Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File:                     cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier:          1Qj9fi0rMglkLr8J6dGrd6n+fVQY9QqZXqkrCedIBDg=
Subject key identifier:   34:75:F6:19:C6:78:E3:DA:24:47:65:F7:47:7F:37:D3:2C:99:50:F9
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer:       /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial:       019749D6387CD5797FBEBBC99F75BC433140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number:          1594
Signing time:             Sat 07 Jun 2025 10:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 10:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 10:01:05 +0000
Files and hashes:         1: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (hash: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=)
                          2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: qNbclWG/+q5CZIx1fgtg/AVsuEYJEK75zNitbe/JJc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d6:38:7c:d5:79:7f:be:bb:c9:9f:75:bc:43:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
        Validity
            Not Before: Jun  7 10:01:05 2025 GMT
            Not After : Jun  8 10:01:05 2025 GMT
        Subject: CN=3475f619c678e3da244765f7477f37d32c9950f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:78:2c:35:a1:66:30:b8:50:45:b9:75:75:
                    4e:b5:0e:fb:c9:93:e9:8e:58:56:12:63:8a:59:f0:
                    74:ac:7f:09:b2:29:63:ff:b3:cd:30:d8:7a:bd:c3:
                    76:c5:a1:2c:eb:52:70:ae:72:58:17:d1:b0:70:c3:
                    0a:1a:da:39:16:f2:a2:4d:e7:56:80:76:a4:23:91:
                    d2:ae:73:00:69:3d:2e:74:1d:b5:af:33:bb:c8:59:
                    36:c6:af:09:c4:3e:7a:b2:63:ac:1c:79:25:09:b6:
                    49:9b:77:05:ed:1c:a5:15:28:08:04:3a:9f:39:af:
                    50:4a:5a:61:4d:f8:e1:c5:41:56:1f:71:5f:c4:0a:
                    b3:65:df:ed:4e:1b:37:1e:a0:27:76:ac:9e:d3:c0:
                    af:84:be:26:a7:b5:af:fe:25:ea:70:13:b6:42:6d:
                    b3:c3:49:45:6d:03:d2:09:e2:d6:45:09:f2:b8:39:
                    66:7e:7c:cb:ec:cb:c1:16:a2:14:62:81:82:a7:40:
                    b9:7f:ec:b8:7f:8d:6f:8d:30:ab:65:9f:6e:33:96:
                    87:75:ee:6a:09:3c:c5:a4:ee:46:c3:10:1a:76:37:
                    38:2b:2c:2f:20:70:dc:0d:56:2a:7e:4c:f1:38:e5:
                    e2:8a:0e:3d:1e:aa:18:68:68:15:44:b9:4a:75:fa:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:F6:19:C6:78:E3:DA:24:47:65:F7:47:7F:37:D3:2C:99:50:F9
            X509v3 Authority Key Identifier:
                keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:be:bb:e0:c4:45:68:6a:b5:76:0f:0f:95:d8:83:f5:95:
         7c:42:7a:ef:15:d6:be:ec:0a:cd:b8:59:1a:48:a4:75:64:46:
         aa:0c:24:a2:6b:b9:88:ab:f0:5b:c2:27:2b:13:e5:ce:89:88:
         5a:e0:08:83:17:08:c0:89:f5:a1:75:83:0f:c9:5d:7c:cd:ae:
         80:14:5f:30:e1:5f:03:b5:4c:71:9b:fb:32:d6:e9:19:ba:9c:
         0c:a9:1f:af:bb:a0:c7:24:9b:48:53:fb:36:7e:af:db:2b:17:
         e3:40:db:58:6f:6c:c4:a8:9d:6b:9e:0b:11:43:c4:ba:87:8d:
         6a:54:9a:cc:f3:53:a5:f6:e1:b3:63:ae:62:e7:23:c1:e0:3a:
         b8:3e:34:47:d0:f7:86:d6:e3:da:c9:bd:25:65:e8:96:43:e1:
         57:4a:f3:11:16:9a:18:ed:c7:4e:80:50:89:00:83:e3:ac:c2:
         0c:8d:69:29:7c:44:87:ac:c1:55:f3:e3:15:cf:ce:a5:e5:42:
         eb:cc:2f:8b:c4:8c:cd:74:8c:e5:e1:16:7b:71:66:c4:af:0a:
         be:29:14:90:41:6a:fc:09:b3:9a:78:5e:c2:fe:75:e8:4a:40:
         76:82:5b:19:e4:d7:e6:3c:d9:20:85:b0:d6:af:05:b9:12:4f:
         2d:84:f5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:58 2025 by rpki-client