Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          g2p8ODOxWHuqArfVGtlL+1HiiqWD68aagdBt7kgXUBA=
Subject key identifier:   62:73:9A:80:CB:B1:D0:C7:70:86:7B:FC:E2:6F:57:F2:25:E2:B0:38
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       0197591264A33DDD5F94A6F82F0DA27F2FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          1583
Signing time:             Tue 10 Jun 2025 09:01:07 +0000
Manifest this update:     Tue 10 Jun 2025 09:01:07 +0000
Manifest next update:     Wed 11 Jun 2025 09:01:07 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: UsdM89BSIQJOeofPfEu9u668/PaYpZu2Ro+hn3NwG90=)
                          2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:12:64:a3:3d:dd:5f:94:a6:f8:2f:0d:a2:7f:2f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: Jun 10 09:01:07 2025 GMT
            Not After : Jun 11 09:01:07 2025 GMT
        Subject: CN=62739a80cbb1d0c770867bfce26f57f225e2b038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:f4:89:63:9e:f6:ab:72:ef:2b:f4:0d:3b:
                    9e:22:5f:9b:d2:b5:ab:8b:28:09:cd:2a:89:57:b6:
                    1e:8b:68:83:05:0f:1e:ce:0d:5c:a6:79:30:8b:10:
                    ae:a1:a1:10:9e:e7:73:0d:23:5e:d6:c0:f0:a4:d8:
                    73:21:30:1a:19:eb:73:fe:ee:a0:53:1d:bb:c0:a5:
                    74:6f:2a:6f:d5:2f:80:7a:be:a7:94:f7:5c:6a:33:
                    f7:78:8f:29:b5:d0:3c:9e:a4:62:8a:55:7a:78:0f:
                    2c:d2:33:e1:65:f9:24:ae:3d:cc:da:c4:61:2f:14:
                    04:2c:db:52:a6:6e:5c:49:54:30:2f:bc:bf:5f:58:
                    c1:eb:00:88:55:1b:64:81:85:e2:7b:2f:68:b4:d1:
                    2c:59:81:91:32:57:8c:50:ef:d7:91:6a:69:7f:0c:
                    f0:a0:45:72:ca:5b:fe:35:77:2f:a0:f8:8c:05:af:
                    9b:25:36:40:23:9d:7f:69:0b:9f:2d:7d:47:f2:a8:
                    17:bd:22:44:c8:89:d7:8a:b4:22:ec:5d:27:6d:0c:
                    f6:21:e4:92:d5:42:c9:7c:7a:98:a9:bd:06:4b:9a:
                    9d:04:87:93:ba:09:f5:43:38:39:21:d3:c9:ee:60:
                    1c:ff:61:f1:3d:e3:21:b3:30:58:75:f6:64:16:20:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:73:9A:80:CB:B1:D0:C7:70:86:7B:FC:E2:6F:57:F2:25:E2:B0:38
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:24:6e:1e:97:e6:57:c2:09:e3:e6:94:fd:f3:f4:5b:24:3a:
         95:53:6e:4e:f6:15:dc:8a:b9:9d:ac:e9:e8:5d:3f:cb:b5:6e:
         cb:1b:fc:eb:32:87:39:c4:67:6a:71:96:5a:c2:34:a8:6c:26:
         22:29:3c:82:ba:d7:f0:f4:b2:34:f8:9e:ee:3b:fa:02:8e:2f:
         7e:19:65:9c:c7:53:1c:71:6a:f9:db:37:7e:84:d5:73:8e:60:
         b1:2c:dc:fc:34:36:b4:83:ae:2f:fb:a9:5d:cf:7e:9a:55:02:
         0c:1b:3a:c4:82:c7:d9:45:8e:e2:a6:35:ea:d4:6b:51:e6:fc:
         c2:01:a5:f1:ba:be:9d:2b:3f:3d:3c:d1:e9:59:08:56:7c:ea:
         d6:a9:18:fb:56:5a:60:8d:9d:10:10:05:87:84:80:e3:17:f0:
         01:51:e6:da:2d:18:48:91:72:e2:5a:b3:46:9c:3f:d3:c8:9f:
         7d:1a:d3:16:b9:05:47:a3:1b:31:46:12:d5:01:8a:a8:3b:14:
         cb:e5:dc:7d:af:c3:2b:9d:dd:70:35:36:80:a3:4c:db:c9:c2:
         e6:ed:7e:71:6e:7e:c1:0e:0f:9c:94:a0:c2:87:97:3a:f2:44:
         64:74:10:70:52:90:4b:04:de:ac:5a:fc:83:a2:a1:de:3d:5d:
         4a:b4:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:20:11 2025 by rpki-client