Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
File:                     gs1f087z4cqiC7ph-i1RtrlOtU0.mft (raw, json)
Hash identifier:          tx73tmk3BbYVFNeKwZSNfpIh+Cq/DRqmAvdqBtwY0is=
Subject key identifier:   FD:25:91:66:FF:C0:60:B3:8D:D5:35:A7:EA:58:7B:1D:70:49:C6:20
Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
Certificate issuer:       /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Certificate serial:       01963FFA57BED8391C2837C89EAC01205341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
Manifest number:          066F
Signing time:             Wed 16 Apr 2025 19:01:33 +0000
Manifest this update:     Wed 16 Apr 2025 19:01:33 +0000
Manifest next update:     Thu 17 Apr 2025 19:01:33 +0000
Files and hashes:         1: 6-Zj3bcyCjNacB1xPlmd-41FIz0.roa (hash: A56X5AQbB29BB1sjg1qgfONBr80piND7T2p/Wos86gU=)
                          2: gs1f087z4cqiC7ph-i1RtrlOtU0.crl (hash: fI3t3gQ9BiEWHppQMTZLOdjJR18zSz5B1Gouw0wR8AQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:fa:57:be:d8:39:1c:28:37:c8:9e:ac:01:20:53:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
        Validity
            Not Before: Apr 16 19:01:33 2025 GMT
            Not After : Apr 17 19:01:33 2025 GMT
        Subject: CN=fd259166ffc060b38dd535a7ea587b1d7049c620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ed:fb:80:ca:c3:62:74:46:9d:4e:47:17:19:
                    da:19:77:7d:53:74:a9:bf:57:95:33:3a:2d:c9:53:
                    41:91:89:09:3a:60:73:6e:c6:95:d9:8c:4e:59:b2:
                    23:55:8f:33:13:13:f8:61:b1:27:06:ed:75:4a:9c:
                    e0:85:ae:28:d7:1b:74:bb:05:5b:ef:62:96:80:9a:
                    85:ed:c2:3d:2b:c8:71:6d:67:1b:12:04:21:b3:6f:
                    cf:8d:08:40:e9:dc:af:0c:ea:db:81:14:99:cc:ed:
                    c4:12:8b:e0:47:f2:cc:4f:99:76:a9:8f:ae:56:ec:
                    a3:64:ca:77:89:69:b3:00:c3:c6:58:c3:d1:1b:c8:
                    45:30:16:2b:69:1c:02:3c:b1:2d:9c:b2:df:41:c7:
                    6e:cc:84:a8:b6:c6:8e:a2:6f:ae:ae:eb:83:2b:fd:
                    2d:67:32:fc:9a:31:a5:45:fe:b1:1c:c8:aa:b4:98:
                    b6:56:d8:2b:7a:de:30:91:6d:b5:d9:db:91:75:f3:
                    ba:56:e5:40:f6:c0:7c:c6:d2:d6:4b:79:f6:79:55:
                    fe:a1:45:68:c5:46:0e:7e:e6:f1:d4:97:94:a6:ef:
                    b9:3d:c1:42:fe:bc:84:6b:6b:0c:2b:5e:8a:cc:fb:
                    e2:c9:25:08:3d:be:df:38:8b:07:93:2c:5c:ae:77:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:25:91:66:FF:C0:60:B3:8D:D5:35:A7:EA:58:7B:1D:70:49:C6:20
            X509v3 Authority Key Identifier:
                keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:23:ae:42:bb:69:02:b3:63:5b:5b:4c:4d:f9:88:4a:2b:6a:
         2d:83:b2:10:e8:48:d0:ec:87:ad:e8:bd:09:96:1b:5e:a9:e6:
         00:91:17:86:4c:cd:db:4b:54:42:2d:6a:28:c1:22:85:4f:03:
         c6:4c:52:11:0c:03:73:a6:55:30:11:3e:bc:bd:34:28:d2:7f:
         3c:07:3f:44:de:4e:ab:37:f0:40:e4:39:7a:54:36:55:b5:7a:
         12:0d:a5:b6:ac:20:d4:83:28:88:45:c1:fd:66:74:ce:80:be:
         0e:be:7b:a2:7c:65:96:f6:88:42:80:14:6a:18:34:99:d9:29:
         c4:bc:d3:e9:65:3c:c2:c7:03:00:78:fc:89:22:59:39:2f:c8:
         39:f0:36:87:33:8a:c0:03:00:aa:96:f0:cf:9b:59:e1:11:c6:
         02:20:2f:5b:34:60:85:fb:9b:35:ad:3a:52:cc:fb:fd:00:bc:
         ff:cc:a0:d6:57:72:5e:a9:9e:1f:a6:12:05:c6:ec:92:fa:d6:
         a8:75:1a:08:11:49:87:58:0e:77:5a:e7:3e:29:82:c6:47:d4:
         4b:7b:c9:f8:29:81:9f:59:9f:8e:d7:ee:7a:51:fc:eb:3a:b1:
         a2:75:9f:95:f0:9a:24:9c:76:4a:74:3e:d2:c2:c8:1f:6b:80:
         8a:dd:5c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:07 2025 by rpki-client