Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File:                     24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier:          lsO4JMnPtcKC6sYwCzI2K5ijy7CmnXeeCMBKEfnWAg8=
Subject key identifier:   77:56:29:73:A2:86:1D:34:35:59:99:64:45:35:C2:B4:5C:EB:3A:3C
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer:       /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial:       01974D0E027197563AF27A8FEF317F5691F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 01:00:53 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:53 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:53 +0000
Files and hashes:         1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: RyyjY2Yj3n6sHLzZEg0ur6/FwNmy+5j98kAF9obN76w=)
                          2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:02:71:97:56:3a:f2:7a:8f:ef:31:7f:56:91:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
        Validity
            Not Before: Jun  8 01:00:53 2025 GMT
            Not After : Jun  9 01:00:53 2025 GMT
        Subject: CN=77562973a2861d34355999644535c2b45ceb3a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:f3:78:46:5f:ec:7b:ae:57:1a:8f:8c:bd:
                    4b:b0:a4:4f:e0:a0:ec:a7:66:be:24:86:e8:56:76:
                    2c:60:2b:42:80:b4:e7:11:42:c0:a0:f6:50:87:c9:
                    26:39:d3:93:33:11:28:bd:4a:f3:d5:17:83:73:0f:
                    6d:ac:9f:cf:8b:c4:da:6c:d8:d1:69:da:11:dd:74:
                    00:7b:8c:1c:3b:33:b6:b6:e9:91:50:02:71:84:8d:
                    4c:69:35:52:be:17:d3:d5:0f:19:78:1a:d8:8f:66:
                    12:98:ce:f7:d9:c1:d1:8a:97:ad:64:ea:e7:05:ff:
                    4c:de:69:f8:40:9c:c8:98:9e:5e:44:a6:e4:23:34:
                    ec:24:94:53:0a:d4:d3:f7:ee:61:44:14:60:2b:8d:
                    e0:47:1f:b4:c6:67:76:45:f5:1a:32:6d:d2:aa:6b:
                    bc:38:6e:dc:86:e3:e0:a2:6a:dc:87:a2:81:89:80:
                    7c:ba:2b:2e:c2:58:7a:26:52:d3:5b:c1:4c:2c:46:
                    8e:7e:ae:c6:04:73:eb:2c:2f:e5:85:d8:d9:af:dc:
                    5f:f5:e3:b7:9e:a8:a8:95:06:49:37:7c:32:6d:c2:
                    41:0e:43:6d:c3:90:f4:96:e8:35:e3:f1:45:d7:89:
                    a9:fb:27:c0:b9:50:4e:96:ae:ee:1d:e3:fd:2b:fd:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:56:29:73:A2:86:1D:34:35:59:99:64:45:35:C2:B4:5C:EB:3A:3C
            X509v3 Authority Key Identifier:
                keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:57:92:15:3c:9c:db:05:86:6d:36:94:be:a0:06:2f:db:71:
         6d:72:8b:d4:fc:5a:7c:d2:b7:03:30:92:d5:e9:71:9f:57:5e:
         68:41:6d:56:b4:72:01:79:1a:87:c3:6f:c0:b6:a2:99:60:3a:
         38:35:78:c4:44:9b:57:5c:5d:22:64:f7:da:e5:d4:84:f4:6e:
         02:49:af:c1:1d:6f:a4:5e:9f:38:97:04:66:12:0f:91:d6:8d:
         5f:d7:73:20:24:cf:7e:55:ae:74:02:2b:18:6e:8e:89:22:1a:
         95:5a:a5:e6:94:85:4f:66:da:eb:81:62:f6:37:db:57:83:1b:
         1b:d0:1d:b6:0f:08:8a:4a:86:c0:5a:4c:96:5c:74:e8:e5:1c:
         e6:b2:39:d3:46:87:8a:19:19:af:a9:96:83:39:05:67:eb:f5:
         67:0c:a2:c0:cd:59:31:d8:83:43:e0:ab:3b:ae:6c:27:2d:34:
         62:c6:57:9a:e6:8c:03:51:a2:71:2a:a4:da:ae:2a:5c:8b:45:
         7d:36:25:41:8e:a6:48:b9:c0:fa:0a:a8:ed:16:4e:3d:f9:42:
         15:d6:63:4c:e1:38:7d:93:ae:ff:75:6b:ff:ff:72:09:34:9b:
         e6:68:71:a3:13:a2:35:ad:15:36:58:08:ae:74:df:22:70:4c:
         87:6c:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:17:08 2025 by rpki-client