Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File:                     _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier:          CQ1/0DcjX6V99Niis4e+dAqhIttSAv5Cd2HKzYABjgg=
Subject key identifier:   51:DD:44:33:43:D9:C5:97:3D:53:A7:D8:63:69:CB:C2:3A:3B:01:13
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer:       /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial:       01974DB28731C3B3A4314764416991D008C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number:          157D
Signing time:             Sun 08 Jun 2025 04:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:34 +0000
Files and hashes:         1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: j+cLTv0PYa8t6XIco/ZBf+bLNAO5zNQb8dH0s8hQLPM=)
                          2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:87:31:c3:b3:a4:31:47:64:41:69:91:d0:08:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
        Validity
            Not Before: Jun  8 04:00:34 2025 GMT
            Not After : Jun  9 04:00:34 2025 GMT
        Subject: CN=51dd443343d9c5973d53a7d86369cbc23a3b0113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7d:e1:89:b6:e8:83:68:67:78:a7:2e:31:98:
                    93:4a:1d:8c:44:8b:e2:5f:7d:55:7d:3a:1b:f8:ea:
                    59:82:ab:bb:82:f9:28:62:b9:55:82:7d:3f:85:23:
                    f7:59:74:b3:02:aa:a4:4c:09:98:5d:42:b8:7f:99:
                    6d:ee:d4:c1:3b:80:2d:f4:67:11:bc:7d:bf:ca:5b:
                    17:31:0c:05:f1:a5:ea:f6:85:ba:4f:fa:4b:b2:94:
                    6c:7f:73:65:b6:92:a1:54:b1:05:28:5d:18:3c:17:
                    28:2b:ed:49:de:ed:1c:64:3d:d4:63:a1:4a:76:a5:
                    91:62:ce:85:15:3d:ab:c2:bf:7d:70:d6:2c:95:67:
                    6d:cd:9b:e2:88:cd:12:75:41:06:58:bf:f4:c4:18:
                    c3:42:4e:2f:2c:58:e9:a1:04:9e:74:f2:d9:af:05:
                    8d:41:47:0d:2e:c7:c5:f7:fb:e1:b4:4b:42:a5:df:
                    08:f8:3b:8d:32:1e:a4:4e:52:c4:19:72:c4:65:13:
                    b2:b3:a7:20:c2:9c:0c:32:d3:3b:7a:b5:0d:7b:1a:
                    05:26:9a:1a:ba:99:47:48:ae:30:e9:77:a9:2b:5e:
                    f6:2b:16:df:eb:ad:aa:98:b3:61:61:7c:c7:87:3d:
                    f1:b7:8c:45:64:b1:d6:71:e5:89:a6:54:f1:c9:5e:
                    36:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DD:44:33:43:D9:C5:97:3D:53:A7:D8:63:69:CB:C2:3A:3B:01:13
            X509v3 Authority Key Identifier:
                keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a6:8b:23:39:a6:65:50:4f:dc:14:a4:09:17:04:96:3f:91:
         31:22:d9:84:b0:ed:a2:ce:03:47:4d:f4:d8:a4:a7:66:6a:6d:
         6c:89:3c:9c:90:71:e5:94:cd:c1:dc:61:cd:44:03:d4:25:33:
         af:cc:dd:75:a5:0f:ee:ef:cd:0d:b4:0a:6f:dc:cf:cf:56:7f:
         f6:c9:ad:bc:d9:f5:d5:08:04:9b:f5:55:18:af:02:3c:9b:6c:
         84:3d:ea:9a:59:28:2b:0a:10:7c:38:14:b0:e0:46:ab:36:00:
         e1:20:ee:0c:90:3c:a0:ff:33:32:f0:07:28:e9:8c:7b:4f:44:
         76:5a:dc:05:82:4e:73:0e:b4:d3:43:c2:e2:53:64:cf:63:7d:
         36:d6:30:f0:46:75:27:bd:cb:4b:c0:84:4e:0c:06:b8:6f:5a:
         58:de:ae:9d:12:f0:52:9c:19:9a:30:04:5e:e2:27:e0:c7:01:
         5c:1f:a1:42:97:81:e3:35:6f:31:73:1c:b6:35:30:73:64:ea:
         b9:ec:e7:d9:8b:f2:f4:d6:05:5f:51:83:e2:2b:ef:ff:7f:d5:
         cb:9b:20:b9:92:57:18:2e:2c:12:08:39:6d:8f:f7:94:75:30:
         a1:40:79:6c:66:4d:33:f8:53:d8:d5:1d:ab:27:7f:78:78:c9:
         ce:15:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:44:59 2025 by rpki-client