Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File:                     LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier:          WB40Hpkwr1EE1uX6UVfYAFl15RP3KUbyK/qYFI8axEg=
Subject key identifier:   79:41:D3:A4:0A:FB:A2:D8:B2:67:71:E6:D0:5E:23:D4:7D:5A:D1:21
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer:       /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial:       019739504876DD1BFFFF08F42FB538B604BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number:          1577
Signing time:             Wed 04 Jun 2025 05:00:52 +0000
Manifest this update:     Wed 04 Jun 2025 05:00:52 +0000
Manifest next update:     Thu 05 Jun 2025 05:00:52 +0000
Files and hashes:         1: 2pOIOt6X219VN3XtCdkvfoMV1HM.roa (hash: KzERp6VpDMwzGAgg9zdxnmFvkE4p1OFFxh7fS85flGo=)
                          2: 9XHx-FMLe5KFZj_JCaCK7as9iPY.roa (hash: sCVbuVUuH2ERBnxlvsUX4HPEyoA2qfu7FIegGKtn/gw=)
                          3: GGgXcPcm_VptZUKYb8GMmNRReBo.roa (hash: j3A5aG9PwaRgDAI8o0WNyR1pWgweLYrS0ZRrTwX+vVc=)
                          4: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: mnwCm81Ao6+/yKMV0WfgitW+gFnmnCzHWfi+k8jU8pM=)
                          5: aH3szR6jhr3LKmXFz58P9TMNq1M.roa (hash: k2DoDeJi//lnLAIw8oEfwg7P4tlKFybQoCOgJClGVQo=)
                          6: cg9vAN0so6RVwR7-dl1qakm7GSg.roa (hash: LWonZXTxxx8N9GGW8RVI8f+urakLOSBngPnNd8+m61s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:50:48:76:dd:1b:ff:ff:08:f4:2f:b5:38:b6:04:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
        Validity
            Not Before: Jun  4 05:00:52 2025 GMT
            Not After : Jun  5 05:00:52 2025 GMT
        Subject: CN=7941d3a40afba2d8b26771e6d05e23d47d5ad121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:e5:7f:d6:db:df:cb:25:37:09:e7:11:41:
                    6b:45:cc:68:65:44:c3:5f:ae:da:2b:0d:45:2a:b6:
                    db:86:87:94:11:6c:cd:73:6d:99:a2:61:ab:62:17:
                    af:93:6c:0c:90:a7:3b:22:56:27:31:bf:eb:96:85:
                    7d:09:e9:f1:ca:33:0c:d9:64:c2:45:ed:42:b7:6b:
                    04:0d:27:a7:ee:28:19:16:af:37:33:b2:41:4b:79:
                    9b:9f:4d:e8:6c:5c:e5:95:13:a7:b3:c8:95:8e:0b:
                    59:c4:93:f8:45:0a:24:22:6c:93:3c:0c:4c:cb:cf:
                    75:e6:f3:1c:8c:9d:c3:cc:6a:cb:2a:b2:4d:c4:4b:
                    da:0c:20:22:3d:25:be:60:bd:38:f3:d1:bd:78:40:
                    34:72:3f:2a:41:d0:28:c0:c5:3e:97:27:23:74:34:
                    5d:18:53:94:e6:c2:39:74:90:94:c2:3b:d7:c1:f0:
                    09:0c:d2:b1:1e:ea:d1:7a:57:ac:80:f5:04:75:2e:
                    0c:d9:34:ac:47:1d:d8:44:34:9e:d8:91:65:fc:63:
                    8e:4b:65:a8:ef:22:56:30:cd:a1:6e:5f:d7:73:92:
                    e8:9d:a3:ac:0e:19:de:15:78:c4:2d:b9:29:e8:c0:
                    06:9e:0d:c3:3a:ba:8a:ee:19:4d:81:60:9b:98:79:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:D3:A4:0A:FB:A2:D8:B2:67:71:E6:D0:5E:23:D4:7D:5A:D1:21
            X509v3 Authority Key Identifier:
                keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f9:6d:01:c2:b7:d2:2e:7f:98:2f:fe:e1:03:0b:88:26:ce:
         22:ae:44:80:06:ec:a5:e5:b7:5d:0e:a9:99:75:e8:e7:85:48:
         3d:85:c9:a6:01:d7:d5:27:48:67:24:b6:f3:2b:48:c0:43:c9:
         54:6e:0c:b8:61:d6:ea:d1:bb:95:be:0f:5a:87:58:5a:c4:9e:
         e0:1a:e2:1c:53:9d:86:8e:b8:7b:b3:8b:89:f7:65:8f:ef:cf:
         8e:48:01:a2:0f:fd:9f:ae:1d:8d:75:52:38:ea:95:c0:17:15:
         9b:63:10:79:5e:a9:9e:5d:1e:92:49:c6:4b:d4:9a:fa:42:bd:
         35:7a:3d:7b:22:38:b0:df:d0:e1:c6:88:dd:7a:cd:67:b1:9d:
         82:0b:26:39:8b:27:eb:97:e9:a3:4b:4a:ab:c7:7a:5b:25:b7:
         91:99:8b:92:08:c9:6b:4a:1c:e9:2e:9e:96:cb:9f:b0:9f:42:
         4e:e2:cc:47:7f:47:d7:c9:e9:67:07:8e:02:51:e2:20:0e:40:
         6c:05:1e:a0:29:98:0c:1d:f6:78:37:c7:6f:1f:8c:39:ab:d4:
         db:87:c5:b3:0f:f8:96:ec:ee:c0:47:cf:69:1e:e5:85:71:dc:
         64:5b:4e:54:2b:ac:f0:41:3b:49:6a:1d:6e:5a:3d:dd:95:0e:
         ca:20:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:43:25 2025 by rpki-client