Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          Mg6gx1wGAzrEjUgcmcKVSWNkCj+8+b897RSpYq+S7fU=
Subject key identifier:   73:BD:B1:C0:38:C1:B9:15:3D:16:32:4E:8B:2C:3A:D9:8A:67:3E:26
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       0197481E8EA62FE674AF3BB5BD99F3D3219F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          1617
Signing time:             Sat 07 Jun 2025 02:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:51 +0000
Files and hashes:         1: 0zqU-vNXZ2phU0OLDTydQoGFH8Q.roa (hash: +gP0NPBpHn9gACyGVaIVIcNnU3nAFyTkDtrpKge+z2I=)
                          2: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=)
                          3: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: YZRInkaA+bXT2FJUiMm055HkZD0fZMuogwsc73+Ep0c=)
                          4: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=)
                          5: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=)
                          6: fsCpcWbx8Z1eo5cYhqs4znqfBw0.roa (hash: 2EkDKLPS7K1At/yNNFD/xXPTEKBT3zJVxYZiJe5gvgs=)
                          7: kexkh65vQ7bMWtG8mnCvje3Zp-w.roa (hash: Pg9AL21punrl7WTntjhvGX0o4iTm5IvkXrJIfPr6Vw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:8e:a6:2f:e6:74:af:3b:b5:bd:99:f3:d3:21:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Jun  7 02:00:51 2025 GMT
            Not After : Jun  8 02:00:51 2025 GMT
        Subject: CN=73bdb1c038c1b9153d16324e8b2c3ad98a673e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:e3:59:22:3d:3b:a4:40:a7:79:c3:eb:a3:
                    3b:d2:a8:03:d3:9d:8b:18:24:f9:ed:e1:98:cd:cd:
                    b6:69:66:e6:d8:d9:27:62:25:1f:08:29:5c:ec:27:
                    07:f2:d2:0f:42:15:22:88:58:36:0a:6a:c8:24:29:
                    16:84:ef:1a:c7:46:6a:62:57:de:d2:06:59:9f:ed:
                    f2:87:ec:72:f4:0b:3c:a4:8b:15:06:a1:cf:4c:76:
                    76:7f:2c:aa:36:67:bf:66:d0:08:85:71:e6:9a:75:
                    21:d6:07:98:d4:ca:9d:ce:b5:ad:05:2e:df:0c:94:
                    34:79:25:59:8c:1f:b9:d1:74:61:a3:2e:f0:8e:46:
                    60:47:cc:2b:f0:18:23:3f:20:d2:89:60:98:48:1f:
                    4c:93:44:4d:0c:d8:04:f6:70:f0:c5:4b:20:a4:07:
                    6c:91:16:18:1e:86:ec:ee:02:57:84:e9:a8:c6:2a:
                    44:6b:51:00:9f:68:2c:26:e0:0c:02:4c:99:2c:08:
                    b8:48:2b:71:57:7f:b7:aa:83:0b:58:8b:e1:19:c8:
                    2e:ff:85:27:ef:ee:d0:f9:ae:7a:7b:f9:03:60:7a:
                    24:6c:97:da:8b:56:91:a7:d7:c1:8c:d7:61:f8:19:
                    98:b5:5c:f1:f8:29:d3:32:19:f7:c1:7d:33:32:8a:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BD:B1:C0:38:C1:B9:15:3D:16:32:4E:8B:2C:3A:D9:8A:67:3E:26
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fd:9b:eb:14:9d:b3:b7:9d:21:71:d4:e9:7f:ef:39:1b:41:
         9c:6a:02:b9:c7:24:fb:53:e5:d5:c6:ad:74:59:69:31:50:c6:
         e7:1e:b9:54:b4:69:cd:09:22:4f:84:5c:85:86:2c:54:12:cd:
         c2:b4:62:f7:4f:a8:a0:4e:8d:21:64:91:80:e1:aa:e1:34:12:
         ce:5e:1c:f7:7f:31:c9:aa:aa:ca:b5:a6:ea:62:6b:d1:7f:03:
         74:88:21:7a:93:9e:2e:06:60:b0:6b:60:b4:6e:45:10:2d:44:
         a3:38:5e:52:65:92:0b:00:07:6a:65:45:32:cc:f2:08:ab:5e:
         02:92:9d:37:b8:5e:17:69:44:93:9d:94:d0:37:8e:c0:bb:b6:
         06:c6:87:ce:4e:0f:81:45:fc:1b:3a:5e:59:c0:65:18:56:22:
         e2:d7:e7:cf:90:63:5c:d7:41:c5:20:c7:b4:57:23:fc:11:46:
         49:18:17:f1:59:d1:fb:46:3e:f6:da:20:d0:13:24:db:07:a5:
         53:9b:6d:4e:c9:c1:fa:ac:92:0a:e4:c0:95:43:0c:ab:1c:0a:
         bf:83:32:ef:b7:ff:ea:0b:21:47:ad:57:0d:80:01:f1:d4:e9:
         ff:f7:d7:df:36:55:f5:91:82:ef:c1:c9:09:90:e5:ee:69:7a:
         dc:3d:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:37:45 2025 by rpki-client