Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File:                     MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier:          WqTdisgqv3hnMp4JHsstnbBj4hr+9m7d7nQFc7gixWk=
Subject key identifier:   19:77:C1:B2:5A:F8:F5:A6:A3:90:6F:F5:FC:A8:03:F9:95:C0:89:9B
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       01975D5CCCBF63D94E3F6A52C163A54E8198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number:          158F
Signing time:             Wed 11 Jun 2025 05:00:52 +0000
Manifest this update:     Wed 11 Jun 2025 05:00:52 +0000
Manifest next update:     Thu 12 Jun 2025 05:00:52 +0000
Files and hashes:         1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=)
                          2: 4XJYPiN1fgyY_K6wVqkzO9GGpIo.roa (hash: HslWaDijgsXRLbUJY37P5SIKUX/YCI1vBK/fp1leFRU=)
                          3: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=)
                          4: ATev8_uhunQc5j7herGHoXGBx0s.roa (hash: raqWEdHQFWUAKbr4xna0wvj80ivdH8FgqZZk8a2xIoc=)
                          5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: hswG8224kRsouwW7fcBY8U66l4571zkttgx6ottLtNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:5c:cc:bf:63:d9:4e:3f:6a:52:c1:63:a5:4e:81:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: Jun 11 05:00:52 2025 GMT
            Not After : Jun 12 05:00:52 2025 GMT
        Subject: CN=1977c1b25af8f5a6a3906ff5fca803f995c0899b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7f:0c:5a:61:27:70:c3:25:1c:da:4c:d4:7e:
                    12:ad:18:df:ed:40:06:de:93:8f:f9:00:02:e1:c7:
                    ed:56:04:ea:7a:70:1e:5c:b0:6a:f7:c6:fa:7b:1c:
                    b5:1f:56:3f:c1:e9:a5:95:42:06:b3:7e:09:68:c4:
                    8f:08:3a:27:eb:9e:17:cb:f4:e4:02:d2:6b:41:1b:
                    96:80:bf:e2:71:86:80:b2:00:7a:8e:bf:d5:90:d3:
                    59:c4:6a:cf:50:41:88:c6:42:9f:3d:72:cb:67:43:
                    0f:4c:94:ac:c8:b9:a6:30:de:c2:ac:5f:8a:92:be:
                    d5:f1:37:a0:2f:82:90:5c:a1:c1:94:ec:ed:ae:fd:
                    67:b2:9d:dc:01:a8:77:ff:ab:74:af:76:24:ab:35:
                    ee:2b:81:83:37:04:cb:aa:11:fb:00:60:fb:c2:70:
                    ed:13:0f:3b:00:48:3d:32:2b:30:4b:cb:01:37:69:
                    d1:dc:34:8e:c6:74:cb:50:f6:9f:42:d6:a9:49:e5:
                    e9:98:47:c5:97:61:94:5d:01:b0:45:4f:b1:1e:8f:
                    e7:fb:b1:64:9d:c7:06:ed:31:38:27:41:57:21:9d:
                    5c:b5:5e:60:a9:38:11:87:76:34:a4:8d:23:fc:22:
                    ec:1c:af:ff:0b:97:70:e6:1c:6c:94:65:a8:46:35:
                    79:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:77:C1:B2:5A:F8:F5:A6:A3:90:6F:F5:FC:A8:03:F9:95:C0:89:9B
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1c:5c:56:13:e5:41:05:24:de:63:04:cf:81:b0:f6:ba:c1:
         3f:c7:dd:03:15:14:fd:5a:04:f0:6c:b6:d1:72:75:fd:e3:ca:
         b8:b6:60:1e:30:4f:78:6f:09:fa:ff:94:1f:d2:4e:ba:88:0a:
         63:2a:a9:72:88:e2:79:c3:99:6b:fb:b0:ef:01:ae:e3:fa:6c:
         fb:e2:5c:31:99:1e:1d:b8:35:3f:3d:3c:4b:71:08:04:2b:10:
         c9:4d:af:8e:55:b9:72:b3:6a:53:7d:4f:ae:8e:26:10:b6:85:
         d4:8f:88:3b:2a:04:c5:aa:a5:bf:b5:ba:8d:44:ef:29:f2:59:
         5e:89:83:d0:83:46:3e:80:d7:de:e1:22:ba:4a:26:a9:98:e0:
         3d:89:b4:5b:eb:c6:ea:a2:75:59:01:b8:be:cb:c9:e4:10:53:
         a3:4a:38:8b:15:1d:2d:57:3d:48:df:64:78:e8:6c:96:cc:86:
         34:1a:a2:8e:4d:de:cc:c6:26:13:52:ca:94:56:f6:4b:d1:fa:
         f0:c0:7b:c4:7f:25:d4:ea:cd:d5:57:85:c7:2d:ca:88:95:12:
         f6:d2:e2:0d:f9:bf:9b:84:c1:9d:ef:90:a9:84:50:bc:62:67:
         91:12:fc:df:82:d8:0f:f5:00:24:06:46:de:c9:ef:a3:e6:9b:
         d3:81:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:22:50 2025 by rpki-client