Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          todxoM46LL+f92procL+T3vAJuyO4a9W+OLMuK2Ejz4=
Subject key identifier:   C3:B5:0C:0F:E3:F8:48:A8:7F:22:83:80:69:22:7B:0C:81:2E:58:8F
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       01977BD53AD9945C0BFA238B5E2C166A1808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          1595
Signing time:             Tue 17 Jun 2025 03:01:01 +0000
Manifest this update:     Tue 17 Jun 2025 03:01:01 +0000
Manifest next update:     Wed 18 Jun 2025 03:01:01 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: WUhiF50+bRpMz+5SC8MEb3jmUKquOb+CJv2cXZXFy3U=)
                          2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:d5:3a:d9:94:5c:0b:fa:23:8b:5e:2c:16:6a:18:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: Jun 17 03:01:01 2025 GMT
            Not After : Jun 18 03:01:01 2025 GMT
        Subject: CN=c3b50c0fe3f848a87f22838069227b0c812e588f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:b6:c9:e1:f7:fe:ce:62:4b:6e:43:01:e1:
                    fc:cf:a1:91:56:be:65:c0:72:6e:56:1c:9a:be:fe:
                    3e:27:cd:1a:1b:c4:82:04:52:84:80:34:1f:d9:95:
                    e3:2f:aa:e4:21:46:57:c8:83:f3:f9:74:40:2e:d4:
                    e5:f9:11:72:b8:2d:62:68:40:97:ff:52:fd:ae:8f:
                    ad:cb:64:80:45:f6:26:96:6e:ea:fd:97:7b:86:18:
                    10:80:83:a4:d9:02:22:26:50:13:f2:cc:e1:6f:4e:
                    3b:7d:db:23:6b:af:dc:d4:a9:b9:44:dc:ef:05:cd:
                    56:f2:ee:1f:25:4c:40:bd:da:f6:f1:ac:65:89:ba:
                    99:86:d2:73:74:1f:6e:5e:e5:e6:01:f8:6c:b0:46:
                    5e:dc:09:07:bf:51:c5:b3:1a:3e:bf:f7:02:5a:28:
                    ac:ce:42:e2:41:a6:52:1c:be:84:fb:31:b9:c3:d6:
                    7d:c2:8b:5e:19:39:d0:e4:5b:3f:67:f2:37:34:fe:
                    06:1a:8f:a9:c9:71:e1:f8:44:9e:13:51:c8:c1:48:
                    56:41:92:28:2f:72:9c:cb:2e:b9:fd:3a:6b:43:24:
                    24:25:98:9d:d3:84:da:f3:05:e0:3b:42:10:54:83:
                    5a:54:20:0e:66:66:54:7d:8e:d8:09:57:79:c2:7d:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B5:0C:0F:E3:F8:48:A8:7F:22:83:80:69:22:7B:0C:81:2E:58:8F
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:90:c4:0e:9f:7f:48:15:71:6f:a1:1d:72:45:6e:5f:3a:9d:
         46:6e:ae:df:e1:d3:63:fd:22:23:a3:3e:16:2d:06:5a:24:a9:
         6e:ba:d1:7b:82:8c:c0:62:8f:e8:ea:ab:ee:0f:c8:06:56:1a:
         29:48:b6:f6:25:f6:66:f4:03:1d:78:81:0b:7f:ed:7a:82:6b:
         66:9b:35:e8:25:20:a0:ef:de:b6:69:20:1c:1a:fd:15:bb:41:
         c6:39:63:f0:35:91:7f:ea:ab:f4:b7:b0:9a:ce:e3:9a:3c:3c:
         b5:38:6a:f4:83:2d:28:c7:87:38:01:bf:6b:6f:b6:0c:50:5f:
         6b:23:71:b4:c2:43:2f:6a:f0:be:63:bf:53:07:c2:92:33:db:
         6d:93:6d:5d:31:b3:15:ce:f8:37:a3:58:63:30:67:80:8f:24:
         c4:da:66:5f:fa:3f:9c:a5:d2:58:d9:81:04:4c:4e:44:7f:24:
         39:ad:28:5f:03:ca:af:98:68:c9:07:e6:d9:50:a7:5c:f2:f7:
         9e:8d:83:3b:d3:f3:c9:8c:74:9a:3f:2e:0f:e1:ab:c4:5b:13:
         9a:ff:b7:72:87:c0:da:dc:95:56:fe:75:bc:fe:c6:a3:dc:57:
         fe:ea:5a:ca:87:34:c5:c2:39:d4:43:47:ee:db:05:3f:09:dc:
         d1:ca:16:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:57:39 2025 by rpki-client