Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File:                     A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier:          yKMRStJnrN8TMfCI5N2giAiVy+mA2qNlgM/hM0w8p7A=
Subject key identifier:   5B:65:E0:05:28:0C:5D:03:33:20:69:DD:B6:DF:3A:9F:5C:A0:27:09
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer:       /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial:       01976D7498456490F9FC16D3118238D12EC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 08:00:47 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:47 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:47 +0000
Files and hashes:         1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
                          2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: jfRFm+WIKgsQPZdVyg417jVpM8wOA7KDGmzNtLIEn9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:98:45:64:90:f9:fc:16:d3:11:82:38:d1:2e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
        Validity
            Not Before: Jun 14 08:00:47 2025 GMT
            Not After : Jun 15 08:00:47 2025 GMT
        Subject: CN=5b65e005280c5d03332069ddb6df3a9f5ca02709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:c7:f1:53:fe:14:6d:82:12:4a:20:37:70:
                    c9:ad:24:cd:3b:21:00:e2:b9:71:8b:37:30:47:c5:
                    92:8d:82:d8:a8:d1:37:62:1d:aa:1a:ce:42:0d:84:
                    26:b3:7d:be:23:90:f7:3c:4f:54:ec:c0:a2:89:bc:
                    84:cc:87:e8:a0:f6:c6:dd:d0:56:fb:2a:5b:b0:37:
                    32:25:78:c8:3e:07:5a:83:c0:68:1d:8e:57:59:ea:
                    84:34:f3:6d:d1:b2:18:76:93:e8:83:88:d5:d5:2e:
                    9d:8e:e0:aa:bd:1b:bc:52:3a:96:7a:07:16:d5:9e:
                    f5:4c:06:0c:0f:98:0f:de:b7:bf:f3:39:98:73:a4:
                    69:93:73:7f:a8:75:f9:35:0b:69:3c:c6:7a:e9:19:
                    9b:c1:cf:f3:d8:16:55:7d:51:1d:0f:17:6c:91:5e:
                    b8:65:ce:b1:98:b7:2b:c0:2d:08:27:b7:ff:e4:63:
                    a0:69:c5:17:e0:72:ac:c7:0b:58:d9:db:5b:a2:32:
                    6b:2d:3b:cc:2f:bd:af:66:1a:09:26:80:ff:ed:85:
                    90:8b:c0:a9:08:fe:01:15:a2:c2:4c:70:45:f8:83:
                    2f:31:fe:6b:b7:78:fe:cb:00:3c:bc:08:6d:4f:dd:
                    c6:f2:88:0b:38:70:1e:95:d5:2a:86:78:3b:58:48:
                    e9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:65:E0:05:28:0C:5D:03:33:20:69:DD:B6:DF:3A:9F:5C:A0:27:09
            X509v3 Authority Key Identifier:
                keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:37:42:7d:5c:34:78:22:55:7f:cf:00:fe:ad:1d:c2:c5:cd:
         6f:c6:5d:0d:8b:58:07:8e:b2:fa:65:80:bd:10:0a:8b:ad:72:
         3f:ea:38:ed:74:ee:3e:77:a7:60:45:7d:a3:17:19:a6:db:2f:
         dd:4d:5e:76:22:29:75:8e:97:6e:10:26:a2:83:39:2f:3c:c7:
         6b:19:83:11:b5:3d:f2:31:37:a6:c0:4c:ed:1f:75:46:43:10:
         8e:48:1b:25:88:f1:88:5a:65:96:1d:83:80:02:50:c5:6d:c0:
         ba:c9:d6:42:98:4a:7c:4c:7d:86:4c:9c:d9:d7:8c:00:50:c9:
         1d:12:91:6b:c6:45:1f:c9:43:c6:5d:05:bf:97:85:6b:a0:38:
         a8:63:94:8e:35:cb:4c:0f:55:2f:a4:a0:7c:02:44:34:5e:dd:
         84:a5:a8:98:2e:cc:18:10:c7:94:de:bd:79:e8:cd:76:79:81:
         24:43:8f:af:1f:11:bf:10:27:1a:ee:f9:d1:bf:29:d9:72:74:
         f8:10:28:65:af:ec:cd:fb:59:42:ae:97:9d:e1:66:48:f7:19:
         f3:bb:40:61:65:86:a6:04:2b:b9:c0:53:e2:b9:bc:1b:66:59:
         a1:5a:ee:72:a2:bb:09:08:bf:95:bb:4d:b9:64:61:96:81:08:
         b7:6f:3f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:57:39 2025 by rpki-client