Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          jWFLisnWvXjuDS2ofVqvNYfiI35E742VNYzJGzPG9Ic=
Subject key identifier:   FF:07:42:B1:B9:84:A1:A3:FA:50:4F:56:0A:EC:B1:2C:FD:EB:1B:25
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       01976F630AC4D846CBC38BB22ED682297172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 17:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:51 +0000
Files and hashes:         1: RkLlZjAasSrGiOmklIx_O-q25zk.roa (hash: Gwgv1/PPnszGyK+vUndl8BVc2mtdNprpDuh7CKowocQ=)
                          2: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: WgcbE0gSk74Z+Y0JHFZzS/juJMsF6pZ9RZGSHWfllN0=)
                          3: iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa (hash: KCNb4IsFzC9RfJdx7AFbupcSXkYx7SjrNORvTA5EESA=)
                          4: jyBvJ0cOfKi9WwiQt60pyraI-oY.roa (hash: y3Y58DOqvcc4jvZsYybVxfvwXagMIIOulZAsS9iNgBc=)
                          5: s9L9BNwHKJhVemHf55wRw3Mdhbk.roa (hash: beDBJWuacokDomSZPce/uodduuYfGqhfMVgZDVtONCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:63:0a:c4:d8:46:cb:c3:8b:b2:2e:d6:82:29:71:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Jun 14 17:00:51 2025 GMT
            Not After : Jun 15 17:00:51 2025 GMT
        Subject: CN=ff0742b1b984a1a3fa504f560aecb12cfdeb1b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:86:20:8f:fc:3d:59:94:65:7f:16:dc:22:
                    f7:71:ea:74:dd:d3:d8:15:69:a4:2d:7b:a1:c6:77:
                    1d:bd:7f:e5:8d:cd:e4:33:d3:29:36:99:3e:16:0f:
                    07:bc:e1:db:ba:ff:4a:31:92:95:67:48:42:88:e8:
                    66:cf:e4:70:60:77:06:f6:3d:d0:3f:f4:41:0c:81:
                    c9:46:e9:dc:b3:7d:42:fb:e5:d1:03:9a:13:ec:6d:
                    4a:86:3e:db:f6:16:19:a0:01:ec:7e:d8:1c:df:9a:
                    04:b7:ed:64:3a:af:6f:94:92:58:64:62:4c:9d:06:
                    c9:30:50:3a:a8:a7:f3:ed:b5:71:74:d6:10:b3:1f:
                    10:f8:83:41:c4:f7:62:2e:3d:d4:51:81:92:33:32:
                    06:bf:b3:74:16:4f:94:e8:a0:b6:1a:11:13:49:a4:
                    c7:65:8d:71:83:2b:80:6f:47:fd:08:9e:f4:b4:3a:
                    75:65:76:e3:99:31:47:89:67:98:7b:b5:46:e9:d0:
                    93:06:ce:d2:0d:d7:b7:1e:18:92:c3:05:47:0e:07:
                    93:4c:21:1d:02:78:9f:a4:5d:94:c9:39:ee:1d:40:
                    9b:d1:ac:2a:a8:3c:01:0b:ad:1f:be:ad:f4:12:ac:
                    4b:e7:40:71:46:10:1a:ae:ba:4e:4d:b3:18:7a:3c:
                    40:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:07:42:B1:B9:84:A1:A3:FA:50:4F:56:0A:EC:B1:2C:FD:EB:1B:25
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:32:78:7e:da:8f:32:fa:f2:ff:16:e8:86:58:25:93:a9:3a:
         e4:c6:27:a7:73:79:79:a2:75:3d:47:30:2d:6c:1f:b4:5f:fd:
         a3:b2:20:61:0f:be:14:e5:ea:96:78:91:5e:a5:6c:b6:42:ca:
         c6:0b:d7:5b:6b:5b:be:87:82:fd:ef:d6:a6:43:b4:76:fb:ad:
         6e:ee:97:58:bf:20:cd:ac:a4:3d:b9:9c:77:be:68:69:7f:64:
         ef:34:df:39:7d:b9:68:13:36:ec:16:df:b1:b1:70:e2:f0:6c:
         18:85:a4:0c:97:31:5c:51:3d:4f:3e:05:97:02:58:a1:bc:a7:
         a8:28:75:d3:01:40:13:25:d7:61:77:72:cb:0d:7d:f9:c2:6c:
         be:a0:5d:6a:7f:ad:81:62:34:2d:57:56:b8:6a:ee:43:b8:b4:
         61:68:5e:a3:2d:bc:a9:5d:c8:04:e3:3e:af:57:2d:aa:b0:93:
         4a:6d:aa:a8:03:6b:f6:6e:54:85:b4:63:ba:92:4f:88:5b:e7:
         9e:76:19:75:60:a8:81:71:75:2f:7e:ae:03:9b:1b:ee:29:24:
         51:62:4c:94:e9:b8:a5:b4:9b:4b:51:31:2b:8e:3d:7d:29:13:
         2f:94:f0:16:8a:b5:c7:e8:b1:06:0a:e8:f1:be:1b:e5:ba:70:
         49:77:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:18 2025 by rpki-client