Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File:                     lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier:          XJrMj/WQrb84dayGiaA+EQ+zSIVaWZft34BfMFAl5q4=
Subject key identifier:   C8:E8:E7:9A:7F:CC:64:C5:5D:17:80:AB:E4:4A:90:3E:F9:E2:63:95
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer:       /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial:       01974A0CC0188463E0B17422372B26E4A4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number:          1583
Signing time:             Sat 07 Jun 2025 11:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:38 +0000
Files and hashes:         1: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: 1/rVzhdLA1iX+iq7gWBabj9cc5MGEjWhntZUk6rDgfo=)
                          2: sQyECaaIBBJuTWR_GAKRUGY2zLs.roa (hash: a7MHGEIK7Syni3DpYI0UPL4y49isayDX/P6hkOd4qq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:c0:18:84:63:e0:b1:74:22:37:2b:26:e4:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
        Validity
            Not Before: Jun  7 11:00:38 2025 GMT
            Not After : Jun  8 11:00:38 2025 GMT
        Subject: CN=c8e8e79a7fcc64c55d1780abe44a903ef9e26395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:88:6a:82:1a:18:4d:8e:af:73:79:b0:64:
                    93:47:b2:50:fe:b9:2f:c1:4d:ce:3e:4b:a1:58:36:
                    9d:eb:a8:06:8a:70:26:9e:6c:66:09:4f:d7:1e:ce:
                    73:f6:e1:21:0c:94:7e:72:4c:64:0d:e6:76:6c:d3:
                    a7:1f:a5:9d:50:a7:5b:49:bf:ae:9b:5e:8b:48:05:
                    38:a8:48:d7:58:7a:16:39:2f:90:df:26:1e:5a:09:
                    a5:9a:73:8b:8d:39:f8:ab:f3:ef:c5:d3:af:8a:63:
                    ec:f8:8f:09:4b:87:9e:b6:92:c5:26:f8:58:c3:da:
                    b9:89:2c:b9:96:9b:56:7c:3c:44:96:3d:80:ef:c5:
                    f5:83:63:f1:fc:be:b5:83:c7:b0:d9:2e:3b:22:0e:
                    21:69:01:ed:36:4a:69:0f:f2:db:69:7f:67:0e:13:
                    10:37:6a:ea:5b:2b:6b:66:e9:07:c0:dd:87:ed:a5:
                    32:a7:bd:9e:90:05:47:7e:ef:af:97:1d:1d:e9:8b:
                    ec:fd:66:6f:84:d1:1f:47:bd:4f:15:14:ae:d3:27:
                    e8:c8:49:b8:3e:86:09:27:37:ba:9f:67:2b:10:ac:
                    cf:93:86:b8:8f:78:b3:d0:2c:87:57:25:33:fc:1d:
                    2c:87:aa:ec:45:6f:cf:8f:20:4f:07:68:12:d7:f6:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E8:E7:9A:7F:CC:64:C5:5D:17:80:AB:E4:4A:90:3E:F9:E2:63:95
            X509v3 Authority Key Identifier:
                keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bc:a8:2d:e4:f8:73:cb:24:7b:75:b2:6c:2b:fd:de:86:cc:
         d3:3c:6f:ba:1c:b6:c9:f2:47:54:dc:14:0c:1f:56:4a:b8:25:
         bf:29:a4:c7:4b:82:2a:c5:b0:0a:07:66:d4:64:b5:c1:e6:55:
         29:0c:e3:d2:db:3b:50:f9:59:e4:8b:4c:a2:9f:cb:9e:50:f0:
         c5:28:a3:4e:7a:b7:53:3d:e5:49:e5:35:3e:da:05:cd:d9:6c:
         ed:63:4e:94:f1:9c:8b:3d:fd:28:c4:ff:20:52:07:15:14:93:
         4b:a9:6e:1b:86:c1:f7:19:45:e9:59:59:f6:d4:a8:9e:49:42:
         19:17:9e:b3:a4:06:4f:06:ad:4c:43:fd:f5:13:37:f1:d4:c6:
         58:ba:84:37:81:c6:04:db:7a:7e:b4:c7:8f:6d:f5:f4:c1:82:
         f7:e6:35:a6:f9:f8:dc:90:2d:36:09:c9:e1:c2:86:dd:19:42:
         f9:48:58:00:64:c9:d8:8f:46:89:9d:41:95:47:92:07:b4:4d:
         eb:dd:38:de:d8:72:f5:cf:fd:78:45:ff:99:cd:80:ac:b2:fa:
         4c:e7:a0:73:fe:80:5f:7e:f0:ff:8c:a7:da:5c:2f:99:62:ff:
         2e:cc:e1:65:90:5b:64:96:d1:4f:d5:48:91:a7:8f:b5:74:d9:
         51:88:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:12 2025 by rpki-client