60:d7:a0:3e:08:db:c9:64:d3:24:bd:c3:d5:5f:
         15:b4:88:66:35:50:c7:1b:12:08:08:f9:70:10:9a:71:e4:53:
         0a:ec:9e:e7:bd:ea:e7:e9:c2:09:2d:b9:bc:35:76:09:76:36:
         bd:a2:46:05:ae:8a:3c:67:c9:56:18:96:7b:bd:eb:e6:4f:b9:
         0f:0e:8c:d5:71:ad:14:3a:22:f9:ae:87:df:f1:98:27:bd:08:
         5c:7c:f1:a1:ad:53:15:e9:0f:0e:92:f7:3a:24:64:a0:c3:d4:
         f7:b7:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:04 2025 by rpki-client