Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File:                     Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier:          e0KZyzIzyxmYyGie1GfNvfjRbZwruDJadnR088JImzU=
Subject key identifier:   04:BF:BA:AD:1F:6D:F0:01:13:B0:A5:A5:3E:DD:47:41:52:5A:9A:27
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer:       /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial:       0197493107F809FDC061BA273C57F32716BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number:          1581
Signing time:             Sat 07 Jun 2025 07:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:39 +0000
Files and hashes:         1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: uVSzgGK/T+CFka7L1hgiKhBnLB4jA6fdewpYlH0Nv9g=)
                          2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:07:f8:09:fd:c0:61:ba:27:3c:57:f3:27:16:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
        Validity
            Not Before: Jun  7 07:00:39 2025 GMT
            Not After : Jun  8 07:00:39 2025 GMT
        Subject: CN=04bfbaad1f6df00113b0a5a53edd4741525a9a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:01:43:1c:d7:fe:3e:c5:59:d6:a3:ec:6f:6f:
                    a9:aa:ae:c0:f3:98:03:d2:7e:c1:6d:b2:0c:b1:f0:
                    8e:44:5d:16:b4:77:3f:08:41:e8:37:48:32:3d:88:
                    05:cc:c0:7c:3d:71:99:ba:9a:c7:c2:82:ec:5a:79:
                    20:2f:4a:a7:9c:48:66:82:d2:29:73:2c:a5:27:33:
                    7a:1a:89:c2:f3:00:cb:87:c2:eb:66:b2:8d:40:d1:
                    12:79:55:b8:ee:7a:14:90:a6:f8:34:b8:df:02:bd:
                    7e:47:69:7e:ff:8e:6d:a5:b5:19:de:d9:f9:e7:c6:
                    b2:5d:23:f9:21:20:30:a7:3e:d0:99:28:6b:33:95:
                    3e:aa:cf:52:cf:a4:8f:0e:bf:d3:7d:d5:d8:07:1f:
                    79:e0:35:ec:24:01:79:1b:63:c7:fb:fc:b7:de:43:
                    de:a7:3f:ef:fd:5a:42:37:ec:20:07:fa:41:a1:e1:
                    c1:e8:06:eb:8a:e1:b2:19:59:0e:85:49:3a:ce:c6:
                    88:fa:ee:33:da:06:4a:f5:18:73:ee:07:8a:68:91:
                    b6:66:59:52:68:76:72:d0:4e:bf:2d:d2:9f:c3:ca:
                    be:e3:b3:d7:e5:4e:61:9a:89:29:cd:4b:8c:b7:8c:
                    0c:44:c9:8a:da:75:08:19:97:0f:8e:47:ca:7e:17:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BF:BA:AD:1F:6D:F0:01:13:B0:A5:A5:3E:DD:47:41:52:5A:9A:27
            X509v3 Authority Key Identifier:
                keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:71:77:eb:f7:73:a9:92:06:59:3b:25:0a:2b:44:e9:50:0c:
         11:ea:c2:12:af:1f:fd:9c:7a:af:44:12:8e:06:ba:c4:ff:68:
         11:8d:a6:d3:59:5f:4b:bb:fd:97:46:3f:eb:7f:f7:f4:2d:c8:
         96:38:75:fa:a2:36:72:24:a6:99:7b:6d:ea:ec:a3:b3:90:f2:
         92:50:30:e9:38:94:a3:77:4e:d3:0a:1a:a9:b5:ab:d3:91:a7:
         5f:c5:bb:3b:4f:33:fa:a6:47:90:14:6a:87:9d:9e:88:d5:c1:
         e9:9c:3e:de:54:df:e7:1e:b9:98:c6:d5:e9:ec:ce:10:92:29:
         7f:37:4f:0d:35:0d:10:b3:bc:ad:f4:09:93:66:26:35:6b:39:
         02:d7:aa:71:0f:a5:14:b8:3d:a9:f6:be:eb:f8:aa:f8:74:d4:
         6f:14:bd:92:88:0b:07:fb:eb:17:e6:01:11:60:04:f6:4d:fa:
         c3:57:02:fd:4c:d7:96:64:c2:2c:19:9b:9c:b0:e4:c6:f9:88:
         97:61:d6:1c:48:29:6b:7d:5b:f0:0e:cb:f6:97:8e:11:be:91:
         56:7b:87:ac:1c:b6:da:82:e3:5a:36:1f:c9:90:e7:c2:31:a3:
         c9:0c:f3:22:6c:a6:ed:c8:02:cd:07:66:00:d7:00:0e:05:69:
         69:97:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:26:05 2025 by rpki-client