Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File:                     33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier:          oxZ4Dcm6825ZjPK/mjptL7YX8oZ/b84aFplyDkGTA90=
Subject key identifier:   E8:F5:FE:E7:DF:8A:C6:51:10:C6:65:64:B8:4C:41:7F:14:9D:06:99
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer:       /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial:       01976F2C62B2ECE09877D78ADFB42D7E9D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 16:01:09 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:09 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:09 +0000
Files and hashes:         1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: 8oba4pRncvgwSt4ZG4zQ0xKtis8u8fyTV09yZalHrOg=)
                          2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
                          3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
                          4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:62:b2:ec:e0:98:77:d7:8a:df:b4:2d:7e:9d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
        Validity
            Not Before: Jun 14 16:01:09 2025 GMT
            Not After : Jun 15 16:01:09 2025 GMT
        Subject: CN=e8f5fee7df8ac65110c66564b84c417f149d0699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:d1:df:70:6b:e4:de:61:b5:bc:09:91:3f:
                    de:53:52:5f:7e:09:65:e6:5f:ea:0f:7d:13:44:96:
                    a9:fd:9f:0f:78:16:70:8e:48:50:fd:80:fc:a1:e5:
                    86:9b:60:3d:30:6c:2b:6d:fb:2b:0c:f7:e8:04:bb:
                    d8:04:6b:63:32:06:ae:9f:7b:69:a7:32:85:ab:54:
                    a6:03:f8:4e:48:ff:f1:dd:20:cb:9d:0d:1d:05:3c:
                    86:87:bd:5a:f9:71:06:d9:ed:d0:21:0b:a1:fd:e4:
                    49:ab:e1:dc:59:f0:fe:ca:04:97:f8:df:a7:fa:6a:
                    be:45:9e:1c:4b:fc:8a:a5:40:b7:32:d5:3b:b4:73:
                    6b:1f:cc:e5:28:ec:26:8c:25:5e:29:df:ec:fb:af:
                    cf:43:9f:cb:ec:15:e2:ad:50:92:08:7c:e3:c7:7f:
                    ee:48:63:91:3c:cb:a1:4b:c5:92:53:77:d1:f8:b2:
                    9f:42:90:7c:91:d3:16:66:72:83:02:82:fa:14:21:
                    3e:54:e3:19:f7:1b:3b:23:fe:e6:e8:91:fa:75:a0:
                    0a:fa:b8:86:b9:48:11:db:8b:6e:f0:af:5d:89:21:
                    02:cc:ee:6b:1b:7d:d7:59:7a:f6:60:3c:bf:70:70:
                    cf:31:36:19:66:79:5b:01:10:8f:32:3c:51:6d:11:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F5:FE:E7:DF:8A:C6:51:10:C6:65:64:B8:4C:41:7F:14:9D:06:99
            X509v3 Authority Key Identifier:
                keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c4:8e:e2:89:a1:92:8e:17:aa:e2:31:db:f6:3b:94:d7:19:
         3b:52:b6:a1:f1:5f:73:37:8d:73:d8:93:54:8c:5e:23:6d:47:
         50:35:18:e2:17:1c:08:0b:56:8b:c6:41:63:33:08:c5:af:57:
         50:4c:a9:b4:55:65:4a:f5:ee:1e:b2:19:c3:07:79:d5:c4:53:
         27:27:63:33:bd:53:94:2c:03:fc:8b:2e:a7:ec:ef:8d:fb:83:
         36:99:cb:8d:d0:03:d2:b5:fa:ec:2c:92:60:93:46:c4:09:7e:
         59:be:de:cc:fd:96:08:5a:8e:39:a9:12:05:ce:9d:5f:af:f3:
         98:d8:eb:35:2c:21:b2:94:65:70:1f:c9:10:37:f3:f4:e4:25:
         d8:48:ea:25:62:8e:48:99:13:99:7d:a7:ce:84:1b:b1:a5:96:
         6e:4c:83:f7:34:43:9a:c4:e5:e4:4e:2d:46:58:ad:7a:b2:fc:
         75:06:ec:2c:ee:d6:89:67:fb:b4:30:6d:39:67:25:ef:4d:4d:
         27:2e:19:cd:ab:76:6f:a8:11:5c:d0:4b:41:7b:0e:00:6d:99:
         e0:5e:ac:21:1c:68:b0:0d:a0:8f:91:29:bd:80:95:fd:ce:f5:
         d3:f3:7f:88:a2:39:c2:fa:a4:d6:b4:ee:5d:71:97:5e:9e:b0:
         bf:3b:17:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:22:18 2025 by rpki-client