Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
File:                     iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json)
Hash identifier:          pPGZFodDXhLGbPfJI/Eh90/UjPxdEmKHKwJocuBmpcw=
Subject key identifier:   42:62:A3:BD:9A:DB:A8:48:6E:13:93:3D:B3:53:B4:A2:35:C0:3B:72
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Certificate issuer:       /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial:       019759B6FB62134AD0C67A66E0C16666F05D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
Manifest number:          1589
Signing time:             Tue 10 Jun 2025 12:00:53 +0000
Manifest this update:     Tue 10 Jun 2025 12:00:53 +0000
Manifest next update:     Wed 11 Jun 2025 12:00:53 +0000
Files and hashes:         1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=)
                          2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=)
                          3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=)
                          4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=)
                          5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=)
                          6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=)
                          7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=)
                          8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=)
                          9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: PSYEC9P0RQS/4RZh1K8pvhf8dZ7BmWWs3vxFMUczOtI=)
                          10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=)
                          11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:b6:fb:62:13:4a:d0:c6:7a:66:e0:c1:66:66:f0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
        Validity
            Not Before: Jun 10 12:00:53 2025 GMT
            Not After : Jun 11 12:00:53 2025 GMT
        Subject: CN=4262a3bd9adba8486e13933db353b4a235c03b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:d6:41:e7:40:22:f5:71:c7:3d:6a:b7:a5:
                    b5:5e:c8:42:a5:b0:fc:42:8e:63:2b:32:6e:48:f0:
                    41:ec:cf:94:2d:47:1a:69:73:53:1f:eb:bf:0d:1c:
                    8c:40:55:13:5e:d1:2f:af:72:bf:69:5f:ac:7e:c8:
                    22:6e:20:63:9f:f9:46:3a:c7:60:92:9f:4c:f3:2a:
                    4d:0e:12:74:a8:bb:ee:39:5f:b7:7a:df:08:a2:c9:
                    8a:d5:3b:df:70:d6:b6:6b:8f:8e:da:4c:41:9d:62:
                    84:96:59:8f:d2:7e:9b:e1:11:3a:0c:85:ce:3f:5b:
                    b9:3a:7f:cf:9a:d0:50:c7:1c:34:3f:7c:73:f9:6a:
                    b8:14:87:d2:e2:fa:89:2e:4f:fd:3a:ce:28:85:3d:
                    c5:88:27:c3:50:8e:a6:a0:32:36:bb:ac:f5:fd:be:
                    3c:6c:a8:d7:2b:98:02:a0:43:22:f4:e5:2a:20:7b:
                    6d:50:85:03:4a:85:b2:15:ae:3a:81:63:cc:48:31:
                    d3:60:a5:da:5a:4f:80:2e:30:70:a0:7c:30:ea:07:
                    d6:b0:52:45:37:76:fa:86:b6:c5:d4:fa:a2:4a:36:
                    80:0e:12:b3:c1:9c:55:3c:4b:f2:4c:e9:42:b4:f6:
                    13:bf:94:fa:5f:c2:2e:7a:0f:7a:6a:03:02:29:cd:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:62:A3:BD:9A:DB:A8:48:6E:13:93:3D:B3:53:B4:A2:35:C0:3B:72
            X509v3 Authority Key Identifier:
                keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:10:c1:2a:29:85:f9:88:51:1a:27:7b:63:fe:80:05:8a:57:
         71:11:c7:ef:62:6c:a2:7a:29:0e:14:11:5e:2e:08:eb:e6:b6:
         6f:eb:8d:d5:f7:81:e1:eb:16:c1:f1:de:bc:e0:3f:15:8a:b4:
         99:ae:e0:bf:3f:f5:6f:99:cd:97:66:2a:ba:56:38:9c:1a:a1:
         d2:09:16:79:65:4d:4d:ff:6f:46:5a:e5:b5:b0:03:1e:f6:88:
         f8:c2:44:4e:c1:0d:a2:a2:bb:4a:07:27:2a:5c:61:a3:1b:ba:
         cb:ed:b2:ab:50:1e:1c:e4:ee:f9:45:04:b5:b7:ad:e6:2c:50:
         13:bd:95:bc:0c:8e:b3:89:0e:10:33:d8:66:b1:6e:40:73:7c:
         b2:5c:f0:67:6c:42:45:17:b4:b8:53:0f:19:e5:cd:49:ef:fa:
         f4:4c:70:a4:9c:1b:c8:82:83:b9:52:7b:ef:2d:a1:71:8e:e2:
         a7:62:cf:31:83:f1:77:86:d9:97:9c:0a:a3:e9:38:26:5c:9c:
         61:17:81:5f:6d:4b:26:3f:f9:90:59:f1:bd:8d:98:30:2e:8c:
         2c:a0:53:d1:93:91:c0:00:5e:a6:c5:1c:e9:99:11:3d:05:7c:
         b2:72:be:86:b5:51:11:07:57:7c:3e:b3:f3:5c:50:ce:e4:a6:
         93:cd:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:53:50 2025 by rpki-client