Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File:                     AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier:          eRibegqz42tNTeyvf0wdEKb+EFq06apsAe/RXfH8V3Y=
Subject key identifier:   17:ED:81:28:6E:86:D4:48:F9:63:8C:03:E2:37:73:79:0A:E5:49:E6
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer:       /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial:       01976CCFEFE2CFCE96C3BD82E07E64BBBB4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number:          1522
Signing time:             Sat 14 Jun 2025 05:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:56 +0000
Files and hashes:         1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: pIyy3RdodYSFOiye7sFGR9ZBd/fpzTvMoovvvdhw75Y=)
                          2: RZsQW2mn0p77cUSrDj82xlpY4kU.roa (hash: PgZwlEZ/SO6/ySPSoJ7naRU3kSxO9+Lme8pB8HNwF8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:ef:e2:cf:ce:96:c3:bd:82:e0:7e:64:bb:bb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
        Validity
            Not Before: Jun 14 05:00:56 2025 GMT
            Not After : Jun 15 05:00:56 2025 GMT
        Subject: CN=17ed81286e86d448f9638c03e23773790ae549e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:c7:df:9f:c8:60:23:6d:ca:8f:13:67:64:
                    d3:70:2a:1a:fb:d3:7d:f3:16:cb:b3:fb:37:52:d3:
                    f8:5d:77:a4:cb:fe:c5:35:c5:8a:09:98:29:07:8a:
                    34:d4:e2:84:6e:eb:bd:cf:2e:51:5a:35:7c:95:be:
                    02:62:ff:42:ee:21:f0:14:f9:3b:5e:b0:b6:f2:ba:
                    2b:33:63:a5:21:90:fb:e6:77:eb:c6:8c:9e:06:7c:
                    ed:25:e2:cc:cb:14:41:0b:b7:8e:de:b8:e2:65:86:
                    5c:28:4d:c0:db:2a:02:f9:0a:ce:3c:31:f0:af:85:
                    37:14:94:b1:4d:ef:86:e2:8f:00:93:7c:32:71:32:
                    43:5e:49:20:19:95:5a:63:b4:8b:c6:c7:a3:b1:28:
                    e0:bc:f5:9e:c8:a7:ad:88:f6:d3:9e:bf:e1:30:f2:
                    fa:a8:89:37:29:0f:08:41:ab:ec:a0:d3:8d:3b:3b:
                    7f:cd:f1:f8:93:e5:46:e5:a0:32:a9:5c:fb:a4:50:
                    bf:f9:4b:9d:d7:9a:e4:60:9b:9b:a0:b6:3e:2a:19:
                    68:ad:5a:6c:f5:e2:35:fe:fd:16:eb:2e:54:5b:0d:
                    a2:dc:df:80:90:a1:2b:bd:81:4e:b1:07:39:cc:eb:
                    6d:5d:c4:df:1e:8e:87:c3:f3:16:a1:48:6d:2a:60:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:ED:81:28:6E:86:D4:48:F9:63:8C:03:E2:37:73:79:0A:E5:49:E6
            X509v3 Authority Key Identifier:
                keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:58:42:d2:6f:e2:cc:eb:30:dd:a4:b0:bf:fa:1e:3b:91:6e:
         74:c6:db:c9:84:70:7b:7a:8c:f9:62:0f:46:5d:74:de:6c:d7:
         af:74:96:8f:7d:f0:bc:b5:66:c1:ce:92:f5:d5:02:ea:ed:aa:
         b9:ff:3e:d4:28:47:db:98:82:4c:a5:08:de:41:72:be:ee:0e:
         91:c7:15:09:a1:6a:28:64:8a:d7:ee:5e:b7:d5:ef:ab:8c:e3:
         0d:95:dc:bd:f2:a3:e5:34:e1:b4:d2:f5:21:6f:7d:f7:35:d1:
         35:f4:32:41:eb:95:df:6d:1e:47:a4:00:32:4f:c0:c8:eb:35:
         df:81:7f:35:f7:a6:03:bf:72:fd:ea:58:7f:ab:2e:22:3f:e8:
         5e:ab:bb:0b:74:88:98:fd:b3:4d:71:b6:52:8a:f9:7c:cc:1c:
         f6:80:35:7b:ec:f0:31:a2:b2:da:8e:2b:eb:57:8b:18:ec:36:
         76:12:a9:eb:86:96:07:43:5e:1d:00:d0:a1:29:06:05:21:b7:
         3b:b4:df:d9:15:dc:2f:c1:ae:5b:6e:72:36:ea:fc:0f:a9:78:
         60:1c:1e:cb:4d:2f:95:79:4e:5e:37:6f:63:31:97:34:3c:ec:
         32:69:6d:8c:8b:f6:ca:30:5c:ac:d0:02:5e:93:c1:31:80:20:
         28:60:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:22:37 2025 by rpki-client