Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File:                     1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier:          mOoIdPXiE+dyPNyyCg7AXPRQVEyur/SBcNZzvv/dTaY=
Subject key identifier:   F4:87:5B:2E:4C:D0:89:CF:97:8E:D0:CB:04:26:7B:38:A4:0B:0C:9A
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer:       /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial:       01976E87920BD911AB337843861B340C1DBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 13:01:07 +0000
Manifest this update:     Sat 14 Jun 2025 13:01:07 +0000
Manifest next update:     Sun 15 Jun 2025 13:01:07 +0000
Files and hashes:         1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: EiXJmAOM8eA7apzUODmJHI7bX3cPE/v/IL8/aEvoA04=)
                          2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=)
                          3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=)
                          4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:92:0b:d9:11:ab:33:78:43:86:1b:34:0c:1d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
        Validity
            Not Before: Jun 14 13:01:07 2025 GMT
            Not After : Jun 15 13:01:07 2025 GMT
        Subject: CN=f4875b2e4cd089cf978ed0cb04267b38a40b0c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:b2:93:24:b9:e3:27:93:10:fe:5d:21:b6:
                    e3:2d:46:ec:c8:15:d2:ef:98:91:0d:c8:1a:99:79:
                    50:29:c3:36:9c:c0:67:0f:7c:d8:1b:80:36:ad:bc:
                    3b:46:dd:b1:46:10:0e:df:3a:24:30:a6:6e:28:9f:
                    84:d1:4b:e2:ff:38:3e:0d:33:19:21:0b:46:f1:0c:
                    e8:a4:0e:7a:7d:3e:31:76:24:92:54:ab:83:50:ff:
                    4b:74:16:aa:a2:a9:37:cb:7f:eb:32:3a:1b:f7:a6:
                    2f:d6:7e:ac:6f:d5:b3:ed:51:d5:5b:f7:60:02:dc:
                    e1:28:60:6c:02:a5:54:5e:c0:ae:8d:e9:95:9c:89:
                    31:9a:f0:e0:a2:c2:d7:de:b4:81:c4:84:ac:e8:76:
                    83:60:ec:ad:0a:11:62:bf:66:d2:73:21:7d:18:ab:
                    69:a8:6f:b0:f4:36:01:b1:44:fd:66:4a:cf:53:5b:
                    59:95:fe:6f:7c:d7:23:89:3a:3c:11:16:b7:99:b9:
                    68:62:d2:55:00:55:d7:bd:8c:68:d7:43:b5:68:fb:
                    36:ad:cb:2d:73:b2:3b:40:2d:68:a0:f1:fa:d1:06:
                    1c:ff:cb:4c:a2:a9:60:ef:57:6d:24:c1:b6:23:99:
                    15:1f:e8:90:e1:87:d3:ad:17:1a:e2:5b:89:d3:70:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:87:5B:2E:4C:D0:89:CF:97:8E:D0:CB:04:26:7B:38:A4:0B:0C:9A
            X509v3 Authority Key Identifier:
                keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c1:d9:66:b3:d6:7d:2c:41:e8:ee:61:a7:7d:d4:c6:4a:d5:
         0f:30:0d:2c:c6:ba:36:a6:d3:cd:1b:5f:9c:71:22:0b:97:1d:
         10:38:9c:44:e6:0f:f3:87:93:e8:6c:de:d2:94:0a:96:79:6d:
         e1:3f:9d:56:13:14:8d:d7:c5:d5:81:de:ef:54:e1:39:9a:82:
         39:49:ae:9d:2d:3f:90:2a:c1:68:df:06:6c:f2:d1:e0:af:06:
         12:02:60:2e:cb:5c:3c:c5:8c:08:31:29:d8:79:b6:cc:7d:25:
         80:05:6f:64:a3:b0:54:c1:89:d1:a2:b7:b2:90:56:d5:fc:51:
         4f:fb:2a:58:fe:e5:09:c7:0b:c5:54:f3:2c:8f:ba:42:5a:f1:
         54:34:e0:0f:b9:28:33:87:b8:f7:52:97:03:31:f5:2f:81:f3:
         5a:18:eb:8f:45:7c:a6:bf:79:49:06:41:2c:57:0d:78:68:87:
         79:fa:23:2f:e7:e4:91:0a:39:27:a6:52:79:5d:78:1e:a9:cb:
         cd:33:57:8a:aa:69:b7:fc:14:00:18:75:eb:40:40:b7:c4:a9:
         a2:80:1c:b6:dc:9c:b8:cf:22:39:03:eb:bd:95:00:0a:97:18:
         d7:9e:55:c5:05:08:04:5e:04:69:e7:72:29:25:00:a2:80:15:
         ac:03:4c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:56 2025 by rpki-client