Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          lBHrn3Z/Siy20AIc3LnZU/PIxYzAFXQJyvVS1FoPjKg=
Subject key identifier:   C5:E0:AC:76:EA:32:57:B0:6F:B3:5B:9F:F8:5E:31:3D:AF:3F:EB:E5
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       01976C2AF3E06825C37833343857099F080E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          1596
Signing time:             Sat 14 Jun 2025 02:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:43 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: WT5QW8Rc/ahfFeEWp++MioxnCmrgG0RvGuRa2glOD7k=)
                          2: HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa (hash: lvbBBqCHLb7K+iy+sLWnMQKI6pl/6vd+wtc46LAcd44=)
                          3: Vxlq2Z39A9F-eaPA57TXXEurwJs.roa (hash: 4xN4zUrQu99FYL0d5xYUEvVHQtyeUZcoIRVpmdGGWqo=)
                          4: wBLhap3qy1Bc5_-udfUtTUhswUE.roa (hash: yKTNsxF+At82L6AqbVZLyPnofD0bf/S3KDHdg52k6Ec=)
                          5: wytxdRZXxEWi72ICxppv0nWaK_g.roa (hash: HLAxZnhzpvrbRLPZ50VaAEF9FMDzhmk4qqTXoJRwuoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:f3:e0:68:25:c3:78:33:34:38:57:09:9f:08:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Jun 14 02:00:43 2025 GMT
            Not After : Jun 15 02:00:43 2025 GMT
        Subject: CN=c5e0ac76ea3257b06fb35b9ff85e313daf3febe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4b:c2:d5:1f:e2:a5:6a:a4:8c:0d:9b:d4:23:
                    9a:5c:0a:19:8c:05:77:b0:1e:67:87:bc:37:7b:7d:
                    59:43:80:fc:9b:da:29:b9:a9:77:5e:6f:ef:b6:0a:
                    87:82:65:c9:10:41:41:2a:f9:9c:aa:cb:36:e8:41:
                    b0:a5:7a:5a:f0:92:e3:3b:19:c7:2c:26:74:a0:4e:
                    f3:3b:8a:05:50:d6:89:cd:94:64:2f:fb:63:c2:03:
                    96:30:bb:37:e7:da:67:e0:3d:1d:09:ce:21:1e:4b:
                    9d:49:3b:bb:ce:ea:9a:9f:05:e3:98:c2:7b:bd:02:
                    1d:a0:97:98:ed:53:46:6f:1f:2c:54:c3:61:56:90:
                    81:e1:05:cf:66:a6:1a:a7:58:d7:26:9d:e3:b3:fa:
                    95:6d:98:05:5d:db:60:b1:e2:da:9d:d6:35:41:73:
                    b9:5d:76:50:88:35:9f:94:3a:6e:05:e2:67:48:8f:
                    d9:ca:af:76:05:79:d9:27:64:d7:81:f2:cf:ac:9a:
                    a5:6e:1d:73:d7:1d:18:46:ea:e8:28:11:4a:03:b2:
                    03:97:f2:01:f5:86:15:5d:a2:2a:61:2a:8b:0a:a8:
                    21:23:61:3e:32:ad:f1:e4:c6:9c:72:c6:38:69:86:
                    c5:bc:cc:13:05:8b:25:9f:6e:8e:cb:64:63:76:46:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E0:AC:76:EA:32:57:B0:6F:B3:5B:9F:F8:5E:31:3D:AF:3F:EB:E5
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:5b:85:07:2f:c2:06:00:b3:9c:a7:87:c2:d9:50:25:af:
         2c:19:55:c9:39:b7:5c:af:02:d0:80:b7:9a:f3:19:33:22:48:
         5c:65:c5:c3:ea:1f:0f:e6:21:c1:0d:a3:66:14:a7:ce:f8:81:
         8a:63:54:1a:7a:c4:28:be:cb:ca:ac:b3:f1:e0:aa:87:07:d2:
         99:be:45:65:1e:3b:57:ad:1a:60:86:94:d7:1e:7f:c4:21:a6:
         4c:dd:90:66:2e:06:bb:ee:00:37:02:3d:9d:b9:c7:0f:53:e9:
         62:ae:ae:be:ae:ef:04:84:47:c7:c8:ee:3e:0f:b3:f1:9a:4a:
         84:14:c3:48:50:c2:da:d3:d1:d1:3e:c7:3e:8c:40:24:2c:f3:
         e5:3f:a6:e0:c0:57:53:05:ab:83:05:27:b6:0f:8d:f2:1d:e3:
         d2:d7:12:29:ca:e2:ae:37:32:e0:b6:af:fb:6e:12:22:de:c7:
         16:70:83:eb:77:58:75:4a:f7:d6:fb:f2:9a:58:9a:38:38:12:
         bf:67:96:4d:ed:4d:a0:fc:ef:b7:ea:e9:e3:35:21:99:db:58:
         b9:72:49:2e:68:5e:13:c6:3e:29:d8:28:72:a6:a4:5c:04:00:
         96:c3:37:5c:cb:27:bc:7b:5c:5a:6c:ae:b3:76:bf:76:64:89:
         2d:f7:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:18:59 2025 by rpki-client