Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File:                     S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier:          5wzFfi4Fm2MbItpVFrrXjS9zwSNhZnzvhg3s4Ze9d1Y=
Subject key identifier:   51:C4:9A:84:0C:CB:BD:59:09:87:7C:66:49:D8:BD:80:55:B9:0A:2B
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer:       /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial:       019771513B102BFC409711DB80525E7CFA2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number:          1593
Signing time:             Sun 15 Jun 2025 02:00:38 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:38 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:38 +0000
Files and hashes:         1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: CfDaQVA6BUFsS69uZMaLLTLPN8SFRFwI9OwsszkAV7U=)
                          2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:3b:10:2b:fc:40:97:11:db:80:52:5e:7c:fa:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
        Validity
            Not Before: Jun 15 02:00:38 2025 GMT
            Not After : Jun 16 02:00:38 2025 GMT
        Subject: CN=51c49a840ccbbd5909877c6649d8bd8055b90a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:41:a0:38:9a:98:2e:1f:15:72:b6:6f:e7:e5:
                    33:a9:cc:d0:26:17:75:d0:45:e3:17:10:d9:b6:3f:
                    94:8c:30:ec:ec:04:d3:d5:6e:ab:8b:11:1a:8c:f8:
                    4e:65:aa:5e:ff:52:55:60:85:39:66:40:78:2f:bc:
                    0c:00:67:3d:ea:66:8a:77:70:c6:cd:57:24:b7:79:
                    52:2c:bb:4f:13:4a:ff:19:d8:1c:24:db:f1:aa:5f:
                    55:d0:de:e7:fe:50:3c:05:e8:37:e2:3a:00:45:aa:
                    6a:ea:ef:45:7c:b5:ad:4d:2b:3c:94:b3:c2:96:ad:
                    ad:20:33:e1:f6:14:e1:ad:33:fa:7a:42:a2:e3:67:
                    43:5e:ec:7f:57:14:41:85:36:a4:84:44:bc:e2:ee:
                    52:01:57:50:7f:03:5b:a0:ca:80:33:9a:a1:f0:8a:
                    ce:af:3b:46:23:55:cc:6f:e2:f7:10:ae:ec:35:3e:
                    75:1c:f0:49:65:76:02:fc:7a:ff:a3:33:40:75:1b:
                    15:c2:97:bf:3e:46:30:61:52:b0:12:ec:34:2c:dd:
                    36:85:93:a6:32:f7:65:6e:b5:4f:48:9f:ea:35:8c:
                    ba:3c:73:b9:dc:5e:6e:f8:45:31:01:8a:cd:b6:c9:
                    44:84:47:cf:6c:8f:70:b3:5a:2e:9c:60:0d:2d:a3:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C4:9A:84:0C:CB:BD:59:09:87:7C:66:49:D8:BD:80:55:B9:0A:2B
            X509v3 Authority Key Identifier:
                keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:5c:a9:21:cc:07:7c:e9:ab:da:c6:94:d4:df:99:8c:98:
         4c:98:4a:29:49:f0:1d:70:64:9c:30:5b:21:07:09:8f:81:10:
         36:f5:f5:6a:12:be:86:7f:35:05:71:0d:51:0c:e4:e5:2f:d6:
         cd:9b:27:96:b2:71:0b:d9:51:e6:0a:39:03:f1:82:d5:d7:96:
         21:ef:09:88:68:e6:94:fc:30:14:ac:6f:75:78:5b:49:ee:a6:
         f7:ae:a8:82:f1:7e:6a:15:b1:93:88:63:8e:53:a7:a7:cc:53:
         65:c9:9a:e0:c2:e6:5d:1d:67:c2:ac:bc:bc:41:f3:e3:08:11:
         d8:cb:f9:9c:f4:14:20:9a:cb:78:ad:2a:3c:c6:b3:90:ee:0c:
         fa:84:b2:86:aa:fd:42:c3:70:31:9f:1c:d4:88:e6:7b:9f:2c:
         b0:7f:55:a0:17:b0:7a:14:03:b3:cc:8d:b3:a1:6b:cc:6f:ab:
         63:89:e9:43:46:f4:cc:2a:14:81:26:8b:2e:8a:d2:8f:4d:b9:
         23:92:ac:1f:48:8e:84:40:f2:24:8d:93:84:5a:ec:0a:24:79:
         28:4b:c7:3d:05:43:81:07:0a:df:4e:f7:e7:b3:e2:d4:31:b0:
         89:9a:6c:f7:4e:3e:64:c2:6b:b8:4e:e3:26:33:a2:9f:24:8d:
         08:78:e3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:22 2025 by rpki-client