Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File:                     MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier:          arGjDc0qC0hy61LxzeT6bUMB9xedJK36JZGaoN3ULRo=
Subject key identifier:   01:43:A2:E4:F8:92:85:13:53:62:AE:F8:41:06:24:D2:4E:B7:41:E3
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       019753B463BF80F062A27ACDC29A572BF8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number:          158A
Signing time:             Mon 09 Jun 2025 08:00:20 +0000
Manifest this update:     Mon 09 Jun 2025 08:00:20 +0000
Manifest next update:     Tue 10 Jun 2025 08:00:20 +0000
Files and hashes:         1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=)
                          2: 4XJYPiN1fgyY_K6wVqkzO9GGpIo.roa (hash: HslWaDijgsXRLbUJY37P5SIKUX/YCI1vBK/fp1leFRU=)
                          3: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=)
                          4: ATev8_uhunQc5j7herGHoXGBx0s.roa (hash: raqWEdHQFWUAKbr4xna0wvj80ivdH8FgqZZk8a2xIoc=)
                          5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: Z7uTXpjIGnZp8Oe1fcxD1GPEDZ9R+/2sEs4G6e7GpFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:b4:63:bf:80:f0:62:a2:7a:cd:c2:9a:57:2b:f8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: Jun  9 08:00:20 2025 GMT
            Not After : Jun 10 08:00:20 2025 GMT
        Subject: CN=0143a2e4f89285135362aef8410624d24eb741e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:69:84:4a:5c:77:ac:ac:6b:34:f5:30:35:95:
                    6f:6b:13:81:51:6f:ee:49:99:bc:95:81:02:d4:f6:
                    90:66:8e:6a:10:7d:aa:73:91:c5:dd:c0:bc:36:52:
                    df:ee:05:e8:7b:3d:4a:ab:13:a4:5f:36:dc:05:df:
                    54:52:b5:16:49:0d:31:0f:fd:57:6b:e8:3d:f4:d6:
                    3c:1a:51:92:42:1d:c6:4a:3d:0f:87:0d:22:e6:a6:
                    2e:7c:8e:4f:46:6e:69:bf:e7:9d:26:c0:94:b8:be:
                    60:dc:6f:4c:42:a7:3e:d5:a9:91:8e:6b:fc:b5:2a:
                    28:21:0f:9b:b8:b3:2c:8e:23:e1:93:64:b0:11:63:
                    85:65:b8:85:26:dd:47:b2:18:66:90:ac:75:3a:37:
                    95:d4:e2:fd:c6:56:7a:16:41:d4:ef:6a:87:ed:aa:
                    4f:4b:0c:c5:70:7e:ad:f0:24:52:ed:cb:fa:66:83:
                    f8:c0:f3:a3:ac:ff:fa:38:88:6f:bb:4e:5d:79:b7:
                    84:53:e2:82:ae:c5:96:8f:2c:a3:8b:37:fc:8f:26:
                    ea:a5:b3:8b:48:08:35:12:4f:0a:3e:ae:89:f7:ed:
                    60:91:cc:73:37:43:c1:c2:ac:3c:03:99:67:83:d0:
                    5f:de:8e:11:17:c9:f8:6d:0d:b8:a7:11:83:58:16:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:43:A2:E4:F8:92:85:13:53:62:AE:F8:41:06:24:D2:4E:B7:41:E3
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1c:59:0b:b8:32:f2:c6:1d:b0:a4:af:95:f8:77:ef:0b:b5:
         45:9c:25:8c:40:e0:1f:0e:ac:91:aa:cb:1d:bc:f2:6a:0f:ec:
         fe:4c:33:45:d2:9b:89:ac:1f:89:fe:07:39:96:73:ca:e7:bd:
         8c:eb:7a:76:09:30:46:97:0f:e1:c4:ee:14:29:c8:1a:4f:e9:
         7f:04:4c:e3:8f:b7:74:27:48:39:a5:6c:24:86:ec:e1:ef:56:
         46:df:47:69:ff:24:a4:65:6b:49:39:b5:7b:4a:ad:40:d6:a9:
         12:35:47:f5:9e:27:01:89:bb:a4:ee:1d:64:95:e0:0f:a4:6c:
         17:2d:1c:53:07:c4:6a:74:2e:5a:02:69:89:bf:3c:15:ed:25:
         e8:ae:28:fd:e7:7c:7c:60:fd:eb:7e:53:3f:0c:e8:37:c5:0e:
         d8:15:c8:96:18:5f:7b:be:81:8e:3c:c7:9b:d9:5f:6a:ec:8e:
         a3:ae:d2:9f:92:01:1b:19:5b:63:ac:6b:c2:c3:b9:b0:ef:fc:
         30:4e:7e:25:ef:f1:71:a0:e8:31:dd:91:40:47:1a:82:ae:b2:
         c7:02:ec:6b:6e:99:f3:d9:4a:db:1a:2e:b6:ac:86:dd:a3:57:
         c4:4e:b5:4d:79:ad:ca:0d:23:67:08:6a:66:9e:ff:ff:f3:ff:
         9e:46:82:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:13:54 2025 by rpki-client