Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          2CA5xXoyg+oBcERpjx+r1VZdzs87xkzQTLPtos8xlnQ=
Subject key identifier:   BD:A5:A0:76:3B:0E:E9:53:D4:BF:C1:56:47:EA:CE:C0:5F:A4:AC:AB
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       01975723A52A5317E08EF1AB0C14E82E93FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          1582
Signing time:             Tue 10 Jun 2025 00:00:43 +0000
Manifest this update:     Tue 10 Jun 2025 00:00:43 +0000
Manifest next update:     Wed 11 Jun 2025 00:00:43 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: QYLfO2NGMTb2tPa1r/uoPnHdZHuhPK+zp+6InW6pjW4=)
                          2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:23:a5:2a:53:17:e0:8e:f1:ab:0c:14:e8:2e:93:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: Jun 10 00:00:43 2025 GMT
            Not After : Jun 11 00:00:43 2025 GMT
        Subject: CN=bda5a0763b0ee953d4bfc15647eacec05fa4acab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:46:f0:6f:07:a7:df:ab:3f:aa:49:20:8e:
                    17:26:67:8a:2e:07:ab:32:9b:2f:d5:48:95:3f:c5:
                    36:0d:71:bf:1b:24:39:96:51:ad:00:70:d4:e0:eb:
                    06:5a:5f:5d:9b:eb:b1:16:61:e8:16:68:8e:2f:a1:
                    1d:17:d2:20:8a:b3:8d:3b:3f:35:d1:57:89:f8:1c:
                    43:e0:8a:ae:09:38:45:7d:56:9e:29:7c:40:bf:74:
                    bc:e2:68:ed:47:4c:a6:97:86:0c:5b:a3:35:a3:3d:
                    b8:af:bb:61:19:9b:fe:c9:1e:15:02:1e:d9:b5:e2:
                    13:2a:b2:11:26:fb:40:54:5f:34:6c:63:c1:0f:89:
                    77:28:c5:cd:8d:42:f0:d3:eb:36:41:6d:33:3e:38:
                    04:71:f2:cb:0e:a8:ea:6f:8b:7c:76:a6:be:a5:a2:
                    c0:d8:e5:38:dc:26:36:5a:6b:23:5e:c4:65:8d:cb:
                    6f:ad:8a:67:5d:d4:1f:09:99:6b:cb:73:8b:a1:1a:
                    fb:1f:35:53:39:de:bc:91:ab:a0:51:4f:14:d4:ef:
                    e9:27:d4:dc:a3:58:17:18:fc:94:ec:c9:e0:73:96:
                    6a:20:53:dc:5f:3d:7e:3b:02:8e:67:62:35:8b:38:
                    f5:f8:98:ad:47:33:e6:f8:e8:2f:75:bd:ec:61:5a:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A5:A0:76:3B:0E:E9:53:D4:BF:C1:56:47:EA:CE:C0:5F:A4:AC:AB
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:df:19:1a:cd:a3:af:cd:78:10:26:44:16:30:ac:4c:7f:
         43:e0:9b:a4:9d:5b:f0:ce:ce:60:7d:f5:1d:00:5d:81:64:9e:
         b1:bb:b5:8b:2e:c4:de:d6:57:67:93:5b:a4:0d:f8:da:61:80:
         c0:cf:0f:85:58:74:d1:c9:54:37:06:f8:a1:a4:72:cf:91:77:
         39:1a:f2:84:9c:2e:81:b1:3d:08:68:96:fe:c5:15:44:af:9e:
         af:2f:4c:fc:5e:67:b6:f3:82:7b:d4:cc:f9:c3:41:ad:9f:7a:
         08:5a:11:fc:e4:3b:f8:1f:04:a6:f0:98:1b:13:51:a4:c2:98:
         57:4d:83:dc:15:08:95:f7:e7:c0:ce:fa:f7:fb:b3:20:c3:ba:
         4d:2c:1a:d0:55:8b:58:98:ed:a7:63:7d:d1:ae:ee:37:f6:3d:
         b0:22:e1:9b:9b:7e:0b:65:c7:a2:3c:09:09:98:29:a8:b9:7c:
         61:ba:3a:38:2a:6c:57:09:80:6a:ba:2d:f1:bd:52:4b:d5:db:
         13:b9:96:55:be:51:5c:c9:93:9b:cc:16:b2:e9:32:51:86:bb:
         63:87:79:c5:03:59:1b:a0:92:35:4b:c4:9a:77:fe:16:1f:e9:
         1b:24:60:e1:a2:a8:8a:d7:34:7e:bd:bd:c6:b7:4a:f1:c6:97:
         2e:00:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:17:28 2025 by rpki-client