Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
File:                     Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft (raw, json)
Hash identifier:          OirzGp8COVJ7pLPZqVBmFqTXtIVExr2VVAM+jYdeeJ0=
Subject key identifier:   11:D9:0D:7A:3C:F6:87:1C:19:46:F8:5F:AE:21:A1:24:C9:8D:F0:46
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Certificate issuer:       /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial:       0197417761A002A6FFBA9CCAE4571FCD9DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
Manifest number:          0F47
Signing time:             Thu 05 Jun 2025 19:00:32 +0000
Manifest this update:     Thu 05 Jun 2025 19:00:32 +0000
Manifest next update:     Fri 06 Jun 2025 19:00:32 +0000
Files and hashes:         1: 1-GIE1ZNs_a58uffTHyRFm6JVqgA.roa (hash: gy76Xlf9casHiqbf8OmkekUAgQNXTcj0O5qhx7aDk8A=)
                          2: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl (hash: tyxgucEB3vgY63M7a2KEuDoOZSFG9fR9MjL7QGRcjjY=)
                          3: U11EgxJj3vWydMXXj47fu6c9oJU.roa (hash: O6q4O52x0/hSWdM6G8XHS8BF1GrAPa5PsVo4kAs071U=)
                          4: eZeH1iCaJCqVSM-iEx9uMe6pR7s.roa (hash: rqwN44hH8sdKM+nwnj0SNae9MB6yS4MWbE4dyJjYG2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:41:77:61:a0:02:a6:ff:ba:9c:ca:e4:57:1f:cd:9d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
        Validity
            Not Before: Jun  5 19:00:32 2025 GMT
            Not After : Jun  6 19:00:32 2025 GMT
        Subject: CN=11d90d7a3cf6871c1946f85fae21a124c98df046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:a8:78:48:b3:5f:bc:3f:c1:f6:ad:15:b8:
                    df:96:ce:ee:89:f5:cf:29:a3:6d:42:83:c7:af:f8:
                    58:6f:0b:ee:bd:e7:53:d8:79:cd:a9:6d:a9:63:d6:
                    b0:56:3c:c4:74:e4:ac:0f:d4:cb:6b:95:1c:9c:0a:
                    41:15:ee:81:23:b2:d2:0e:a9:13:ff:6a:bb:dc:d6:
                    7d:2e:6a:d1:bb:2e:45:2e:c8:00:ef:64:4c:5e:5b:
                    05:d1:bb:bf:36:fc:ad:3d:ba:82:17:af:b2:30:40:
                    f5:b5:65:bf:d5:55:56:ac:6c:73:39:89:55:69:d6:
                    dd:35:22:0d:8a:ab:1a:74:69:60:04:21:80:eb:09:
                    d8:7a:5b:c9:95:e4:87:2a:52:79:eb:03:73:db:d2:
                    59:a1:30:ae:d0:8a:ba:95:e6:a2:a8:ec:7f:04:a9:
                    65:11:b0:14:29:fa:65:f5:6a:82:f6:c8:5e:55:39:
                    8c:d9:09:26:34:4c:38:ad:ae:6d:2e:b9:fd:99:d5:
                    98:df:f0:45:07:fa:4c:73:98:e9:43:f5:9c:a8:bd:
                    af:c6:59:21:ca:ee:e5:de:d4:77:48:80:56:65:0f:
                    00:59:70:8b:e0:a4:1d:43:c3:53:ab:67:11:6a:2f:
                    e7:9a:6f:5f:be:39:8c:98:be:4c:a8:12:dd:f9:74:
                    ab:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D9:0D:7A:3C:F6:87:1C:19:46:F8:5F:AE:21:A1:24:C9:8D:F0:46
            X509v3 Authority Key Identifier:
                keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:61:7f:87:05:1a:42:af:e8:9f:25:12:86:84:63:2b:1d:4c:
         76:f5:cf:53:13:15:8d:40:74:ae:e2:22:b9:ba:2c:06:18:1d:
         90:08:2b:fc:62:eb:0b:72:42:8e:39:5a:af:e0:71:a9:99:ec:
         bf:bc:77:a6:95:66:af:a8:e3:7e:5b:3c:02:59:4d:cf:e0:a8:
         e1:00:8e:89:df:91:6c:28:f7:00:a8:bd:07:26:94:6f:b2:99:
         49:11:61:97:cc:35:fb:d7:77:09:8d:79:d4:35:69:df:ab:64:
         58:d8:d3:7e:cb:5e:d6:03:bc:51:69:a1:c7:c5:61:49:98:b1:
         f5:4b:57:e3:fd:44:f5:39:51:3f:cc:c6:8e:cf:d3:a4:44:b5:
         a6:bc:73:01:37:d0:dd:ad:8c:cb:f0:3f:11:a4:77:b2:c1:c9:
         81:84:e3:54:9a:87:d8:64:86:44:f7:d7:5b:73:a2:d1:a9:f2:
         29:23:40:26:74:fb:ac:a3:db:59:e7:2f:0f:9b:67:a4:3f:a3:
         c5:f9:7f:7f:e5:23:98:91:66:70:b4:f6:ac:53:55:31:86:73:
         58:d4:56:bc:34:34:81:5a:50:83:f7:c8:bc:9d:04:e0:6c:29:
         0c:d8:4a:cf:6b:ac:47:94:1f:91:9c:72:92:bf:ed:44:b3:04:
         ef:f7:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:15:31 2025 by rpki-client