Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File:                     1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier:          UC4EMEaGTc0qYoJoX9ETNzgsjZlril3A0SJaMkyVYyM=
Subject key identifier:   62:DD:6D:6B:2E:32:13:98:B8:6D:0E:AD:1C:44:6E:6D:A8:31:A2:8F
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer:       /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial:       019762F0F4C8E1749D1AD16619B20FEEB118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number:          0CFB
Signing time:             Thu 12 Jun 2025 07:00:47 +0000
Manifest this update:     Thu 12 Jun 2025 07:00:47 +0000
Manifest next update:     Fri 13 Jun 2025 07:00:47 +0000
Files and hashes:         1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: LvoT7dGhVPbvnEZJhfINJwpTNHYi0JmN45rPFUOSWuo=)
                          2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:f0:f4:c8:e1:74:9d:1a:d1:66:19:b2:0f:ee:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
        Validity
            Not Before: Jun 12 07:00:47 2025 GMT
            Not After : Jun 13 07:00:47 2025 GMT
        Subject: CN=62dd6d6b2e321398b86d0ead1c446e6da831a28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:ee:17:f6:b1:df:38:c8:3f:4a:17:e0:8d:
                    7c:90:a5:8f:f0:41:70:10:02:6d:60:f9:a7:c2:14:
                    25:60:76:00:1f:a8:be:fe:5f:53:56:fd:8b:e4:e7:
                    17:83:f7:0b:6f:d3:c2:9a:66:0f:7e:fe:12:6e:42:
                    dc:0a:e4:67:93:13:98:a6:b8:72:3c:dd:03:ed:a7:
                    40:7e:c0:43:06:28:71:a8:69:f4:a1:f3:ba:3c:4f:
                    e9:60:ce:33:42:57:02:2a:94:4d:72:3e:3a:e0:1c:
                    67:5a:f2:a1:47:c2:f8:96:ec:06:ac:34:fe:34:f3:
                    cd:98:14:4a:7a:2a:de:c4:90:9d:cd:83:ca:78:a3:
                    bb:d5:db:9a:ef:ac:fb:00:19:9f:73:89:53:6f:c1:
                    57:bf:b6:e8:e9:01:a2:35:5a:06:46:84:ba:77:fe:
                    b9:c5:24:fa:4c:34:db:2b:ce:67:cc:50:bb:86:ef:
                    41:86:39:f4:df:74:0f:73:2c:62:14:86:d1:06:98:
                    29:a1:35:da:2a:ba:44:c5:14:be:a0:6a:eb:bb:28:
                    67:56:d3:ff:6a:6b:ac:11:55:51:24:7d:e8:0d:c9:
                    7b:6e:0a:33:62:fc:33:88:5b:a1:74:e9:5a:ad:b7:
                    44:ad:0f:26:b8:ae:c7:ae:eb:42:38:75:cd:5e:4d:
                    56:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:6D:6B:2E:32:13:98:B8:6D:0E:AD:1C:44:6E:6D:A8:31:A2:8F
            X509v3 Authority Key Identifier:
                keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:ac:a5:d2:26:d1:31:5d:58:6e:e4:7a:94:51:e3:93:90:
         84:43:6c:b7:9d:1b:dc:31:df:ac:7e:af:14:77:59:42:2d:36:
         86:0a:0d:0e:b6:fd:20:9b:db:d2:d5:ae:a9:29:a5:f9:f1:34:
         1e:76:69:0f:86:76:d6:a2:25:97:3a:0a:f7:51:96:f2:94:0a:
         e9:51:2f:48:a9:b9:fa:e0:28:24:d8:10:d7:f7:45:92:9c:a6:
         9f:47:1b:d8:ee:9f:a6:01:fd:60:ee:a2:7e:ae:3b:7d:74:95:
         bb:fe:0c:0f:49:03:d2:a7:46:93:1c:14:dd:b8:2a:7a:3a:87:
         07:7e:a2:70:9a:13:e6:f4:7b:46:3c:69:b8:03:2b:f1:58:f4:
         3b:13:76:ed:8a:09:85:a3:1a:39:28:45:99:97:8d:b1:a0:55:
         0b:ff:ca:c2:83:27:7c:00:ed:fb:51:4a:4f:ea:e1:ee:8c:ee:
         63:30:f4:93:fe:f0:50:dd:1c:4f:3e:da:67:b8:c6:db:b5:8f:
         21:0c:18:4a:72:12:06:87:de:d6:f0:37:99:86:11:97:10:ea:
         7b:97:5d:ad:0f:24:5c:03:93:fd:14:28:1c:5f:09:95:c1:43:
         de:f2:94:82:0a:94:68:b6:ef:94:8b:9d:a2:a5:cb:18:ab:c8:
         f6:d8:00:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:04:45 2025 by rpki-client