Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
File:                     l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft (raw, json)
Hash identifier:          xr5UPDmQCAHbYIIvBPBacD6xhrl5BG2Sk4yz2yOMk6U=
Subject key identifier:   0E:7A:F4:06:60:56:59:AE:70:51:C7:01:4F:9B:57:AD:67:76:AC:E6
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Certificate issuer:       /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial:       0197711B3A7A7569CBCB13A9FEA5A93A9093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
Manifest number:          1591
Signing time:             Sun 15 Jun 2025 01:01:39 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:39 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:39 +0000
Files and hashes:         1: YVg_2iB1D0i_33LG7yJEAknUwCM.roa (hash: LAKKZLtOPGoM/C7ZDpXW5Qjmcc0Ag72bwBoz/cyOViA=)
                          2: l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl (hash: 87MyC2kbZYrfyRKVYagQF1NnHDGbkXyidmoHldNRyig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 01:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1b:3a:7a:75:69:cb:cb:13:a9:fe:a5:a9:3a:90:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
        Validity
            Not Before: Jun 15 01:01:39 2025 GMT
            Not After : Jun 16 01:01:39 2025 GMT
        Subject: CN=0e7af406605659ae7051c7014f9b57ad6776ace6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c9:a9:a5:af:7b:a3:16:7b:0c:cd:1d:d1:2d:
                    c6:64:57:e5:96:40:2a:db:6d:ec:da:89:44:9a:64:
                    a5:a1:e1:b4:0c:c4:22:2f:4a:3d:a5:24:bb:d5:38:
                    e2:d6:96:3d:27:dc:ad:31:1e:98:23:b5:e7:82:e5:
                    74:62:6c:ef:66:92:47:e9:e7:e3:ac:7b:a3:cf:c2:
                    e9:55:06:6d:52:f2:6b:98:6a:dd:10:c8:9f:a0:d7:
                    3b:7e:67:3a:12:eb:d4:5a:51:1b:c5:a2:46:23:3a:
                    01:3c:d2:6c:ef:39:90:41:3c:1a:85:58:08:70:ef:
                    c1:39:8a:c8:02:90:07:90:5f:19:c9:8c:35:0e:04:
                    e9:f7:81:85:d1:57:71:37:d5:cd:9d:ab:27:4f:01:
                    bd:0b:c2:41:94:3e:99:78:3d:da:01:96:24:e7:73:
                    6c:2b:a1:85:a4:a4:8e:c0:59:a0:b8:2e:e5:ac:cb:
                    60:d2:e2:e3:39:ff:35:3f:74:06:4f:49:26:c0:63:
                    e2:e3:24:b6:f0:f5:70:e5:66:b7:af:95:7d:f3:10:
                    02:15:71:b7:dc:19:0e:08:87:d3:5d:73:8d:b3:7d:
                    79:1c:1b:ee:4f:da:f7:65:1d:6c:fe:8d:ce:45:71:
                    de:15:a6:13:6e:5d:59:6a:5e:84:36:a4:ff:8a:ee:
                    4d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7A:F4:06:60:56:59:AE:70:51:C7:01:4F:9B:57:AD:67:76:AC:E6
            X509v3 Authority Key Identifier:
                keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:00:5f:2a:90:80:7f:d1:99:b7:d7:15:bb:31:b5:74:62:be:
         44:df:62:67:01:62:63:b0:52:37:cd:19:98:e8:4b:ec:c5:e4:
         8d:27:d8:b9:cd:9b:8e:3c:3f:f1:54:c9:6a:da:00:09:53:0d:
         e5:cd:7d:5a:da:86:b9:2d:b2:3e:c5:5e:ed:2b:2e:1b:11:3f:
         71:6c:34:15:8f:9f:3b:55:7f:ad:f9:ea:d2:b4:52:0e:92:0d:
         84:e1:71:68:e0:1e:d5:82:37:f1:18:35:27:87:8b:20:1f:a8:
         9b:77:b3:55:0a:b0:a4:0c:1d:be:73:e6:d6:01:ea:37:00:ab:
         b2:a6:d3:64:94:96:9a:e1:16:1e:aa:29:74:0d:8b:f6:80:ce:
         b5:97:9c:49:0e:91:22:b8:e2:76:be:bc:09:0e:88:7d:da:6e:
         12:8b:87:9e:a0:32:c3:5e:c8:45:bd:cd:8b:7a:47:4f:22:81:
         b5:b9:2e:cd:b4:30:36:c3:f2:dc:96:51:5b:ee:7f:33:67:86:
         8b:fd:b2:8b:e0:2c:4f:90:83:eb:ea:8b:f7:f7:f5:0b:f5:8e:
         52:6b:b7:c3:36:88:c5:03:be:af:15:a7:04:8a:35:a3:c0:3e:
         f1:6b:a5:9c:f1:7f:ac:28:34:e0:c1:3c:cc:04:51:70:8c:83:
         3b:f5:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:45:52 2025 by rpki-client