Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
File:                     cGt_6orTURHKaHqc0ApJ-aTwRZs.mft (raw, json)
Hash identifier:          dntP2gx7NREF+fQyuOGN9qnh2WjTpGoUS6/VE6Jka7I=
Subject key identifier:   7E:CD:4A:2B:85:AE:80:12:AE:68:DF:37:5E:54:D5:08:65:EA:24:CB
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Certificate issuer:       /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial:       01976C61C1F8E98792F647F06CEFE7C95777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
Manifest number:          1587
Signing time:             Sat 14 Jun 2025 03:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:35 +0000
Files and hashes:         1: 1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa (hash: 6WebZuQEVFb53qv4JdObZh7gRJmnrMnS1KiKHpMOHA8=)
                          2: F98rZRsLL_WSYn3n29uuLg-FPR0.roa (hash: 73uq7x903k93laF4iGlteDX6rFg0Y3etQUcDdi1l7lg=)
                          3: R66tp2YspSa0WKGVVBRpgjOOMSc.roa (hash: vAJd7pQTatYNcNboScZHezKRexmDJyWedTR7sHg29G0=)
                          4: VPHhytFNuubbFjm4tYvAl8Nd2ZE.roa (hash: 6/FzWhj3KyFvDY5lx/pXSGk3g0b0b2s63jOD/2yTOio=)
                          5: cGt_6orTURHKaHqc0ApJ-aTwRZs.crl (hash: QFr8kkQM8jQDoQkqtiG5d23TMakkoSIYcxzIbB/FJX0=)
                          6: zMZkIjmJ2QpgvnpDUAinKvhQb1o.roa (hash: Y7E9I/njb2IhcUidLKH3fAcdQ31FJYDtFn4eagm4C1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:c1:f8:e9:87:92:f6:47:f0:6c:ef:e7:c9:57:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
        Validity
            Not Before: Jun 14 03:00:35 2025 GMT
            Not After : Jun 15 03:00:35 2025 GMT
        Subject: CN=7ecd4a2b85ae8012ae68df375e54d50865ea24cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:51:c9:b7:7d:b0:4b:ca:c7:48:d5:f0:c2:
                    9c:66:92:0e:91:81:b8:21:b5:66:9e:86:24:61:43:
                    ef:4c:a7:f9:8b:92:be:46:2d:d1:b6:75:19:ab:2c:
                    99:b6:e1:94:33:24:e4:2d:9c:38:4b:2f:25:4c:1b:
                    2a:8a:f0:95:13:7a:d5:02:95:7c:ad:49:72:76:42:
                    ae:c5:26:28:90:62:4c:3d:5b:0f:c3:dd:5b:63:d0:
                    3e:8c:d2:a3:e2:4c:d4:be:d0:5a:33:0b:46:a6:e1:
                    02:56:84:be:7e:46:4e:a6:60:c2:06:7d:7c:86:88:
                    d5:c1:d3:67:42:a6:46:0b:9a:65:64:92:1e:7a:ed:
                    63:b7:dc:5c:0f:6a:e2:5c:b6:7d:1b:1c:ae:d6:34:
                    34:1a:d5:de:70:ee:6e:1c:f8:f0:ca:2d:4c:eb:5e:
                    bf:d9:69:11:07:d9:58:47:c9:da:9c:12:52:76:89:
                    08:36:c5:69:b2:6d:6c:81:9d:59:9f:8f:23:fc:7f:
                    61:93:3a:e0:ce:10:a9:0e:df:f2:ab:76:d2:b9:5a:
                    c0:b3:fa:f5:be:8f:77:af:87:05:23:1e:60:30:64:
                    5c:b2:ca:76:ae:67:a3:71:d9:61:ec:13:86:4b:b9:
                    7f:e4:4c:32:1f:be:aa:09:0e:2d:67:8f:28:d0:74:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CD:4A:2B:85:AE:80:12:AE:68:DF:37:5E:54:D5:08:65:EA:24:CB
            X509v3 Authority Key Identifier:
                keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:73:8b:7e:c9:32:a7:02:0a:b2:a8:33:b5:13:f5:fd:0b:91:
         d0:3f:b8:db:be:64:42:16:7d:9d:48:14:49:c0:a5:08:71:98:
         ab:a9:d1:d6:4d:f9:ce:49:36:4d:67:36:60:d5:84:20:c2:3e:
         e4:ed:e0:0d:1f:95:e7:2f:a7:97:74:49:29:6d:0a:64:4b:e5:
         c1:68:63:41:dd:31:dc:66:9f:f6:e8:91:35:96:24:01:90:5d:
         c8:88:57:8a:4e:39:64:cc:39:6f:b8:1c:df:21:26:a1:fe:d6:
         8a:31:91:4a:12:77:a4:c9:39:3e:cf:4e:c5:9e:6b:6a:fb:48:
         df:63:bb:18:59:b6:52:51:d5:00:6b:95:79:95:d3:94:45:3f:
         ef:b2:32:e8:0a:00:09:45:8a:fe:7b:2b:0c:bd:82:28:82:a0:
         af:b1:bc:85:96:2f:e7:96:8e:f2:4d:e9:45:96:e7:91:9e:15:
         c9:1e:ed:e8:0a:91:62:65:31:ee:89:df:b6:da:84:ae:1b:7c:
         cb:14:5e:e7:4b:21:b8:31:5e:a1:45:ed:ea:c3:b2:2e:09:1a:
         b1:bf:2d:04:0f:8d:7b:2f:48:50:49:14:7a:88:04:2c:0f:90:
         24:35:e2:fb:e3:e6:38:86:d7:58:ba:fd:64:47:60:63:3a:a2:
         3a:d4:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:49 2025 by rpki-client