Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          zitjR4/mLT76/fui7LlRFCzl5dK4k3nGSZgzTr+G+gw=
Subject key identifier:   02:FA:F6:8C:0E:D0:4C:FE:FC:4E:B3:BE:4B:5B:5C:E6:8D:B9:E1:C9
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       01975490ACABCC71B3E1F2459266E48703A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          1093
Signing time:             Mon 09 Jun 2025 12:00:56 +0000
Manifest this update:     Mon 09 Jun 2025 12:00:56 +0000
Manifest next update:     Tue 10 Jun 2025 12:00:56 +0000
Files and hashes:         1: 5ZcLxiewB6SlgnkXrkL_qV-6c70.roa (hash: GbaGUbv69G2XGzJlZWZreb/2hT1CRKa032XRQqRiLc0=)
                          2: I1O4inp7HBvWNe9o3Cdiqxo24PI.roa (hash: w0+4BIRKhD7XUvL36J282b0/EXDqyGM8URO+oQQ/ReM=)
                          3: QUq_as-wJbivzxLijTmqQSzAeeM.roa (hash: Obggdbq+FXYocjRAbiQV6ufwU9548OHhlSGKsE0Fnq0=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: WGYXPf2GpqzBCgijN2QYPxxytkwaeastk1KEfonQ42k=)
                          5: fUAyjzobbYqY4LtTx9KW62S7ym8.roa (hash: IdzdGJHWpk15Q0jGSrpbWLOfiHsRudIY06wcbYibU3s=)
                          6: rSVe0qwmHRmRSbc-BqRXWgwo8xg.roa (hash: r3p05wO+xtEje8UL55zhFJYQg8/aaGUGyXfpX1tlFYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:90:ac:ab:cc:71:b3:e1:f2:45:92:66:e4:87:03:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: Jun  9 12:00:56 2025 GMT
            Not After : Jun 10 12:00:56 2025 GMT
        Subject: CN=02faf68c0ed04cfefc4eb3be4b5b5ce68db9e1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:27:44:15:3a:fb:0b:6e:7d:64:7d:c9:bd:
                    de:81:bd:79:3e:d7:1d:46:b1:f7:dd:01:d4:71:2a:
                    ff:f3:b6:85:ee:2e:f6:25:09:f3:10:ec:20:f3:9d:
                    a2:65:60:f3:a9:f6:c4:f3:fe:47:e3:9b:29:fd:27:
                    fd:9d:60:a7:8b:cc:43:4b:f7:b0:cb:c3:b9:83:66:
                    12:3a:3b:30:bd:50:3f:88:d0:bc:92:88:a4:c1:e6:
                    5b:a6:8c:a3:3d:cf:f5:25:98:84:64:c9:28:66:49:
                    ed:12:0d:5c:88:28:58:b4:96:6c:ed:f6:af:5f:71:
                    1f:59:d7:d6:f3:2a:9c:4e:64:5d:e4:4b:b0:71:e4:
                    8b:b2:6e:d7:be:8d:d0:b1:4f:6d:56:59:b7:5c:07:
                    37:2f:b3:d2:c4:3c:95:2c:0c:92:1a:b5:7a:7d:71:
                    1f:01:da:1a:14:de:ee:ce:d7:ce:31:68:c1:75:a0:
                    d5:d6:e0:f3:4d:53:0a:e7:0b:94:e6:7c:6a:8b:9c:
                    d2:56:67:4a:83:b9:f8:c7:4d:a6:83:eb:90:04:0f:
                    71:d8:fe:f2:19:7d:d9:4d:f2:c1:f3:57:52:4f:1c:
                    b7:ec:93:3e:75:76:79:b6:98:bb:34:60:27:4d:ad:
                    76:95:a0:20:6d:ef:b9:d5:47:05:5b:79:d7:97:36:
                    50:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FA:F6:8C:0E:D0:4C:FE:FC:4E:B3:BE:4B:5B:5C:E6:8D:B9:E1:C9
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:18:50:51:49:38:c8:f5:a7:a7:64:f8:fa:d3:e7:16:f7:ff:
         e5:45:13:05:1b:db:31:f1:b8:56:16:6c:b5:99:84:a4:78:d1:
         35:e9:e3:25:ce:24:42:9a:43:44:0a:b2:6c:ce:9e:97:e2:53:
         26:5f:8d:a5:8b:45:a2:40:45:b0:75:df:b7:94:99:b9:5a:ac:
         37:e9:ac:be:10:c0:22:09:22:c0:fb:c5:35:ca:8f:56:8c:d2:
         ed:86:5d:74:cc:c8:f0:23:25:bc:4d:4a:ce:18:2e:6c:d9:60:
         f0:51:fd:94:ba:84:ac:2f:b8:6a:2f:f1:0e:52:b7:53:d8:ca:
         07:e0:3b:8f:3d:cd:37:f0:b2:2f:a8:38:e8:b8:90:3d:97:35:
         f2:d8:c9:c3:89:ad:87:9f:ab:d6:e4:3d:9f:39:0f:28:d8:02:
         9d:7c:3c:0d:6f:7e:0c:86:c4:2e:49:91:a5:ff:f9:8c:58:d3:
         97:ae:6e:32:5e:71:db:1f:2e:f9:8d:42:77:ee:26:21:b8:eb:
         3e:a1:96:3f:0a:7e:5d:c8:d9:10:92:ff:5f:24:24:f8:22:40:
         e5:64:2b:ca:dc:ab:7a:65:7a:a3:20:d5:37:12:b9:eb:e1:b7:
         fd:92:ad:d9:0a:29:61:c7:d3:c9:74:27:f2:bc:fd:4d:ea:aa:
         52:90:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:35:32 2025 by rpki-client