Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File:                     86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier:          XMi6sVa1FcyooXrJDd+HUtiuPD/LudiZ42N4SoLxKb4=
Subject key identifier:   9D:DC:CA:06:B2:6E:D6:73:D9:0C:5D:69:4E:4B:59:CE:92:23:7B:AA
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer:       /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial:       01975FB8F6D53542DBE9DD5B63AABD96CACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number:          1589
Signing time:             Wed 11 Jun 2025 16:00:46 +0000
Manifest this update:     Wed 11 Jun 2025 16:00:46 +0000
Manifest next update:     Thu 12 Jun 2025 16:00:46 +0000
Files and hashes:         1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: n2KUVd23ZZEDyl1ZhjK8DdFeWibw5j1LISzc4G60n9I=)
                          2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
                          3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:b8:f6:d5:35:42:db:e9:dd:5b:63:aa:bd:96:ca:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
        Validity
            Not Before: Jun 11 16:00:46 2025 GMT
            Not After : Jun 12 16:00:46 2025 GMT
        Subject: CN=9ddcca06b26ed673d90c5d694e4b59ce92237baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:87:77:f6:b8:ba:4c:95:eb:b1:3c:ba:b3:
                    ff:46:6c:d1:0e:ef:86:6d:fb:71:88:6f:8d:17:17:
                    30:40:38:0b:2f:69:d0:ab:c6:1a:9e:13:7f:76:c2:
                    c6:8c:7e:ba:3c:aa:9e:fb:3d:0f:42:66:36:48:d9:
                    c7:d4:e2:34:5d:dd:ca:b9:c6:aa:c0:7d:f3:5d:5b:
                    89:ec:22:52:a0:1a:c2:dc:9a:0e:0e:da:70:21:f2:
                    c5:8b:b6:3f:7e:17:bd:fe:b1:51:07:0a:9b:13:39:
                    e0:1c:2f:71:0a:1e:88:87:38:b9:07:d2:a3:06:c6:
                    30:16:a3:30:77:74:c7:f5:cb:cc:f4:58:e5:62:60:
                    13:12:aa:d6:c6:db:57:39:b6:a0:90:05:db:12:9c:
                    c1:47:4b:d2:78:1e:e9:cf:73:9e:25:21:e0:1c:fa:
                    55:bf:67:36:54:4c:1c:cf:da:c5:c4:73:7b:bc:1e:
                    15:aa:da:90:4f:89:17:11:e4:96:64:85:67:cd:c5:
                    2a:63:66:7d:97:69:17:39:30:ff:cb:25:6d:ec:fc:
                    ef:17:79:e9:1f:10:ab:9f:b8:9a:b7:31:4c:94:ae:
                    8a:aa:f8:80:98:de:6f:63:b1:94:50:42:16:08:d7:
                    77:a4:0d:50:62:c3:fd:a5:64:b6:29:84:01:92:11:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DC:CA:06:B2:6E:D6:73:D9:0C:5D:69:4E:4B:59:CE:92:23:7B:AA
            X509v3 Authority Key Identifier:
                keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b4:02:5d:2e:7c:62:c6:7f:ac:fb:4d:38:ea:cb:04:34:1f:
         b2:f9:58:ef:64:3b:21:dd:29:36:2f:f5:3e:1a:84:8c:3d:4c:
         1a:b0:0b:60:9e:24:75:fd:bd:77:d6:bf:a9:e2:52:8f:ac:7f:
         31:3e:bf:87:a4:08:b5:f0:99:68:f9:6d:37:74:97:4f:05:f3:
         dd:d2:43:5b:44:66:6c:59:a9:4d:e9:ff:fe:d1:1b:e4:b2:b3:
         c2:b5:30:24:71:3f:46:90:99:b0:2a:1c:71:e0:05:bc:ae:1b:
         13:ce:67:08:dc:b5:e1:ee:32:58:3e:12:f8:4d:a1:99:03:b1:
         53:56:cc:20:ed:6b:ee:49:a6:e1:9b:88:ed:31:94:8c:6c:c9:
         9f:cb:01:ea:36:8d:64:23:d6:64:5f:02:73:5a:a0:53:85:9c:
         da:36:cb:99:80:27:92:f5:34:8a:2b:97:ae:93:0a:01:2b:ae:
         0c:8e:9b:c9:b0:22:c0:54:00:92:67:21:47:69:86:42:5b:2f:
         fe:4b:d0:73:ad:78:0f:18:87:28:a9:e1:47:e1:e1:5f:92:c5:
         66:93:2f:33:12:f4:d8:ec:b0:b8:fb:2f:08:b5:3b:d7:33:6e:
         96:2f:81:e3:cf:1d:47:21:48:67:86:49:f1:49:f2:a6:8e:a5:
         b6:41:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:32:02 2025 by rpki-client