Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
File:                     pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft (raw, json)
Hash identifier:          P39mTmnFd47bqSTELnb3DrS2xS9TioeQ+0rZaqKJg7g=
Subject key identifier:   77:41:74:35:B4:E4:39:DC:90:8A:43:E0:C3:85:A1:0E:64:FB:CA:45
Authority key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
Certificate issuer:       /CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Certificate serial:       01977AC1FF68A9A0DFFC6DBEDABD8872E2CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
Manifest number:          1595
Signing time:             Mon 16 Jun 2025 22:00:23 +0000
Manifest this update:     Mon 16 Jun 2025 22:00:23 +0000
Manifest next update:     Tue 17 Jun 2025 22:00:23 +0000
Files and hashes:         1: BfRloUJHji-lEUaufwMc19LxiqE.roa (hash: 94Vq30eYX4ShhMgHZx9s+4a5DKBY3zN9CTPT6BVaH44=)
                          2: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl (hash: iNkmevE/hl0ULl0vJoXna1JvZ2IRCZb5E+S4vQF9rVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:c1:ff:68:a9:a0:df:fc:6d:be:da:bd:88:72:e2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
        Validity
            Not Before: Jun 16 22:00:23 2025 GMT
            Not After : Jun 17 22:00:23 2025 GMT
        Subject: CN=77417435b4e439dc908a43e0c385a10e64fbca45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:1b:5e:9f:5e:a9:0b:5a:7b:95:14:1f:ed:
                    6d:aa:22:f2:bb:4d:53:d5:97:8f:e2:e3:76:07:df:
                    7e:e4:cd:ff:48:da:7b:6b:20:07:9c:33:5b:48:86:
                    92:8e:34:1d:17:14:10:93:7f:b1:f8:ee:42:cf:3c:
                    72:8d:12:9c:11:d0:2c:69:5d:c4:a5:4c:ea:4b:e2:
                    7e:07:06:c1:cc:9e:fa:de:58:ba:4c:31:83:49:5d:
                    95:8a:5d:3b:3a:3e:aa:1a:ec:22:a0:62:4b:65:c7:
                    71:52:9f:33:bd:57:60:32:18:e6:13:ef:e1:2a:d1:
                    f3:fc:15:08:91:b9:95:c7:8e:bb:a4:3e:4d:e6:80:
                    e0:0a:51:4d:3c:d1:9c:77:59:b3:19:e1:9a:0b:f2:
                    a7:19:d0:57:14:7a:24:39:a7:5a:30:ce:d7:c2:51:
                    1c:05:e2:9d:2a:bf:72:f7:0c:29:02:22:dc:6e:80:
                    73:d8:44:e6:0e:2e:19:a8:57:87:e5:d8:a2:0a:e9:
                    0e:4b:c5:25:14:d0:98:38:4b:ee:15:72:f1:02:54:
                    41:0c:7d:27:bd:30:47:ac:ae:8c:f8:ad:b2:f4:e5:
                    fb:3a:9e:df:67:44:9c:71:e5:07:f1:a5:ce:58:fd:
                    94:ec:52:ae:66:ec:88:e5:07:d6:f5:9f:eb:79:6f:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:74:35:B4:E4:39:DC:90:8A:43:E0:C3:85:A1:0E:64:FB:CA:45
            X509v3 Authority Key Identifier:
                keyid:A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:4f:c6:9d:a8:a5:72:d8:e2:c5:30:25:d0:af:21:f6:b5:
         79:c9:a3:ce:ec:89:26:0a:a0:56:3a:48:b7:3d:c2:c8:00:88:
         6f:d8:0e:7d:3d:9a:a9:a6:a9:9b:87:13:9c:2f:dc:b4:d7:7e:
         08:8f:13:25:75:f1:71:0f:24:ff:6e:26:2d:51:31:bd:22:d3:
         40:b9:03:ff:63:f8:5c:2b:b9:6a:6b:3f:22:47:e6:f1:0c:5e:
         ce:36:e8:d9:79:af:c4:8f:29:6c:88:f1:85:bf:83:4d:0c:6b:
         4f:22:a9:b3:12:08:1e:1f:d8:8c:3f:71:07:01:c4:7b:61:8a:
         fc:c6:b1:13:5c:73:a3:cf:a8:9c:f1:88:64:3e:5f:ce:08:f0:
         ba:8f:c4:2b:a0:12:67:20:45:76:fc:8d:5c:44:1f:7c:9d:b1:
         01:b0:98:e2:47:a9:84:ad:8a:1d:b1:e4:37:fc:66:4d:6d:52:
         97:20:50:4d:22:bc:5c:16:ce:65:42:24:2b:98:76:24:9e:b9:
         86:d2:81:3a:08:3e:26:68:b3:b9:d1:8f:3e:42:dd:95:20:70:
         c5:74:5c:55:01:be:89:85:89:14:66:c1:7b:94:d3:69:72:f6:
         2d:cf:c6:4c:5c:97:16:50:44:5d:cc:4f:0f:9a:94:01:d4:18:
         37:9a:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:36:05 2025 by rpki-client