Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
File:                     V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json)
Hash identifier:          YYkw73B2E8nMB4CfkISGHnmvsYJfStoW+v9aU9XwuYo=
Subject key identifier:   DE:B1:91:AA:C9:8E:87:C1:AB:A5:FC:49:72:74:36:4A:BB:49:3F:8F
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Certificate issuer:       /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial:       01974AB173F70EA7A5AD6CA35AAFC8BC7F10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
Manifest number:          116E
Signing time:             Sat 07 Jun 2025 14:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:32 +0000
Files and hashes:         1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=)
                          2: 2Kp_9YpfYIQIxyL5CznhHnkIxfU.roa (hash: LYK8gdoVuDcWT2M8puwmkXBr6TS/IOAg3OaPmCBsVwI=)
                          3: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=)
                          4: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=)
                          5: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=)
                          6: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=)
                          7: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=)
                          8: JHZeQoZfAbaLUlrZmCxtZ1ApkWo.roa (hash: +VPqWsWngmfKHIzBC3GFe6m9tn9RXpVp3jH9A+hxoC0=)
                          9: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=)
                          10: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=)
                          11: SpYcE3S7smMV4xZjzIbw_3YgWQ8.roa (hash: r3TEKYZlZtxmxAKHk3aPSvesmIPuqj82Nxme4CHttjE=)
                          12: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: a390gRM+OO0xIX3JlA/n8ls3MD/XnOfX/oHJFvfYxuM=)
                          13: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=)
                          14: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=)
                          15: ftQ60SsjWVubYA-VxNEHamWbBek.roa (hash: jmvMdMMJCzUDXr3r5E5qmHQUJ9DFMdQTkl3lYF+bB84=)
                          16: mgE4NAvl5a_fjijODt9d3QXoFWo.roa (hash: U49USPjZ5W98U1upDeeRKhUCJZwO5RTn5SJ+Rro+7ys=)
                          17: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:73:f7:0e:a7:a5:ad:6c:a3:5a:af:c8:bc:7f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
        Validity
            Not Before: Jun  7 14:00:32 2025 GMT
            Not After : Jun  8 14:00:32 2025 GMT
        Subject: CN=deb191aac98e87c1aba5fc497274364abb493f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:9f:99:bf:11:aa:1a:4e:9c:a0:c5:ef:c4:
                    6b:c8:2f:01:8a:22:04:b4:6c:a9:db:73:de:11:7d:
                    f4:c5:51:52:91:2b:45:af:54:2b:ff:5c:0a:a5:88:
                    8d:0a:52:58:8d:84:e0:d2:30:98:d4:e1:71:b5:dc:
                    e1:60:99:a6:b1:76:a2:8e:cd:0e:24:ed:90:04:c5:
                    78:94:20:07:b3:6f:50:97:cc:75:54:1c:80:0b:9b:
                    a1:46:ee:53:93:24:ad:c3:df:9c:55:52:0e:a7:14:
                    a2:25:e3:c8:55:e2:84:55:83:4a:26:e0:eb:7b:74:
                    e5:b6:9f:0a:4c:73:60:5a:e5:92:70:74:13:ed:d6:
                    03:cb:46:e0:a1:ad:d2:1b:32:ec:46:b5:9a:89:9c:
                    b1:ef:19:bd:74:47:3f:c4:52:e9:ab:ca:e0:3d:f1:
                    bd:51:0b:9a:f4:81:2e:14:5e:0f:dd:e2:e5:04:ad:
                    c9:7f:39:68:1a:33:ff:72:f3:7a:c2:d8:95:0e:51:
                    8f:fe:7e:bc:7b:9e:99:82:ac:cf:bf:42:a2:56:72:
                    25:3a:94:09:b2:92:da:78:19:6d:7c:58:2c:7c:a9:
                    80:e1:a0:a6:43:83:fa:cc:59:ad:82:ba:d8:1e:59:
                    9a:7d:c2:4f:cc:e7:5c:c3:75:18:64:ba:0c:1d:20:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B1:91:AA:C9:8E:87:C1:AB:A5:FC:49:72:74:36:4A:BB:49:3F:8F
            X509v3 Authority Key Identifier:
                keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b3:50:20:14:3c:cc:cb:76:96:9f:c5:6c:ef:98:0b:e4:d1:
         09:8a:29:7c:73:93:0e:8a:85:62:34:7d:48:5d:e8:0e:13:1d:
         66:aa:1f:0f:2b:74:a7:89:f2:b8:e9:af:e4:6a:f5:53:74:4d:
         96:5e:93:fc:d3:c5:90:9b:b7:0f:8c:5c:a5:82:00:13:a6:f4:
         50:ee:be:1e:46:36:25:5a:2f:95:ac:e9:eb:38:23:d3:1d:71:
         76:27:fc:23:e7:0d:82:08:f4:48:8f:ae:83:a5:af:43:4f:44:
         8b:54:3f:d3:2a:f2:62:ee:b4:26:ae:33:f0:04:6f:29:c1:ef:
         5b:4e:01:a7:be:5f:ad:16:26:46:60:47:81:8e:f1:20:6d:41:
         92:53:68:83:98:27:ac:56:f4:0b:2b:87:28:cc:10:e7:ce:a9:
         50:2f:2e:a8:7d:49:31:7d:d1:01:17:cc:70:e8:60:02:d6:15:
         60:63:72:ed:07:41:18:6a:41:92:e5:9d:8a:38:b9:eb:d2:33:
         61:52:32:22:a1:72:71:91:a5:fb:5f:ab:56:45:fa:0f:1f:fd:
         c6:db:84:31:2e:cf:6d:80:aa:54:1f:87:22:6d:77:75:99:15:
         06:f3:ba:81:6c:05:65:fc:f1:f5:9a:36:09:51:45:1b:db:5c:
         9b:a8:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:01 2025 by rpki-client