Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          RfMVRQUYD3bLj1UreUkpyP4pXanwrdcJWuYDz4tVMUU=
Subject key identifier:   E1:FE:DB:1D:32:20:4B:40:A8:01:91:43:8B:10:12:4F:67:6F:E0:05
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       0197813274CD67414FA0F9D04F01F54CEC2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          15B7
Signing time:             Wed 18 Jun 2025 04:00:56 +0000
Manifest this update:     Wed 18 Jun 2025 04:00:56 +0000
Manifest next update:     Thu 19 Jun 2025 04:00:56 +0000
Files and hashes:         1: 3UEtPfriipiMbZa6fhwdY3QYuQU.roa (hash: zafMtM+qwE9a62Lg/QOalLMv3c0V/Ie0I/pDVfmKXPw=)
                          2: AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa (hash: vOpHeopsXYOn149WlJN/AUCpTvQWlIuD3VGR6QfDGQc=)
                          3: acwxUWbdpUsqhVn5F3e7J-KWE_s.roa (hash: k6IT6xJnQ84kL4p0G7+fu3bTiBrlku3nIpx+yEYBw0M=)
                          4: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: XW9LnLNcL+MqqXoeRx+1I+46XQzawlDh9lleVzgifi4=)
                          5: gz-qnMUscMazyhnaaxMqBrKn5m4.roa (hash: fpQhmRYSa6NMfhZ0IQvQ/7dM75+CyzF1R1dwJsHdzfM=)
                          6: iu7nkMMloLMO4qPNzRbpLkYcyro.roa (hash: 4ANkfNKLh7Z2wCwDamCSoeryHoHgG5FlZVn0i1JfMb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:81:32:74:cd:67:41:4f:a0:f9:d0:4f:01:f5:4c:ec:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Jun 18 04:00:56 2025 GMT
            Not After : Jun 19 04:00:56 2025 GMT
        Subject: CN=e1fedb1d32204b40a80191438b10124f676fe005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:28:56:f4:fe:ce:de:d3:3b:36:9b:fa:4d:8d:
                    a6:5e:bb:4f:67:75:02:18:68:8c:f2:f5:e1:95:26:
                    14:e0:de:60:9d:3d:b5:a3:8f:c1:f8:6a:0c:ab:77:
                    09:44:44:f5:95:d3:d2:ec:7b:e9:4a:96:9f:32:11:
                    cf:76:0c:91:45:f3:e8:7e:0f:81:2c:84:22:4d:a6:
                    a8:58:86:fe:66:4c:62:9d:9c:14:f4:71:d7:f1:65:
                    01:76:52:47:21:f1:ea:8a:be:27:68:1a:8a:bc:92:
                    e4:5b:b0:c9:58:ce:3a:13:13:dd:b2:8e:92:94:13:
                    ba:d0:0d:b9:55:b1:a7:f3:bf:30:6b:c9:23:ca:cb:
                    06:44:e0:46:97:32:b8:b3:e6:aa:41:74:1c:03:b7:
                    b8:ac:57:a3:7f:08:e9:d1:27:80:7c:b5:30:1d:b3:
                    fa:68:4d:bc:31:f3:48:e7:49:8c:52:d6:62:7c:fa:
                    1c:92:2a:4d:5a:40:58:65:5b:0d:54:51:a9:ee:fc:
                    d7:83:1b:dc:19:58:27:3c:05:10:34:9a:a7:20:c8:
                    8b:5e:61:87:72:16:b0:0e:36:72:f7:63:a7:f1:ba:
                    a0:03:ee:a2:04:21:39:55:5b:6b:87:62:3a:35:0b:
                    9a:81:e8:f2:cb:74:46:3f:8e:d2:4c:c6:c9:aa:37:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FE:DB:1D:32:20:4B:40:A8:01:91:43:8B:10:12:4F:67:6F:E0:05
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d9:af:4f:1d:ad:dc:bc:20:df:df:80:78:8a:7b:bf:7b:70:
         12:7f:55:28:0c:72:ce:09:28:06:3b:94:fc:a0:ff:63:9d:9c:
         0b:d9:dc:7c:23:ff:2c:a0:05:4a:73:93:18:5c:cd:fb:a1:63:
         d3:61:ac:e0:09:ce:0a:27:dc:b9:58:e5:a8:7b:ce:8e:cc:f3:
         65:21:ef:8f:7d:f0:1d:99:01:26:b9:9b:e9:e0:a2:07:19:43:
         6c:4a:1f:39:78:f9:59:60:1e:09:49:31:6a:0d:99:15:ab:05:
         70:e5:5d:d4:46:4d:c0:01:cb:7d:b0:a4:fa:d6:6c:98:3c:d5:
         a0:d8:1e:25:75:76:16:70:f4:e3:63:0a:e0:f6:be:c8:3d:27:
         28:34:e0:02:ab:a1:8c:76:2a:4e:a1:77:41:49:f7:43:87:e1:
         57:39:c9:cc:5e:9e:3b:03:50:34:34:10:21:3b:4a:fa:91:dd:
         e5:7e:05:5d:b6:7b:d0:b7:66:0e:51:5c:f8:12:0b:78:8e:b2:
         c6:5a:ff:b6:0f:ae:75:36:8a:2e:6f:ac:40:0c:3c:76:20:f3:
         c8:6a:41:fa:11:b4:d8:3c:36:96:22:93:1b:b4:7f:8f:a8:29:
         83:34:33:af:19:74:23:76:25:18:86:c6:48:7d:5c:14:ff:7c:
         de:03:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:44:34 2025 by rpki-client