Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
File:                     9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json)
Hash identifier:          8UFDsQB6p5V4c6GtDGJrCWM8ULmz0V6lDuxcj4ze5g8=
Subject key identifier:   4E:70:7E:5A:EA:9B:6D:52:C0:37:EC:BE:5B:BF:1C:56:D4:01:AB:E3
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Certificate issuer:       /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial:       0197485590A89C68B5980DAA2C91B8C3CDC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 03:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:56 +0000
Files and hashes:         1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: qWC1WHCr4Dv89Va+e+8LO2JlpZFfbLmibapS5cDc4vM=)
                          2: iZXergsmx3c-YFSPwK1duaC7zXE.roa (hash: ux75uK3r8KWiMZRMZNyHuR7X45YAulKv87yeHOUi7Zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:90:a8:9c:68:b5:98:0d:aa:2c:91:b8:c3:cd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
        Validity
            Not Before: Jun  7 03:00:56 2025 GMT
            Not After : Jun  8 03:00:56 2025 GMT
        Subject: CN=4e707e5aea9b6d52c037ecbe5bbf1c56d401abe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:50:3b:09:2b:9f:d9:34:2e:b8:65:bc:3c:
                    b6:de:e7:0a:7f:c9:05:3b:3f:36:f0:fe:7e:24:63:
                    05:e3:6e:28:73:e2:98:15:d3:e2:51:5c:62:2e:a9:
                    a0:ac:30:2b:aa:f6:ec:0f:31:b9:d9:d7:0e:f3:d4:
                    3b:be:a2:ea:a6:72:52:44:b7:f3:c6:92:a3:9d:76:
                    5b:e6:cd:fb:34:8b:b5:2b:77:53:fe:99:7f:da:af:
                    cc:8e:8c:51:5d:59:a2:b8:fc:29:7d:0c:78:4f:e4:
                    f2:fe:02:c6:93:ff:a8:df:4e:33:fd:ed:bf:55:23:
                    7e:a0:40:c1:01:51:7d:55:17:79:6a:b5:83:18:f1:
                    d1:c4:0c:ae:e0:cd:f9:b7:2f:8d:68:ea:5a:da:cc:
                    4b:61:af:19:4b:8b:38:df:4a:08:af:60:a4:e0:25:
                    25:ad:a5:b5:97:8e:9d:b4:99:6d:82:03:7b:16:0a:
                    6f:20:c2:d7:1d:56:21:f5:af:8f:ac:78:98:2b:0a:
                    e9:5e:ee:af:d9:64:5a:5f:e8:8a:3f:bd:79:4c:8a:
                    e8:cf:12:a9:f9:a4:fc:da:0a:19:e7:7b:44:ed:b2:
                    51:bb:91:52:14:45:5f:68:62:cd:ad:79:f0:86:9f:
                    bf:d1:f0:e5:41:ed:60:93:13:b0:44:08:43:f0:88:
                    74:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:70:7E:5A:EA:9B:6D:52:C0:37:EC:BE:5B:BF:1C:56:D4:01:AB:E3
            X509v3 Authority Key Identifier:
                keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:22:83:21:ef:be:bd:b0:0f:9c:bb:c2:61:4e:96:de:b7:af:
         87:cb:36:a4:e2:1a:8e:6b:12:14:b1:95:32:35:26:3e:41:1b:
         03:66:b7:b6:bd:16:c8:90:ac:51:d5:6c:ff:53:2d:c8:d9:4a:
         74:99:42:c4:29:78:91:50:07:63:ef:91:88:6b:01:31:6a:96:
         8d:db:4d:74:9e:6d:8d:cb:1f:dd:d0:80:98:ab:23:a8:0a:e6:
         09:5c:68:d7:ad:b9:08:49:d2:3a:42:37:07:dd:64:3d:6f:c4:
         4f:09:04:ca:e6:25:1a:0b:21:1e:8d:c4:e3:3e:0e:54:ed:1c:
         0b:71:1e:9d:a5:92:6d:67:6b:52:69:70:79:ab:66:59:20:49:
         ca:9a:d5:ed:7a:ff:07:38:ed:fc:14:6d:18:41:5a:8b:4d:ca:
         6e:c5:98:1c:79:57:54:83:a5:53:4c:83:be:a6:ef:e0:83:94:
         0e:6f:fa:17:4d:65:e6:4c:79:00:b8:69:0b:80:d2:f2:02:69:
         d5:96:bc:5c:9e:e4:3b:5a:d3:8f:e9:98:5d:7d:1d:62:23:1c:
         a7:1e:f2:2a:20:cb:fb:26:03:2e:c4:0f:71:97:a7:98:e4:0c:
         3a:ed:4c:db:97:57:56:de:4d:e1:e8:f0:33:90:d0:37:ff:a6:
         c4:8e:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:58 2025 by rpki-client