Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File:                     SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier:          TsTVW9Xhzh6D5OTm1ZDgLIWjqWOXHTUi3RpPaXCifkA=
Subject key identifier:   30:4F:59:30:14:CC:D7:C0:15:96:DF:6A:64:15:DB:6E:7E:F4:F9:57
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer:       /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial:       01977C0BE3C1C1C8F8A5DDCCA433427DFCE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number:          1546
Signing time:             Tue 17 Jun 2025 04:00:43 +0000
Manifest this update:     Tue 17 Jun 2025 04:00:43 +0000
Manifest next update:     Wed 18 Jun 2025 04:00:43 +0000
Files and hashes:         1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=)
                          2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: ByErJuNIdf1e3V0U2YwjUuQG3uTY1fPvd0l2oLf4tx8=)
                          3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:0b:e3:c1:c1:c8:f8:a5:dd:cc:a4:33:42:7d:fc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
        Validity
            Not Before: Jun 17 04:00:43 2025 GMT
            Not After : Jun 18 04:00:43 2025 GMT
        Subject: CN=304f593014ccd7c01596df6a6415db6e7ef4f957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:c4:29:12:77:a3:c3:70:f5:85:fa:49:1d:
                    e3:92:75:c4:a2:f6:17:b5:7e:ac:73:3c:a7:2f:2a:
                    39:43:6d:b4:55:fb:1b:84:13:ab:ac:a3:bc:da:e0:
                    65:b4:57:d1:60:a1:42:40:65:de:e6:16:41:57:fb:
                    fc:7a:f7:ce:21:05:6e:ed:f4:78:1b:28:2d:6d:eb:
                    41:86:23:a1:f8:2d:ce:ba:7b:a7:13:df:89:24:9f:
                    be:49:dc:d6:b1:0a:14:8e:b8:79:53:53:26:db:96:
                    d1:68:85:2a:86:ef:26:3a:a0:ad:b7:f7:29:52:3d:
                    d0:8f:70:7b:95:cf:fa:31:01:eb:c3:88:dd:7c:ac:
                    b5:95:42:7b:b2:75:53:ad:0a:4a:3f:30:9c:07:44:
                    a4:30:d6:9f:64:55:56:ea:b3:4b:b9:78:37:f5:ed:
                    f9:c7:0f:60:b2:14:23:2d:c9:db:eb:a4:25:7c:b0:
                    fb:38:f7:a7:a0:5a:38:ea:6a:6e:40:5c:cd:8b:11:
                    8a:39:be:df:a9:ae:d4:35:a9:fe:23:26:03:80:d4:
                    28:c4:1a:2b:8a:77:0e:e5:5f:fc:8b:ea:ba:0f:a5:
                    5e:ce:82:40:63:21:61:64:b7:6d:37:e3:80:bf:da:
                    f2:15:de:ba:86:56:ff:ad:d2:0d:f6:55:e8:32:ee:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4F:59:30:14:CC:D7:C0:15:96:DF:6A:64:15:DB:6E:7E:F4:F9:57
            X509v3 Authority Key Identifier:
                keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:96:e7:10:62:df:4b:8d:b8:2a:cd:13:09:c8:06:9d:03:7b:
         e7:f3:0a:1b:83:b8:8a:91:34:ba:1a:e4:5a:39:66:ef:5c:66:
         b0:87:9b:97:66:dc:ad:5b:2e:43:c2:c1:ab:38:f2:be:33:9b:
         91:89:96:81:a6:cd:b0:3b:86:42:bb:fd:bd:81:f1:06:9a:66:
         21:fc:95:05:70:ed:ad:df:60:88:e0:de:fe:d2:4a:0e:04:83:
         b8:25:e3:2b:53:04:15:40:be:2b:db:22:80:a4:1e:21:d5:45:
         f4:60:06:6a:28:bb:3c:52:e4:ed:e3:cf:27:46:46:0d:ea:f0:
         7a:20:15:cd:99:4e:20:76:78:2c:7f:10:50:c6:f8:70:01:34:
         7b:7d:ba:7b:78:99:5b:25:a8:21:cc:1d:31:f0:68:6d:a4:36:
         3f:a4:50:c9:04:ba:23:a6:6f:5f:8b:1c:1a:67:21:45:43:b2:
         01:8a:0e:af:ed:19:2b:e8:ec:9e:de:53:d4:70:f3:a6:f8:8c:
         6f:65:39:83:2b:2a:a9:0a:28:15:91:6c:ae:d7:c3:aa:88:56:
         c9:18:a8:c5:78:1e:b1:08:91:df:3e:3c:29:39:19:5a:9c:0f:
         ee:80:19:f9:b7:63:d0:d1:64:76:11:d7:79:07:bd:2b:33:40:
         75:b8:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:02:03 2025 by rpki-client