Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
File:                     1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft (raw, json)
Hash identifier:          dnmBUmHJH7QNalxIHVkxFPwOZPLlO+3qYA01r+fJ1Yw=
Subject key identifier:   CB:A4:63:6F:8C:24:D3:4D:B9:FB:23:22:A9:F7:89:1B:6C:94:50:FB
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Certificate issuer:       /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial:       019769CF31553A8CAEBAB0EE3E37BE69F2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
Manifest number:          1592
Signing time:             Fri 13 Jun 2025 15:01:15 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:15 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:15 +0000
Files and hashes:         1: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl (hash: YigJlJBPd1zWJofCkhKJxjF5LXcVNYavkCeAOMXG9EI=)
                          2: zZd3gJy36oVWVgmrpGXSBEMHa_E.roa (hash: pKDeM3EslRORlEnCyv6iQ4XZ7Q0avsrweW8tC90yBl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 15:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:31:55:3a:8c:ae:ba:b0:ee:3e:37:be:69:f2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
        Validity
            Not Before: Jun 13 15:01:15 2025 GMT
            Not After : Jun 14 15:01:15 2025 GMT
        Subject: CN=cba4636f8c24d34db9fb2322a9f7891b6c9450fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:34:44:85:65:c9:c4:f5:e8:2b:f6:6a:ce:b6:
                    bd:1d:3a:59:49:5c:a2:94:d7:42:a4:35:c3:3c:9d:
                    99:78:25:5e:32:58:84:5b:61:b3:fe:a3:00:eb:14:
                    5f:7b:3a:9a:de:59:6f:46:af:f3:07:2d:6a:a4:aa:
                    35:2e:39:59:6e:28:36:26:e4:2e:af:36:49:88:0a:
                    69:49:d8:24:51:e8:9f:8b:2f:ae:de:fc:cf:c9:6a:
                    0b:6e:ee:2a:f5:6e:9d:a8:a2:75:16:47:70:27:5d:
                    8b:92:63:a5:e5:28:b6:72:2e:a3:9b:11:d6:e7:a0:
                    54:9e:15:d6:94:e3:90:e4:15:f6:94:c5:b6:e1:c1:
                    e8:e4:12:e8:83:84:d6:48:5c:62:a5:dd:89:74:06:
                    f2:05:5d:eb:f9:b0:bc:f0:77:3b:a4:84:5f:7b:79:
                    83:a4:dc:2f:54:55:6b:29:fc:df:2d:4b:c4:7a:8f:
                    3a:75:ed:f4:49:57:d8:9d:ac:05:70:c4:68:9f:a0:
                    1e:7d:ff:16:b0:87:e2:42:f5:23:d5:3c:00:e3:4d:
                    6d:7c:5c:19:3c:61:02:05:e2:ef:2a:5e:ab:8c:bf:
                    a5:bf:42:0c:42:56:48:dc:44:fa:f3:f8:e1:03:92:
                    1d:9f:41:80:b7:1b:96:e2:8a:89:52:5b:71:39:34:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:63:6F:8C:24:D3:4D:B9:FB:23:22:A9:F7:89:1B:6C:94:50:FB
            X509v3 Authority Key Identifier:
                keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:21:58:0a:b2:52:da:25:15:f8:05:78:ab:bc:1e:04:31:37:
         95:ab:05:46:c9:b8:4e:94:4b:e4:76:e7:64:ef:9c:eb:3f:53:
         69:1d:1a:06:a4:21:3f:ef:b9:2f:20:97:40:64:b9:9e:9c:75:
         34:33:55:74:04:f5:2f:a9:3f:53:bf:cf:9c:cb:16:54:61:a2:
         3a:1b:79:b0:d7:5e:dd:b3:8b:a4:e9:9c:c9:0c:49:47:2b:df:
         80:95:db:37:3f:e2:2c:63:0e:97:0e:e5:38:b3:30:a0:24:e7:
         80:fc:de:67:c0:93:37:17:88:24:7e:d1:b9:59:53:3b:13:ea:
         4e:2b:54:e4:88:6a:9b:1a:60:b7:df:38:db:4d:2c:11:c2:2f:
         89:66:cb:3f:f4:38:a7:33:a3:ba:1c:e0:d8:85:a2:6e:dd:ab:
         e3:e7:f9:bf:29:76:d0:9b:9f:70:d6:9b:ef:b2:05:59:b9:0d:
         5f:26:8b:1a:81:62:dd:9a:d5:73:45:17:b3:ad:91:79:9b:18:
         aa:8f:c0:0e:50:03:43:70:66:e1:26:ce:40:6b:7a:df:30:82:
         d4:fe:72:91:7e:58:77:0e:2c:72:b7:c4:f4:1e:0f:7a:c1:01:
         ad:0e:98:19:23:4f:b0:86:05:2a:4f:7f:67:59:1a:25:85:1e:
         e3:31:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:32:50 2025 by rpki-client