Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          zuOMGCmFdz3dB5Y8sMYvGTwF/afj8YA/Rctial/lfnk=
Subject key identifier:   F0:B4:3A:13:E7:25:67:F8:2B:FC:89:5D:14:2E:ED:E0:A9:91:CC:8E
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       01976C2B697241F7754208D098541BAA0825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 02:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:13 +0000
Files and hashes:         1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=)
                          2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=)
                          3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: bXriQvofKDNt7WNZGFoRYCWpDseNHk7nhcIijDlRyGI=)
                          4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:69:72:41:f7:75:42:08:d0:98:54:1b:aa:08:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Jun 14 02:01:13 2025 GMT
            Not After : Jun 15 02:01:13 2025 GMT
        Subject: CN=f0b43a13e72567f82bfc895d142eede0a991cc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:7c:6e:30:79:25:b5:6c:e4:e2:91:13:09:
                    ba:c9:ef:5f:33:89:a7:9a:30:e8:1c:e2:31:dd:8e:
                    22:88:e9:aa:b7:8d:cd:d1:65:a3:94:ec:f1:7c:7f:
                    21:14:54:47:6c:7e:4b:5d:79:73:4e:0c:da:37:a6:
                    d3:53:9c:66:f4:d6:70:91:91:50:25:81:39:d3:17:
                    05:0d:44:14:79:f0:36:1b:71:8d:72:53:75:e0:08:
                    52:05:b5:a4:d9:3c:ac:ed:07:4e:53:06:cc:53:9e:
                    f1:a0:e0:9f:f9:84:49:82:7e:84:56:f5:43:65:91:
                    3d:b7:85:5f:95:26:c4:df:5f:3d:f9:82:0a:07:90:
                    13:65:43:92:15:91:98:57:a5:61:4f:75:fb:f4:fc:
                    78:dc:9c:bd:9c:92:3b:6a:d1:46:11:87:9c:c4:c3:
                    23:5c:31:43:e4:7f:21:cb:a8:6f:4e:01:c0:4e:46:
                    b3:39:00:ff:37:a0:38:c8:93:43:ab:d3:ab:38:34:
                    61:92:6b:7e:a3:64:7c:4a:88:6e:cc:d9:77:bc:e8:
                    1c:72:45:f5:ce:23:19:01:a1:f0:67:44:06:38:60:
                    46:08:0e:be:3c:2d:06:57:d9:08:5d:3f:a4:01:66:
                    23:fc:f8:db:3d:2b:fe:22:1c:57:7b:ab:c4:ad:0e:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B4:3A:13:E7:25:67:F8:2B:FC:89:5D:14:2E:ED:E0:A9:91:CC:8E
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:15:a1:c4:12:44:42:ab:51:a7:e7:4e:25:1a:0a:4d:60:68:
         8c:d0:23:fd:a6:f7:42:86:18:cd:04:ad:cb:59:48:53:ad:71:
         5e:1d:b7:ea:7f:1f:10:42:d1:22:ea:88:a1:ea:71:2f:76:30:
         03:dc:07:d2:5f:87:8c:38:82:41:bc:b2:cf:0e:72:81:cb:51:
         25:3d:7e:de:fa:c8:45:77:e1:37:22:02:68:39:50:0d:cc:95:
         16:f2:42:67:88:73:51:cf:1e:ae:e0:d9:e6:9c:9b:d7:60:6c:
         d3:f7:4b:ac:85:01:ae:93:4f:2f:0b:77:da:f8:73:ab:d7:1f:
         52:79:ad:d6:88:fb:61:3f:b6:a3:e6:4d:0c:88:1b:f7:a2:ed:
         dc:7f:e0:a5:11:3c:9c:91:47:5e:c4:69:3f:01:77:29:13:27:
         fb:87:aa:2d:a4:54:d6:69:ea:c3:28:9b:6b:00:95:34:6f:03:
         4a:65:7a:7d:96:2c:f8:a7:b3:9c:15:94:a5:b2:e9:55:8f:e1:
         aa:24:53:47:81:f6:11:c3:12:8f:92:0c:0d:b7:36:af:ba:c7:
         77:9c:5b:19:83:5c:e4:54:44:ce:c2:7b:42:80:36:e9:a0:02:
         38:7f:51:27:c5:ab:91:d8:2c:84:48:f3:d7:4d:e0:05:16:1b:
         7c:88:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:21:17 2025 by rpki-client