Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File:                     10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier:          Tuhs/VjzVbcIuont/M3XmgdeaLICVAgKvmLsNYMGxKU=
Subject key identifier:   41:1F:A2:C6:54:22:90:45:A9:9A:0C:7D:F7:EE:D0:F3:87:6B:75:86
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer:       /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial:       01977941C8CE30A59A0E7D67876DB623C3EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number:          1596
Signing time:             Mon 16 Jun 2025 15:00:43 +0000
Manifest this update:     Mon 16 Jun 2025 15:00:43 +0000
Manifest next update:     Tue 17 Jun 2025 15:00:43 +0000
Files and hashes:         1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: 0GLZkhQwC6XWBnzclyL6u7Tm+haR41Zn1I1Jg+Vi/Xo=)
                          2: sndMGN9hrwytu8M86g8e17_E-wk.roa (hash: 5lmWBoAQNAypsv2KN0NMYJT+hXVE7BGT1N8Z8n2QPIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:41:c8:ce:30:a5:9a:0e:7d:67:87:6d:b6:23:c3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
        Validity
            Not Before: Jun 16 15:00:43 2025 GMT
            Not After : Jun 17 15:00:43 2025 GMT
        Subject: CN=411fa2c654229045a99a0c7df7eed0f3876b7586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:16:94:62:c8:1e:0a:01:c2:7b:0d:db:2c:
                    27:47:e7:18:33:08:fa:a4:39:c6:88:a7:73:c1:5e:
                    e5:e1:b0:4f:03:6b:04:e2:7b:7e:43:77:18:3b:19:
                    55:a7:43:c9:1f:ca:20:e6:31:76:4a:66:84:3c:4b:
                    24:cd:8a:a7:5f:8e:b5:96:27:06:d0:8c:4b:27:02:
                    62:1a:de:d7:b2:ec:7b:d1:c4:0f:46:28:bf:f4:f2:
                    42:34:b2:27:c7:46:34:6c:d1:ec:98:43:71:c2:b3:
                    f2:8b:b5:33:4b:4c:f4:40:5f:d1:95:2f:33:96:c5:
                    b4:d0:30:38:78:1e:5a:2c:72:a9:5a:e1:4e:f9:ba:
                    2a:3c:4c:2b:2f:ef:ff:c0:b9:85:e1:ca:78:a8:98:
                    0f:a3:63:2f:e1:18:b7:05:e7:70:7f:49:ca:36:b1:
                    33:f9:67:24:9c:2c:10:a6:05:2f:dc:b9:ef:fb:cd:
                    f7:36:99:41:ae:86:b6:d1:0d:4e:ed:fe:a7:e9:19:
                    4b:79:54:64:ac:15:28:49:da:13:98:e3:ff:f2:1f:
                    68:21:10:f5:71:72:00:65:29:5a:2b:00:2b:5c:35:
                    e0:40:ca:9f:d8:44:ce:8c:ab:89:5b:71:c7:df:72:
                    9d:f4:f0:19:e4:0c:70:98:38:03:1b:3a:4f:e2:ac:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1F:A2:C6:54:22:90:45:A9:9A:0C:7D:F7:EE:D0:F3:87:6B:75:86
            X509v3 Authority Key Identifier:
                keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:5e:55:9d:92:12:94:d6:74:4b:c8:8b:1b:a8:9d:cc:33:
         56:1a:09:3a:73:dd:36:ca:04:e5:80:0c:c4:0d:aa:76:62:42:
         ab:a5:e9:18:b2:a2:03:4f:e6:82:c6:6c:ae:9e:39:5e:7a:95:
         42:e0:04:2e:82:0a:20:04:95:c9:ff:39:a8:11:55:0f:bd:f8:
         05:79:86:87:56:12:a0:3e:db:56:8a:4b:c3:29:aa:af:96:ca:
         16:ea:70:04:be:13:6f:e2:fa:d1:36:d6:12:c4:ed:fb:01:75:
         97:35:b7:0f:39:34:7b:0d:cf:8f:11:44:46:db:32:a5:c2:97:
         6e:a3:13:ab:56:58:34:98:5f:c6:19:2d:24:7c:7f:63:d6:d2:
         f2:96:61:71:93:cf:46:10:e5:1d:70:1d:0f:b8:19:30:13:28:
         2c:9a:5b:4c:6f:8d:31:45:88:2e:12:bc:27:4d:5c:85:dd:8f:
         13:7d:e8:42:63:42:33:4e:0c:4e:cd:75:a6:43:35:16:9e:50:
         35:c4:88:f2:f0:d6:7b:7e:d2:d1:63:a1:af:9e:72:f5:1e:22:
         ca:4a:0d:b5:ca:a2:57:bd:52:13:a1:7c:82:7d:e1:48:cb:75:
         fe:09:4b:88:9b:ec:23:f1:a3:92:ce:cc:c2:c9:f3:47:87:b7:
         0a:8c:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:03:49 2025 by rpki-client