Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
File:                     1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json)
Hash identifier:          ubqv5v1AtDMlVgBcA7bHeLySz7Vl9FL0UWGNFr+xacI=
Subject key identifier:   EE:10:29:06:61:AE:1D:E1:4A:67:2F:FB:CA:0A:61:2A:79:11:48:04
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Certificate issuer:       /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial:       0197752DF8E6D473E73E390269DF66040240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
Manifest number:          1599
Signing time:             Sun 15 Jun 2025 20:00:36 +0000
Manifest this update:     Sun 15 Jun 2025 20:00:36 +0000
Manifest next update:     Mon 16 Jun 2025 20:00:36 +0000
Files and hashes:         1: 049Ezw3bbxyAcFdFjmuYEFwXBsU.roa (hash: WEmFcKUdgxX3uJIjqIrmLcxjRyqE9nhGbay/JhL8Msw=)
                          2: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: Wfw4lNMuH1X+ijyRmYsQB2FQ1PtUhV4tXUTLmOJanEQ=)
                          3: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=)
                          4: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=)
                          5: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=)
                          6: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=)
                          7: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=)
                          8: WlImTkdj0wNEcwflMaO4AnVa210.roa (hash: zWCGguUKICYgSUBCeaz32D1L+DC9qzh5JbbptYsTHXU=)
                          9: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=)
                          10: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:2d:f8:e6:d4:73:e7:3e:39:02:69:df:66:04:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
        Validity
            Not Before: Jun 15 20:00:36 2025 GMT
            Not After : Jun 16 20:00:36 2025 GMT
        Subject: CN=ee10290661ae1de14a672ffbca0a612a79114804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:7f:99:98:09:17:a0:b4:ac:4f:e5:6a:36:
                    31:b2:22:ce:a5:f6:d3:4c:ce:ee:15:96:46:d0:b5:
                    b4:a3:72:d0:9f:9d:cb:f3:85:75:9d:7b:72:25:f7:
                    32:24:dd:f3:2a:cb:77:56:c3:6a:14:39:03:dc:29:
                    3a:8b:5c:28:a8:50:81:f3:f4:54:45:54:e3:46:22:
                    8d:e6:06:f2:3c:68:82:90:c9:c1:83:d1:2a:cf:28:
                    c2:95:8e:7d:40:5f:96:4d:dd:bd:ab:80:97:ac:4d:
                    c4:99:d0:ca:bd:08:1a:a2:8f:63:a0:9f:7d:14:90:
                    03:db:fa:f7:13:96:93:12:cd:b4:3c:50:24:02:13:
                    81:1e:67:5f:6c:42:32:da:c4:f6:39:57:39:04:45:
                    e8:a6:45:d0:7a:f8:60:60:8a:27:a9:40:fe:ce:a5:
                    bf:6d:fb:3e:21:cc:8b:12:6f:b5:85:34:4e:8b:ee:
                    3c:a5:67:dd:cf:f9:02:20:06:e3:c5:de:a0:59:5b:
                    5c:24:dc:13:0f:23:82:da:80:ce:2d:bb:9c:ce:dd:
                    56:bd:e6:8e:85:2f:1b:7e:ed:c5:50:7e:b9:39:70:
                    ae:eb:35:8b:08:16:db:65:67:87:2f:c8:ce:ad:e1:
                    62:70:a0:2a:09:24:42:72:dd:c8:19:8c:aa:bd:5d:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:29:06:61:AE:1D:E1:4A:67:2F:FB:CA:0A:61:2A:79:11:48:04
            X509v3 Authority Key Identifier:
                keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3c:2b:41:e1:7f:1f:8e:c6:bf:bf:a3:cd:7b:f1:c9:16:42:
         a2:37:64:0f:eb:88:ad:2a:b6:52:71:f5:67:47:b7:54:00:d1:
         87:99:1e:e6:83:ad:8f:15:d7:7b:cf:33:21:5a:d4:58:3c:c9:
         6a:c1:9c:c3:5e:93:85:c7:aa:b1:18:67:39:82:62:4e:87:41:
         fb:cc:3d:19:77:45:86:2f:bb:1f:e1:ed:2c:27:32:49:36:dd:
         81:b0:82:f7:7a:dd:ae:46:c3:74:2f:98:65:df:48:f3:dd:07:
         7e:9f:4a:17:12:1a:85:47:b1:5a:cd:df:0e:ea:92:62:54:3f:
         62:cd:79:ab:94:19:d5:02:50:41:63:ae:90:07:fc:c2:66:5d:
         ed:83:7a:ac:89:0c:88:c3:5b:d8:82:2c:d9:0c:da:6e:f1:2f:
         32:be:0b:a3:0a:20:e7:4c:6c:b1:29:3a:79:08:55:43:aa:cc:
         c9:35:ed:77:5e:99:e2:51:18:27:57:5c:15:f8:b9:dd:ef:a5:
         0a:be:42:27:a0:8a:29:04:41:19:88:e7:7a:ed:a8:f0:57:9c:
         68:ff:9c:18:1f:51:22:64:22:b5:79:06:bc:f9:f4:88:98:9e:
         cf:83:9a:a9:27:03:1b:19:aa:77:7b:74:4d:c0:29:29:71:9f:
         4d:35:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:28:50 2025 by rpki-client