Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File:                     1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier:          TGCIsv4WAbRTbHD6SMcYdy7wk4OM8om4jjFKgK2jGLs=
Subject key identifier:   27:43:4F:60:F9:32:34:D2:F8:E1:89:81:17:F3:6F:32:AC:7F:E0:C4
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer:       /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial:       01976F9A47220B98E8F813B27AB99536081D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 18:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:11 +0000
Files and hashes:         1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: cEj5DOlpCF/BfaEOwiZFBFn/DdOZRrxSSgrkvRg3K18=)
                          2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:47:22:0b:98:e8:f8:13:b2:7a:b9:95:36:08:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
        Validity
            Not Before: Jun 14 18:01:11 2025 GMT
            Not After : Jun 15 18:01:11 2025 GMT
        Subject: CN=27434f60f93234d2f8e1898117f36f32ac7fe0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:f5:74:18:94:aa:27:71:8e:61:86:ec:37:
                    f4:39:e6:22:c4:05:bd:84:f9:56:8f:64:4e:9a:75:
                    01:96:80:a7:87:f6:84:dd:a5:2c:06:e5:52:48:95:
                    13:02:f0:ae:fa:2d:6d:ea:4e:5d:ea:e8:b6:7e:a9:
                    ea:da:d4:c7:31:85:9d:31:9e:16:2f:3c:bc:83:e6:
                    ef:84:f7:a3:e2:f4:3a:2c:b5:d4:6d:8b:38:d6:43:
                    35:52:5d:94:85:d5:f9:63:b9:90:83:fd:55:2c:76:
                    30:df:db:08:24:75:8b:73:80:8f:0b:52:d4:8b:bf:
                    5c:67:5e:f2:e1:e2:f1:fb:28:36:ab:78:c7:81:24:
                    5b:0c:01:dc:f3:b7:de:e5:f4:b6:5d:41:49:71:e9:
                    19:cd:b2:aa:2c:f8:96:35:46:a4:50:aa:6f:ce:03:
                    2a:40:7f:1a:e9:c4:02:4a:7d:d2:2c:43:ae:20:ee:
                    ab:73:66:51:4c:74:a3:2e:ac:03:db:bb:e1:de:e8:
                    eb:ef:3b:56:f2:3a:17:74:4c:9a:9c:e5:3e:2e:e2:
                    46:06:3d:5a:85:dc:1c:36:83:98:3a:20:e2:a5:78:
                    4f:05:84:bd:56:37:13:ed:91:4a:ae:e5:df:e5:eb:
                    09:63:ff:64:99:8c:e5:06:3f:59:62:38:98:9d:9f:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:43:4F:60:F9:32:34:D2:F8:E1:89:81:17:F3:6F:32:AC:7F:E0:C4
            X509v3 Authority Key Identifier:
                keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:db:d0:9f:91:88:1d:ef:e4:e4:4e:b8:aa:91:a3:16:88:7c:
         ba:0e:08:67:64:7d:04:e8:42:c5:57:91:bd:0c:af:4c:cd:f6:
         b1:da:81:1f:96:37:a5:03:7a:f0:28:72:67:41:74:02:19:6a:
         ff:67:11:d2:26:a1:a7:ee:56:e9:ff:fd:a2:b9:d5:d6:0f:d8:
         e4:26:25:97:b3:ef:ab:69:0f:e9:f6:29:5a:32:17:55:2d:ca:
         21:7a:31:70:16:43:2a:7f:40:4c:3e:43:e0:65:7e:a0:32:a6:
         e6:c6:1e:07:a5:f3:64:54:66:f9:d4:00:69:5a:90:c5:f9:b6:
         f6:bb:ad:82:20:97:78:ed:63:1f:24:e9:60:ff:70:5c:7a:15:
         98:b7:b7:46:2e:b2:2a:a0:a5:38:32:18:6c:66:55:b6:a8:c3:
         5c:b9:e4:3e:d3:9a:2b:88:a0:9d:18:27:59:a0:b5:0e:72:dc:
         b1:dd:43:a1:21:7c:10:f8:05:cc:40:73:06:ca:c3:6a:62:74:
         79:f1:46:53:6f:a7:cd:da:73:7c:a5:88:16:59:0f:52:8d:dd:
         16:28:e0:fb:a9:0d:b2:dc:2e:64:ea:b6:ed:00:89:0f:2e:e3:
         0b:19:f5:2b:b1:ea:2c:1a:1c:b4:fa:9d:30:8c:a9:a0:c2:26:
         e8:50:f2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:11:16 2025 by rpki-client