Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File:                     MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier:          Jt2YlYuFD5L6YTv9+Dub4oSsXnFTyeTRrBFx+YBghnc=
Subject key identifier:   35:56:29:2B:04:47:87:F4:2A:0D:24:1F:66:94:5D:CD:63:BB:9A:7B
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer:       /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial:       01974630263BCCBB460BB8E77199D5452FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number:          10E2
Signing time:             Fri 06 Jun 2025 17:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:49 +0000
Files and hashes:         1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: 3AvN0y1ScuOsQ3pJSH6ZTlbKuBZ4Zy7wY8byLi78v30=)
                          2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:26:3b:cc:bb:46:0b:b8:e7:71:99:d5:45:2f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
        Validity
            Not Before: Jun  6 17:00:49 2025 GMT
            Not After : Jun  7 17:00:49 2025 GMT
        Subject: CN=3556292b044787f42a0d241f66945dcd63bb9a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:c5:26:f9:2e:20:40:48:aa:74:8c:e4:b4:
                    3d:43:e0:ca:f4:94:60:a2:5d:2b:ca:39:bc:77:22:
                    dd:35:dc:26:dd:7b:c2:0c:17:40:e2:c9:de:9e:1d:
                    e9:ce:4c:6b:b1:3a:f2:9c:79:e9:96:e3:25:5d:e2:
                    c3:97:f0:b1:8e:be:66:ef:8a:41:34:d2:24:78:21:
                    03:fc:59:d0:bf:51:ee:11:ae:ba:8f:c0:3c:b6:5f:
                    5d:7a:80:ea:95:5d:21:c6:1c:2b:64:d6:e8:7a:82:
                    58:f0:33:d3:12:0a:22:97:4e:09:d7:f0:ed:1b:2d:
                    79:dc:05:88:d6:8d:d2:82:24:b5:fc:c7:bd:08:36:
                    f3:7a:d4:5e:2d:2f:29:b7:1c:df:e4:d3:1d:af:73:
                    1c:f1:4f:ac:ad:c6:5f:a9:07:bd:91:5a:de:8e:f4:
                    47:71:c3:45:22:2f:17:ac:ea:ea:17:de:78:93:0a:
                    c6:f2:0f:4c:ca:ee:ef:dc:88:75:80:6b:90:84:86:
                    07:12:33:95:e9:2b:e8:5b:62:37:ca:74:7f:2a:74:
                    df:2a:f1:b5:8c:d1:89:50:63:5c:48:23:a7:32:37:
                    25:e8:c5:ed:bb:ad:e7:18:92:4b:a3:fd:28:63:45:
                    19:fb:f0:6d:90:a6:98:a0:61:ea:3a:ee:60:43:06:
                    0d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:56:29:2B:04:47:87:F4:2A:0D:24:1F:66:94:5D:CD:63:BB:9A:7B
            X509v3 Authority Key Identifier:
                keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:51:c5:b1:7d:f5:bc:3d:f0:1d:55:03:bf:62:35:b9:d7:c5:
         c2:05:3a:6a:2c:32:4c:01:a1:0d:3c:8f:9c:46:21:19:0b:85:
         3b:12:c7:32:2c:87:d1:c4:5a:50:82:01:46:34:3b:ae:38:1c:
         d5:75:87:54:ef:9a:5c:7e:1f:58:74:03:b4:5b:21:64:74:f7:
         5d:43:f0:aa:cd:5d:ce:ee:32:03:f5:63:7d:cb:be:4e:20:86:
         dd:40:3c:ff:48:51:6b:ab:32:55:4c:5a:c8:23:12:81:0b:24:
         19:d3:66:42:95:b8:62:56:17:4b:27:d1:77:75:b3:cf:ff:e8:
         76:67:c6:ba:3b:a7:fe:b5:35:90:98:db:8b:33:ed:81:2c:d7:
         0d:60:4f:69:d9:87:ba:75:76:ea:c5:d5:ac:b8:f6:e7:44:39:
         65:83:98:c7:9c:01:50:89:40:36:26:0b:98:90:ea:53:30:bd:
         48:79:95:41:4d:93:7d:53:c2:ee:16:ce:64:6d:b9:ea:d4:d6:
         fa:94:14:a6:0e:9b:38:de:7b:4e:1b:af:d7:81:63:6d:e7:52:
         aa:2f:d9:be:18:11:ea:af:c1:4f:02:19:75:1a:b9:2b:56:a6:
         c7:23:64:7b:62:f5:e4:b1:d7:c7:52:3b:5d:0f:96:89:d4:0d:
         42:cd:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:50 2025 by rpki-client