Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File:                     1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier:          TvGUNmiRvRBjRQWA6/ydogNH+a8a/Owd7jxDWhzi4Lo=
Subject key identifier:   94:E9:18:8A:D4:2B:E2:5B:86:64:AD:55:AC:6F:7D:37:27:CD:0E:3D
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer:       /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial:       019745F8C455A5317140AE58AFC41C72A2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number:          07CC
Signing time:             Fri 06 Jun 2025 16:00:20 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:20 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:20 +0000
Files and hashes:         1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: kG3OJ/F7PaXzvwsRqitDlT5GBTOdmOVQec6CI7iXtG4=)
                          2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f8:c4:55:a5:31:71:40:ae:58:af:c4:1c:72:a2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
        Validity
            Not Before: Jun  6 16:00:20 2025 GMT
            Not After : Jun  7 16:00:20 2025 GMT
        Subject: CN=94e9188ad42be25b8664ad55ac6f7d3727cd0e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:a0:90:62:f0:ea:2e:e3:95:97:e0:03:3c:
                    8b:df:fc:29:81:24:d1:af:3c:6f:c9:13:0a:32:25:
                    36:1c:dc:da:82:14:db:f4:70:a6:be:85:0d:4a:b4:
                    c6:3e:63:43:1d:d4:48:9f:14:33:6c:ad:25:4b:7b:
                    92:30:17:bc:a2:ea:05:3a:7c:3a:f0:31:1f:d0:47:
                    6d:6d:07:e1:4a:17:a7:28:2b:7b:48:34:49:0c:e6:
                    06:7d:0c:a4:3a:99:dc:96:f6:d6:ad:15:67:2c:0a:
                    c0:ab:d0:c7:44:27:88:58:d2:db:01:53:bd:a4:14:
                    ee:30:89:a9:af:c4:ed:92:3b:46:12:36:61:a9:4f:
                    37:dd:fd:17:0f:00:69:42:77:ed:64:60:02:01:b0:
                    23:d7:a1:85:f8:05:8b:3e:7a:1d:ef:6f:68:fa:e2:
                    f6:f1:8f:80:fe:2c:8a:c6:e6:09:cc:c1:3b:73:12:
                    31:c2:19:33:50:3d:48:2b:c2:43:35:15:73:45:8e:
                    86:09:da:74:23:75:21:73:8a:42:a5:2c:5e:78:a2:
                    2a:5c:0a:40:88:57:fc:f6:c8:f1:db:72:65:f4:e5:
                    43:6d:9a:df:87:10:d2:79:65:a5:dd:e6:99:ad:c9:
                    83:20:35:61:d1:e7:2c:07:24:2f:57:c3:d1:db:6e:
                    65:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E9:18:8A:D4:2B:E2:5B:86:64:AD:55:AC:6F:7D:37:27:CD:0E:3D
            X509v3 Authority Key Identifier:
                keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:68:5c:02:04:29:98:31:2c:a2:93:fd:f5:ba:ca:be:83:6d:
         fe:75:83:bd:3b:41:48:20:8c:2a:27:b9:85:29:74:6f:3e:77:
         b1:7c:b0:d8:3c:af:1c:f3:67:30:c8:f4:50:2d:2c:0b:5c:65:
         15:9c:ac:ae:01:eb:eb:67:60:8e:79:87:e7:7c:5b:99:b6:99:
         d3:3c:a3:6a:87:a4:1f:e6:15:a2:b9:3d:37:23:89:24:8b:7d:
         fd:bb:ed:43:ad:af:8f:5b:70:d7:9b:8e:9f:32:9d:f7:52:4d:
         6a:14:2e:94:02:10:74:4b:b8:c4:2d:0d:a1:41:a6:38:d1:72:
         38:af:1d:2e:ba:98:77:9c:09:53:a3:da:8b:d4:f5:65:3b:39:
         69:d6:b5:00:c6:28:fe:7f:74:35:a3:25:d3:f1:7f:38:6a:53:
         4f:38:bf:15:21:c3:ee:a1:7b:61:f5:de:ed:15:e5:7b:5d:18:
         75:24:04:e6:68:a6:e4:7a:29:97:12:88:a2:d4:04:0b:82:fd:
         85:c9:4f:c6:84:53:a6:7c:dc:75:aa:f1:bf:15:f4:19:7e:2e:
         8e:26:67:60:54:9a:34:f8:a1:fb:ef:6a:aa:17:40:5d:94:ac:
         ac:60:79:65:80:80:28:e0:b6:36:6b:51:3d:52:8d:5d:f3:9f:
         ef:84:c4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:48 2025 by rpki-client