Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
File:                     rvHu-qdX046xBPpMuk2WK3LlK1I.mft (raw, json)
Hash identifier:          eFEhnQ0DoqtqqFxmp1k8sFTwY8GCaW2TBa3SVWcPMz4=
Subject key identifier:   79:C8:B7:F3:05:63:A3:A7:9D:29:DE:B0:D9:D9:03:0E:E2:B6:B8:C8
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Certificate issuer:       /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial:       01974A7BA06F6D2B806D43235B0273D6BE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
Manifest number:          1583
Signing time:             Sat 07 Jun 2025 13:01:45 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:45 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:45 +0000
Files and hashes:         1: jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa (hash: DLSZmdArA6I562nrgAPaSvfYMqezrmvR6p+K4KjZ8d8=)
                          2: rvHu-qdX046xBPpMuk2WK3LlK1I.crl (hash: FOAY8GcBhivi2h6isHhOVsLU+6sJhl2grfOCZD7t4F4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:a0:6f:6d:2b:80:6d:43:23:5b:02:73:d6:be:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
        Validity
            Not Before: Jun  7 13:01:45 2025 GMT
            Not After : Jun  8 13:01:45 2025 GMT
        Subject: CN=79c8b7f30563a3a79d29deb0d9d9030ee2b6b8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:86:a4:02:a4:48:bc:f6:e5:6d:12:3a:54:
                    51:6f:25:89:84:d0:e2:5d:f7:26:12:ed:15:a6:40:
                    f1:03:12:f0:68:ec:fd:06:8f:7f:86:ee:01:e3:f8:
                    e5:71:7e:9b:91:f8:b6:60:8f:f8:bf:34:76:79:79:
                    2c:4b:17:a6:e8:1e:e3:54:cd:e0:3e:88:50:99:ed:
                    cb:3c:e1:f3:31:0e:04:d7:c3:02:be:27:9c:58:e3:
                    4a:cd:56:a0:5a:c1:dd:cb:10:d4:c7:d7:90:8c:ab:
                    8c:05:5e:0d:25:0a:d4:54:be:d4:74:bc:d1:73:c6:
                    01:10:7b:a8:55:b6:60:98:44:89:d1:23:d4:b5:65:
                    70:13:68:ce:e4:43:a2:04:87:59:0c:4a:1f:61:38:
                    ff:ad:f3:cf:c9:07:12:d9:cc:13:74:e5:43:0c:7b:
                    58:07:67:98:7c:bf:11:e5:bb:a8:6f:29:16:15:d0:
                    75:08:4b:3c:f8:4a:ea:b1:d4:fc:7a:0c:88:23:cb:
                    84:bc:a6:d7:0f:5a:4d:d7:3d:84:30:af:b2:85:90:
                    e3:5f:04:ef:19:d6:dc:b6:52:8f:ec:72:13:04:29:
                    a9:aa:bd:1a:83:0f:f8:ea:2e:40:2e:8e:ce:26:f1:
                    07:9e:6a:b3:a9:43:c2:ae:61:bd:b0:1d:f9:14:15:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C8:B7:F3:05:63:A3:A7:9D:29:DE:B0:D9:D9:03:0E:E2:B6:B8:C8
            X509v3 Authority Key Identifier:
                keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:da:53:d6:63:2b:01:2b:e6:df:7a:9d:10:a9:26:99:d2:54:
         fd:bc:b7:58:92:f4:83:1e:bf:01:0f:da:81:6f:dd:d3:0b:7a:
         f3:42:05:52:df:91:8d:92:2c:62:bd:0c:7c:aa:01:57:c5:dd:
         42:ca:d5:6f:04:d3:54:b1:09:26:e0:d6:50:f6:12:cf:fa:48:
         13:fe:97:3b:9d:57:26:ca:66:90:ed:58:0c:08:4d:39:7a:97:
         2e:c8:4b:18:a5:ad:b9:d8:75:e0:d0:c5:96:74:72:ec:eb:67:
         75:4a:fc:11:c4:0e:a7:22:63:79:62:a9:fe:3e:2f:71:3b:b0:
         5a:67:5f:23:8a:b6:55:0e:2b:1c:93:58:8b:af:b7:ea:53:86:
         d7:21:07:50:e1:d7:26:1d:27:5e:5c:92:9e:02:78:a5:75:01:
         63:30:20:15:8b:f0:4c:ed:3c:dc:4c:7c:91:16:56:94:9c:8d:
         53:1d:7f:b2:cb:b1:52:fd:22:ec:b3:2e:cf:51:48:3f:ab:5d:
         f1:34:e2:34:cf:c6:03:81:6f:e3:4a:1e:f3:71:a8:78:f0:c9:
         8e:be:17:a2:f5:6d:55:0e:8f:b9:04:14:b4:b8:7d:0b:74:27:
         34:6b:64:f7:ef:10:9d:1e:86:dc:fe:76:13:ba:c7:d8:28:bc:
         9f:c8:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:14 2025 by rpki-client