Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File:                     f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier:          ET6mB/dkWhsBBpLVZkQenzplWv8vOW/KsbjoyX1oHmA=
Subject key identifier:   16:53:24:6D:BD:98:A2:4D:E6:2B:D8:D8:52:7E:2E:8C:E0:55:33:F1
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer:       /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial:       01974B5634A3FDCB5B81599D3D5CD8286437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number:          1510
Signing time:             Sat 07 Jun 2025 17:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:30 +0000
Files and hashes:         1: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (hash: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=)
                          2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: nW33Gvdiv0vY+HzSsWtv/coIrE0MlRI/zdISb4fI7H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:34:a3:fd:cb:5b:81:59:9d:3d:5c:d8:28:64:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
        Validity
            Not Before: Jun  7 17:00:30 2025 GMT
            Not After : Jun  8 17:00:30 2025 GMT
        Subject: CN=1653246dbd98a24de62bd8d8527e2e8ce05533f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:ef:af:f9:21:6c:b9:21:44:3e:fb:08:0d:
                    4d:31:25:02:66:7b:2b:79:00:7b:d8:d1:96:c5:cc:
                    9f:60:3b:4b:6d:18:aa:00:12:04:ea:67:46:cf:fe:
                    61:6e:3e:6c:53:72:1b:68:38:69:8a:7b:a0:83:99:
                    f5:d0:81:92:48:48:68:89:29:9c:bd:42:03:92:f9:
                    0e:dc:dc:f8:57:38:de:75:1d:49:53:83:a8:09:88:
                    fe:98:2e:38:f8:84:29:7f:0e:15:2f:c7:9c:1c:b5:
                    7d:fb:a7:5b:6b:8f:73:fc:ce:31:f5:5d:80:b6:41:
                    32:cf:3b:44:fe:e1:57:e0:df:a6:28:33:40:41:cd:
                    44:4e:e8:0f:dc:f2:99:b2:05:ac:12:5e:62:59:b9:
                    c9:59:66:ca:78:94:7f:1c:62:02:01:b9:4a:17:d8:
                    0c:25:7d:4d:28:81:3e:7d:17:74:81:33:af:58:4b:
                    33:14:8a:bb:d1:7b:0d:c0:6f:00:1e:92:08:45:5d:
                    71:88:f9:42:07:ac:a1:f1:2e:9d:4c:8d:d2:dd:4e:
                    d1:b8:29:e8:0f:4a:58:35:bb:9d:16:49:70:2e:bf:
                    25:28:4f:77:34:99:74:30:3f:04:28:ea:52:b9:15:
                    bd:cc:aa:4e:44:66:9d:08:bc:40:04:ca:04:74:3e:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:53:24:6D:BD:98:A2:4D:E6:2B:D8:D8:52:7E:2E:8C:E0:55:33:F1
            X509v3 Authority Key Identifier:
                keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:9c:f4:2d:f9:37:ee:15:a2:8f:55:39:e5:0e:5a:d9:e1:65:
         3b:28:df:5b:02:0f:b2:c0:fb:79:6d:e1:5d:90:43:09:33:1a:
         0f:ec:5a:0f:1e:4b:f3:63:ec:a8:48:9a:1a:83:7c:78:20:8c:
         7e:15:0c:e1:67:af:08:bf:51:be:6c:0a:78:ef:f3:30:97:7b:
         10:9d:69:b5:af:29:79:1b:70:36:fb:13:73:f1:6c:9b:12:e7:
         d5:48:4a:52:b1:c1:54:ca:02:2e:b5:50:a3:34:13:3f:0b:c2:
         b2:42:27:a0:f6:50:7c:28:58:0d:9e:ca:ef:77:15:6c:a8:93:
         be:a5:82:16:86:41:a4:da:46:64:9c:cd:9c:26:92:98:bf:72:
         f9:f7:63:3e:47:c9:d4:56:b5:4f:70:d0:03:7a:8c:7c:6a:ab:
         42:c7:cb:7f:32:7c:40:fa:74:92:98:12:ca:ff:c7:8d:af:17:
         32:37:d2:f0:80:5f:1a:1c:9a:57:dc:51:d0:70:2f:b9:08:d1:
         5f:a9:25:b1:ce:1a:9b:f3:0d:a7:e3:0e:39:af:5d:be:d0:88:
         bb:ec:e7:f2:f9:4b:48:db:0c:67:c5:8d:96:62:21:bb:de:a3:
         e4:22:31:ad:cd:6f:54:64:77:49:dd:eb:cf:35:23:e6:8e:68:
         61:e0:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:03 2025 by rpki-client