Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File:                     PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier:          mkZpalh1izVPcmFYZO7KmtoEpUwkM3dEUIOw2wSWPaU=
Subject key identifier:   39:D3:08:C8:C3:8E:B7:A8:F9:F7:19:32:3E:1E:2D:71:2C:68:9B:D4
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer:       /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial:       01976E878E8BF67FC40DB5934B89373097D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 13:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 13:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 13:01:06 +0000
Files and hashes:         1: 3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa (hash: bNvleSp/4QB52V4DZ5fxsf4u+utsXgrzdigeABa48Cw=)
                          2: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: bBworOw3cP3KwN4w9i3bjHJ5997c26nUJTLvpd1HNHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:8e:8b:f6:7f:c4:0d:b5:93:4b:89:37:30:97:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
        Validity
            Not Before: Jun 14 13:01:06 2025 GMT
            Not After : Jun 15 13:01:06 2025 GMT
        Subject: CN=39d308c8c38eb7a8f9f719323e1e2d712c689bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:75:bf:17:db:21:64:63:0c:12:17:ca:40:
                    5d:76:48:35:78:d8:67:b9:73:58:c6:67:95:d4:cc:
                    f9:a4:4c:cc:8e:00:d0:b7:ce:ee:a6:83:fa:71:19:
                    a3:8b:e9:2b:de:8f:4d:0c:be:21:11:5e:fb:03:f6:
                    48:fe:af:1c:80:cd:9a:c1:3e:3d:41:82:af:9a:f2:
                    d9:aa:85:e9:77:06:ed:c7:8d:c2:72:8b:41:10:0a:
                    13:07:a6:65:b1:da:85:b2:90:2b:13:98:af:11:ac:
                    ad:52:52:43:a7:a2:76:40:50:53:ff:a8:e4:c4:21:
                    1c:2f:17:db:60:eb:cb:c5:fb:62:1c:3d:cf:e9:81:
                    91:14:7a:ad:4c:e2:57:89:eb:39:71:a1:f6:14:4f:
                    b1:55:ac:5d:60:a2:c1:44:35:74:c8:15:62:cc:44:
                    8d:04:0b:dd:6d:c5:72:4c:28:1c:64:bd:28:a6:76:
                    a3:eb:ad:19:ed:9a:5f:73:5a:f4:22:cd:7e:f6:1b:
                    e5:f3:6d:6d:8c:f2:4e:23:0a:59:7d:37:3c:46:49:
                    bb:43:3d:7b:5d:ba:bd:45:28:e6:e0:01:b2:38:5a:
                    ae:cc:31:16:04:92:07:88:11:70:62:64:0e:87:c7:
                    f6:e7:f2:e4:ea:5f:d1:57:6c:f2:cd:8f:8e:c5:54:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D3:08:C8:C3:8E:B7:A8:F9:F7:19:32:3E:1E:2D:71:2C:68:9B:D4
            X509v3 Authority Key Identifier:
                keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d1:88:6d:36:0b:60:85:5c:d7:9e:46:c1:2c:6e:d6:4e:57:
         c0:3b:42:80:8c:4d:3a:08:94:10:ad:4c:b0:d9:84:cd:0c:46:
         e8:29:ba:af:f1:dc:22:f9:26:47:1f:10:54:d5:24:32:9b:5a:
         5e:cf:28:5d:2e:1f:d1:40:62:ef:3f:c0:d5:7a:4d:28:61:0a:
         27:d0:c7:16:de:92:ee:ca:76:bd:25:76:99:cb:79:1c:d1:16:
         e9:92:d3:02:0e:b1:39:e7:7a:6d:f5:3e:9a:67:12:2c:23:8a:
         8f:55:6c:6c:a9:0e:1a:bd:5a:74:b1:7f:81:67:84:19:ef:2c:
         a7:d5:ea:3e:09:fb:06:ef:f1:6d:28:e3:19:dc:3a:0d:50:07:
         db:6e:ee:0a:9d:4e:7b:09:cb:38:ca:d2:17:ec:aa:06:13:ed:
         1d:a7:d8:20:d7:69:00:cf:9e:04:86:c1:57:71:3d:7e:8c:b2:
         da:d7:30:ba:a2:c3:d4:82:b7:0a:e5:36:eb:ae:96:8c:a4:3d:
         0d:1c:94:99:6b:fc:59:5a:55:5d:a9:c2:9e:4a:d9:18:b8:fd:
         40:2e:30:7e:e4:57:1e:1f:a2:60:73:29:cf:1a:4e:b0:aa:dc:
         e7:74:d3:90:12:f2:04:6b:e6:16:bc:8c:63:68:25:88:e6:d3:
         4c:58:df:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:38:04 2025 by rpki-client