Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File:                     iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier:          +vF/89PYffbzZ+3hb3/w/oogOOFd4DlfYuEWDrAOLx4=
Subject key identifier:   D5:FE:DD:69:DE:6D:D8:D8:E1:E5:4C:F7:F3:1E:26:B8:87:92:0A:9B
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer:       /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial:       01974C68D8E124A2418CF0864F7F316E22ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number:          1580
Signing time:             Sat 07 Jun 2025 22:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:28 +0000
Files and hashes:         1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=)
                          2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: l2F3NeaPQg4UsOut7TtzJe7Yb6W3ckJuj7GGOjId7Ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:68:d8:e1:24:a2:41:8c:f0:86:4f:7f:31:6e:22:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
        Validity
            Not Before: Jun  7 22:00:28 2025 GMT
            Not After : Jun  8 22:00:28 2025 GMT
        Subject: CN=d5fedd69de6dd8d8e1e54cf7f31e26b887920a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:b4:e1:44:e5:93:a3:5e:10:6f:72:e2:c2:
                    16:7a:0b:cf:a6:1d:0f:34:17:89:a8:66:9a:e7:38:
                    ca:dc:43:af:7f:62:79:89:3c:f6:8c:dd:78:b1:0b:
                    aa:04:2d:96:27:5c:c8:ad:26:61:05:4c:b1:d0:6d:
                    74:e4:58:52:1f:9b:b1:3a:6b:33:b7:44:0e:78:99:
                    bc:b7:0a:23:cf:27:dd:58:49:f4:aa:4a:45:b8:fe:
                    e2:bb:cd:7a:eb:ff:c3:de:c6:6a:01:c5:f5:42:42:
                    f7:16:02:68:6a:c5:a5:71:c1:cd:7a:51:77:ee:2f:
                    eb:98:38:65:b2:88:2d:b0:90:c4:12:60:81:d7:82:
                    6f:24:07:9f:c5:69:8f:10:cf:e3:ef:cc:da:e7:16:
                    c9:dd:bb:77:ee:9d:6c:b7:5f:6a:41:16:87:4b:08:
                    2a:ff:21:d5:5a:14:de:8a:81:46:ef:86:9d:1d:88:
                    87:76:d9:d8:8c:a5:10:98:47:9b:63:f0:e9:ef:42:
                    17:21:ff:10:ef:d6:6f:24:6a:9c:86:ec:ab:a6:b7:
                    b8:f4:82:91:ae:eb:01:02:ba:2b:cb:82:71:a4:dc:
                    b8:ba:f0:0c:c5:f1:3d:55:ae:22:f7:d1:a0:92:6f:
                    ad:c8:31:5a:56:75:55:be:c8:6c:03:9f:55:06:a8:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FE:DD:69:DE:6D:D8:D8:E1:E5:4C:F7:F3:1E:26:B8:87:92:0A:9B
            X509v3 Authority Key Identifier:
                keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:97:48:30:c4:5f:2a:b9:81:5c:96:6f:96:95:e2:90:0a:64:
         65:04:ad:4a:2e:c4:15:78:ca:89:ad:cc:86:30:1d:02:3f:19:
         31:94:03:02:ba:b0:a9:30:91:d9:82:ba:2f:6f:2f:e7:ce:ec:
         61:d4:7f:a9:21:61:ee:ab:42:e2:2d:c0:46:e8:c8:02:af:40:
         62:b1:d3:0c:b5:7d:29:59:6c:2f:78:e8:50:52:98:4e:6a:96:
         24:29:54:09:44:e8:3f:70:9a:72:50:50:4d:f1:33:de:5f:1b:
         0d:a5:a5:1f:3b:8c:6a:74:a6:9a:a1:a8:af:20:d2:cb:30:0c:
         c8:9f:98:bf:82:96:1a:bb:50:d4:6a:fc:a4:96:f8:76:12:ff:
         92:78:4f:2f:e7:5e:1c:b9:8f:84:50:d7:f4:27:8e:c7:b8:da:
         4f:6e:70:69:5f:9c:c5:e1:55:54:46:5d:3e:0a:dd:3f:6c:1d:
         78:a5:b9:2b:4c:90:16:f5:31:f8:51:03:a8:44:af:42:3f:ed:
         f9:a7:82:52:c9:35:66:c1:aa:3a:06:83:74:9b:9b:1f:2e:86:
         5e:6d:32:e6:59:db:5d:c4:66:5a:d8:db:32:18:ce:64:c5:9e:
         4b:f8:6c:07:6b:11:29:c2:85:76:c5:23:94:5f:fb:50:19:e1:
         de:95:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:22:29 2025 by rpki-client