Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
File:                     1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json)
Hash identifier:          x72i5AQJ1fgtyTUyfuLtgcbhPeSsBQlGeqesqyzUfBo=
Subject key identifier:   9D:9D:57:31:0A:5D:75:11:71:41:FB:CF:0C:D2:DC:B1:98:B4:82:69
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Certificate issuer:       /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial:       019685ED634256F1082124ACABCC9F389ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
Manifest number:          017A
Signing time:             Wed 30 Apr 2025 09:00:49 +0000
Manifest this update:     Wed 30 Apr 2025 09:00:49 +0000
Manifest next update:     Thu 01 May 2025 09:00:49 +0000
Files and hashes:         1: 1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa (hash: i5ay2vgUuK/RxNcOzQcdamhI5FZ4CZrQepcSEalRxfU=)
                          2: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: ZXBe5aDhKjOufKe0UZmtAAr81TH0kAVckl62jIYIcI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:ed:63:42:56:f1:08:21:24:ac:ab:cc:9f:38:9a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
        Validity
            Not Before: Apr 30 09:00:49 2025 GMT
            Not After : May  1 09:00:49 2025 GMT
        Subject: CN=9d9d57310a5d75117141fbcf0cd2dcb198b48269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:55:8a:bd:37:14:e4:5b:c3:15:b0:53:a9:
                    68:4b:b7:03:0e:d9:e4:10:fd:71:1f:aa:0e:39:a0:
                    0e:1d:c3:85:b4:1b:0f:d2:72:b4:9b:77:cd:7b:50:
                    6b:31:c2:4b:4d:b4:08:bb:6d:99:ab:43:d9:56:31:
                    6d:a9:7f:d6:57:79:77:57:ef:0c:f4:4f:c8:c2:83:
                    32:06:d7:4c:a0:75:35:8c:c4:76:81:db:65:e2:97:
                    f3:94:da:ee:2d:00:16:fd:f8:5b:3c:46:14:32:c3:
                    35:71:59:ce:8c:fa:ce:51:5c:ae:d9:52:c9:57:54:
                    a2:54:a5:54:b0:46:8b:5a:b2:6e:ba:51:1d:bf:e4:
                    a1:2c:05:c8:89:3e:d7:a7:e1:5b:1c:a0:a2:ce:e2:
                    2c:ae:18:f9:45:e7:a6:3d:72:8e:60:84:9c:93:d3:
                    f8:cb:95:9c:98:94:13:f3:9d:b3:0e:37:85:c5:bb:
                    11:a0:21:d6:d4:28:a4:85:22:23:b0:51:c3:44:0c:
                    72:32:a7:72:e9:dc:e0:be:9e:14:7a:8d:90:34:54:
                    7b:9b:d4:67:9f:f0:ed:71:33:ca:1c:ea:e4:4b:b2:
                    39:53:e1:c4:a9:95:29:35:93:4c:21:d6:7c:66:87:
                    13:09:d8:67:09:ae:29:9f:e1:bd:8d:a5:9a:8c:8a:
                    67:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9D:57:31:0A:5D:75:11:71:41:FB:CF:0C:D2:DC:B1:98:B4:82:69
            X509v3 Authority Key Identifier:
                keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:a5:4d:28:2b:4c:da:c0:c7:d8:78:4f:b1:f0:62:74:b4:
         ce:7d:ae:54:fd:e8:04:4b:5c:68:b5:a8:5a:03:86:ce:8b:d1:
         48:af:0f:10:73:64:2a:4c:9a:8e:37:73:f0:94:2b:25:10:fc:
         81:0e:60:8c:74:d3:dc:da:86:a3:d0:ba:96:51:41:8a:02:b5:
         1e:19:e2:77:d4:24:78:46:93:49:ed:a5:bb:c8:28:82:0c:75:
         27:73:ba:e3:43:32:f9:16:21:99:e7:1e:4f:ed:d7:54:14:02:
         0c:c3:67:9d:90:0d:67:aa:0e:22:db:23:f4:2b:e8:aa:e8:be:
         32:b5:81:9f:f1:1f:98:44:9f:54:66:8b:ea:79:9c:c0:5e:4d:
         54:cc:a8:c1:7d:3f:24:a4:a3:63:07:4a:cc:5d:bb:1e:90:5b:
         6f:c1:5f:20:a6:af:5a:bb:76:78:1c:32:36:1a:71:53:6e:06:
         76:2d:8a:cd:1b:1a:69:0c:de:fc:57:cf:29:60:f6:06:7d:b8:
         60:2b:4f:7b:6e:e1:09:53:2b:c6:a2:d9:d9:1b:32:65:7d:0a:
         61:02:98:cc:cd:c6:01:b5:98:4e:21:44:00:99:ed:96:2c:71:
         6b:d1:a9:74:7a:2c:ec:10:30:43:c0:79:99:1e:6b:9b:ae:a0:
         e4:bb:df:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:00 2025 by rpki-client