Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File:                     _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier:          NULG8disnxKx7dQtR/EAEsMDcftXO7gdbyJavG/I1sw=
Subject key identifier:   BD:77:66:74:19:C5:5B:86:FF:5E:BB:B8:DC:11:57:62:58:FB:3C:A5
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer:       /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial:       01976BF459406846F944E7215DB5B345B05D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number:          1589
Signing time:             Sat 14 Jun 2025 01:01:04 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:04 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:04 +0000
Files and hashes:         1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: wfNvGhVxoLnZzMhgnFpBGMAok003WOZZT1SnpJa5Opo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:59:40:68:46:f9:44:e7:21:5d:b5:b3:45:b0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
        Validity
            Not Before: Jun 14 01:01:04 2025 GMT
            Not After : Jun 15 01:01:04 2025 GMT
        Subject: CN=bd77667419c55b86ff5ebbb8dc11576258fb3ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:6e:d0:dd:2e:cd:5e:3d:38:0c:1b:04:19:
                    4e:3f:b5:42:33:b6:d9:68:82:26:12:86:4c:6a:4f:
                    ff:12:9c:b2:91:0f:08:ed:7d:c7:3a:7c:9d:73:e4:
                    d0:cd:09:71:80:51:41:ea:c7:6d:5e:05:ff:67:90:
                    5f:be:d5:e2:ce:a0:a2:3e:ff:69:43:37:9d:93:60:
                    7a:a7:8c:0a:5e:9b:aa:9e:d4:c3:9d:28:db:72:44:
                    1b:db:d4:3c:cd:77:bb:fa:0d:58:5d:6d:40:d1:d4:
                    1d:55:c7:39:d7:6c:f6:98:ad:2f:9c:55:57:40:0d:
                    74:06:84:29:07:a3:43:7b:89:12:bb:34:15:77:30:
                    6f:ef:d7:23:dd:9b:20:9e:5f:00:2c:9f:67:d6:b3:
                    b0:dd:52:e6:f5:cb:2b:ef:7b:2d:3e:ca:f1:8e:6c:
                    8c:01:4f:43:6a:3d:04:bd:ff:df:b9:f2:f8:fc:6a:
                    99:4f:95:29:b1:f2:b1:e2:8e:cc:bb:ec:d8:e3:d0:
                    44:c4:f2:0d:4e:30:be:d0:41:6d:f0:eb:49:55:91:
                    9d:8b:d5:15:ed:af:30:cd:d0:38:cd:01:da:5e:76:
                    f8:40:78:1e:16:53:b2:21:5e:53:37:aa:f4:43:fc:
                    06:f5:c5:6f:f7:dc:15:0f:05:c2:e8:f3:a3:c5:48:
                    fa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:77:66:74:19:C5:5B:86:FF:5E:BB:B8:DC:11:57:62:58:FB:3C:A5
            X509v3 Authority Key Identifier:
                keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:40:4d:d7:51:19:7a:2e:63:84:ec:d0:81:13:83:25:df:b1:
         4d:a1:1e:db:3e:14:dc:ee:be:0b:d2:2d:f7:d9:6b:c6:c0:65:
         d0:8d:4d:ed:cc:75:4f:43:db:75:23:f3:6e:04:36:67:e2:76:
         a0:f0:fa:e0:f3:0a:b1:d9:b9:36:84:ed:8b:1e:9d:e3:22:af:
         33:4e:e8:59:c7:8d:18:a1:25:7f:67:1a:0e:7c:b0:b5:f8:b2:
         50:bc:3b:51:8b:e7:2e:c7:da:5d:26:d2:f2:8c:65:8e:fc:20:
         d4:d6:56:f8:ed:ee:37:e8:c3:05:f4:31:38:c0:04:47:5c:bc:
         36:c9:56:67:51:2e:e5:12:4a:e8:1a:d4:87:87:61:af:3a:e3:
         b7:7c:a1:28:d1:a2:73:69:0d:df:b7:b0:04:ac:f4:1a:08:02:
         b6:6e:46:be:b4:4b:e8:59:ef:a5:8f:dd:9d:47:c3:24:3d:fb:
         cd:3b:05:54:a1:f2:13:c4:ca:c1:44:b8:05:73:43:b6:2b:87:
         04:f6:e3:04:4a:b4:b1:a6:2d:15:52:e2:7d:93:54:97:14:f0:
         3f:90:d1:95:f6:b6:ca:9f:14:ff:16:63:55:21:50:66:57:68:
         64:2d:fd:86:3a:b0:68:10:f6:cd:bc:ae:13:97:29:78:52:9f:
         fc:43:fd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:10 2025 by rpki-client