Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File:                     1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier:          Mu73vterSVIgsVm1PapI1G3kyUHmVZHTqY6rcoL6a4w=
Subject key identifier:   7D:52:5E:25:F3:63:D3:2F:87:40:40:71:52:6E:2C:1D:56:DA:1F:28
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer:       /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial:       01974E2064D647FAD9C78B2EDF0056F0B460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number:          059A
Signing time:             Sun 08 Jun 2025 06:00:35 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:35 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:35 +0000
Files and hashes:         1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: TGPP2w+gfHGlnn/NyjCySD2bxJLGT6e9DrhzklxlwwQ=)
                          2: 1egEAWTQi1OcNU0W_rjr_CRLdbs.roa (hash: LHe616pBcv+bCNyg1cs6z4IxwstMXXlrnpuBdg2aZbs=)
                          3: 3ojh0vwmWGR8R130UvEk1Ukeno0.roa (hash: /WfyicFmwcjSGtw05lqyqsVoIK9F8QUQc2+NhhBmMwI=)
                          4: dwkbDumHfM-fJPhQnf3bRCy2PjY.roa (hash: aIk07HBkaBzs1F02NTAQLrtiIZZaDl8SPQXuogtqsw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:64:d6:47:fa:d9:c7:8b:2e:df:00:56:f0:b4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
        Validity
            Not Before: Jun  8 06:00:35 2025 GMT
            Not After : Jun  9 06:00:35 2025 GMT
        Subject: CN=7d525e25f363d32f87404071526e2c1d56da1f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:5f:99:e3:72:a6:a9:93:5b:c6:d2:c5:3f:
                    13:77:b7:f8:1f:97:4e:cf:83:df:fe:46:38:d1:d5:
                    ce:02:2d:61:a8:d6:57:cd:95:61:ad:46:de:fd:1c:
                    49:06:3e:ad:c1:00:94:55:36:c6:95:04:08:05:ab:
                    a0:85:36:88:b1:17:ea:a9:44:e2:58:02:80:c8:53:
                    cb:b8:47:6d:9b:6e:fe:af:96:c7:41:3d:c4:47:09:
                    2e:e7:c1:b8:8b:cb:2e:bf:33:57:f7:4b:92:22:7f:
                    5b:de:da:9e:e0:90:02:39:9f:d7:85:6e:5b:b6:ee:
                    71:a9:96:01:f6:2c:ef:99:be:0f:f5:1c:fa:ae:a3:
                    de:3a:26:8f:8d:e5:63:62:47:39:19:5e:04:27:be:
                    f1:dd:85:e8:ed:f5:4d:f4:20:78:36:f6:5b:c4:57:
                    b2:64:55:7f:7a:fd:b6:c8:dc:09:69:2e:99:bb:d0:
                    5a:33:85:2d:63:78:93:36:36:11:c1:7c:22:77:01:
                    07:5f:1c:cc:cd:8d:11:34:fa:20:e8:c1:ed:07:1a:
                    a4:a3:44:1a:74:c5:81:41:3d:17:46:29:20:4d:92:
                    fb:5b:cf:44:2f:84:a0:2c:d4:f5:e2:3c:d7:4b:d9:
                    e9:f2:e7:ba:a9:36:8e:8d:85:84:8e:1d:06:6b:03:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:52:5E:25:F3:63:D3:2F:87:40:40:71:52:6E:2C:1D:56:DA:1F:28
            X509v3 Authority Key Identifier:
                keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:52:5d:c6:6f:e5:d5:97:0d:f6:a0:d0:43:b4:bb:4f:0e:
         97:3c:3b:3c:e7:8f:f7:b1:89:8c:49:7d:d3:89:18:ab:41:39:
         2a:e9:4e:b2:2f:31:61:31:4d:5f:ba:c3:39:13:bf:13:15:76:
         30:fb:6e:1b:14:ce:c2:02:63:2a:88:d2:d6:81:82:04:78:0f:
         57:88:f7:93:84:a2:9f:cf:6c:ae:72:34:a0:aa:79:81:1a:4d:
         f0:e7:f8:9c:78:3f:f5:86:ef:4c:a3:96:69:f9:41:73:b0:09:
         b0:85:e8:5b:b5:1c:77:0e:7e:09:2b:12:32:62:bb:00:11:f8:
         97:1d:52:0b:a2:72:b4:6e:1c:7a:1e:0c:5a:a8:be:ec:c7:3c:
         0c:ee:c7:ac:cb:04:34:02:3b:53:1d:5b:38:24:2f:ce:e1:b5:
         e2:d0:a0:7e:55:0d:84:03:13:87:69:62:d3:51:39:14:d4:c9:
         b3:ba:13:4b:56:d2:a5:23:0b:98:44:c6:6d:6f:d0:d4:b4:e0:
         df:8a:9b:06:7a:2a:33:55:51:ed:6f:b3:f1:e4:07:ea:b3:17:
         2d:d5:bc:f7:66:ff:29:98:02:13:5c:51:af:17:e9:42:95:69:
         bf:71:ba:ec:f9:51:90:8c:08:8d:9b:1e:2a:ed:fa:bc:54:7d:
         07:cf:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:06:35 2025 by rpki-client