Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File:                     T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier:          Uixz2OmMEZQo2NBKDvn5gwwUuctfZkOajz2diOYNnkY=
Subject key identifier:   C8:C8:F2:27:E2:FE:C3:64:BD:4F:5A:08:94:BD:75:62:CC:5B:42:74
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer:       /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial:       01975045B10823373A1DBC8D4B5D256581B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number:          1586
Signing time:             Sun 08 Jun 2025 16:00:33 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:33 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:33 +0000
Files and hashes:         1: 1rrQNZWItDgfdECFOf22Jh7vi4k.roa (hash: oHl9vepG9gEfJ6vCHFkAvnbQr+mxDKJlGHdGdAeE9CA=)
                          2: 3RF21_ECpL5M_wnxKo1LaLxJwIk.roa (hash: DwVXHnFiU49l5hw1O5O7YFwPLdE2x6EWi17vCjDfMV4=)
                          3: OfliSFK47yOA2Tkix0wrkAH4x2c.roa (hash: B0Voqn9uU+7JqaJFZrNcBBKpjX2nZFFKEZ39gYCt+es=)
                          4: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: vnNKfBjW9cLxVTIcJq17O6Y8GkbyXprdDsugGgVvYFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:b1:08:23:37:3a:1d:bc:8d:4b:5d:25:65:81:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
        Validity
            Not Before: Jun  8 16:00:33 2025 GMT
            Not After : Jun  9 16:00:33 2025 GMT
        Subject: CN=c8c8f227e2fec364bd4f5a0894bd7562cc5b4274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:5a:a8:06:94:c3:d9:14:c7:38:a2:35:9e:
                    85:cc:6a:a5:17:41:5a:6a:de:a5:01:cc:85:da:a5:
                    97:83:cc:13:f0:9b:e7:08:9f:65:c2:c8:6f:7e:c6:
                    c7:d2:00:1d:da:51:9d:03:c1:cc:c6:55:40:21:72:
                    5f:d9:c6:21:84:65:59:6e:44:77:1c:81:58:a4:76:
                    37:70:ef:fc:76:6e:f0:81:2a:d4:fd:72:85:a2:39:
                    d7:19:ed:72:3f:97:5a:66:ab:34:10:37:c2:8b:7a:
                    52:68:c1:84:d5:90:c2:57:ef:52:7a:76:de:66:ee:
                    c1:40:75:bf:3b:8c:99:fb:c7:c7:e9:e9:3e:b2:a7:
                    76:48:8b:0a:0f:0f:a6:88:51:00:96:c8:e6:2d:a4:
                    d3:be:a4:7a:7e:9f:89:a2:69:92:2f:dd:a6:90:2a:
                    58:4c:3c:a3:f4:16:d5:5f:69:cd:a4:1a:f0:99:1c:
                    a7:4f:79:0d:f3:ee:c5:06:6f:af:5d:ce:b9:43:a5:
                    10:58:97:19:be:3e:a6:6a:42:f5:e5:7d:a9:b4:39:
                    b3:36:95:78:74:7c:d2:e0:69:86:a4:0a:72:10:41:
                    c1:6d:82:6e:b9:b0:03:14:e0:d8:ef:47:ea:67:96:
                    bf:4f:37:1b:dd:9c:f7:c3:01:a6:12:60:7e:62:d1:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C8:F2:27:E2:FE:C3:64:BD:4F:5A:08:94:BD:75:62:CC:5B:42:74
            X509v3 Authority Key Identifier:
                keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c2:ca:f2:7e:c3:f3:60:93:4c:d3:c2:0d:d2:94:3e:1a:a4:
         a0:7a:5e:1e:f4:21:be:05:08:d5:e5:77:a9:7d:e9:0d:43:b7:
         eb:62:55:a6:9e:44:fc:58:a6:ad:61:94:8c:be:8f:62:ad:d0:
         9f:53:23:7e:05:87:96:3e:0b:59:25:16:8e:84:ca:7d:ef:45:
         a3:40:74:8f:44:29:50:67:e7:44:ed:67:09:ff:0b:ac:24:96:
         f4:04:c5:a7:a0:81:2d:e6:3f:c8:f4:b0:97:7d:09:b9:1f:fc:
         15:fd:29:17:b7:32:62:b9:28:d1:84:9c:8b:56:20:c0:cd:95:
         d2:97:62:4b:57:f7:34:df:54:c2:7a:ef:dc:cc:85:53:01:de:
         31:80:b0:f2:9c:e0:bd:88:c3:71:da:48:4a:64:24:c6:d3:b2:
         a5:b0:bc:32:3f:52:d5:ff:fd:8b:d4:c5:2b:b2:16:2a:9e:72:
         20:c3:94:f7:7e:40:c1:d7:ac:b8:62:62:83:5e:c7:86:b8:3f:
         a9:f6:27:16:3d:9a:2b:08:0b:6a:08:30:f9:6c:43:85:56:41:
         65:b1:a4:23:32:ca:54:dd:cc:0c:1a:d8:8f:72:3d:f8:d5:b2:
         5f:fa:23:d7:de:54:29:79:63:69:77:84:00:8d:2d:85:e5:cd:
         bd:98:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:16:18 2025 by rpki-client