Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File:                     S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier:          f7MijpHDCGr1kggSMZO0yPJJLcdM56w5209qs1sbtBE=
Subject key identifier:   E4:4E:0E:32:D1:5E:99:12:D8:39:7E:F0:97:4C:55:97:59:87:0F:D3
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer:       /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial:       0197470C5F395129A6D115863841B175012B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number:          1587
Signing time:             Fri 06 Jun 2025 21:01:22 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:22 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:22 +0000
Files and hashes:         1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
                          2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: qGb4+c9eJXJmgXUhoSKra0/fKXVqUILVcic0CifiW+s=)
                          3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:5f:39:51:29:a6:d1:15:86:38:41:b1:75:01:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
        Validity
            Not Before: Jun  6 21:01:22 2025 GMT
            Not After : Jun  7 21:01:22 2025 GMT
        Subject: CN=e44e0e32d15e9912d8397ef0974c559759870fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:4c:b1:4b:dd:96:b5:07:b5:29:26:9f:32:
                    87:59:84:e6:d1:29:6d:06:c4:d9:d1:01:23:fe:fe:
                    88:50:52:63:24:54:c9:83:45:73:75:f5:9d:f4:35:
                    6a:ed:50:18:c4:25:79:9e:6e:12:80:54:59:67:62:
                    24:9b:86:c5:6c:f2:fa:cf:89:dd:e8:91:8a:5b:54:
                    40:ce:df:be:03:5a:10:1d:c0:3e:b3:e5:ef:5d:a3:
                    99:ef:ae:af:1b:3f:55:73:89:eb:29:23:b6:c6:ae:
                    03:5c:a5:ec:f4:30:38:47:e5:de:1e:8f:43:14:41:
                    01:c8:92:0f:1b:c0:3b:c6:a7:e9:05:10:76:4d:9e:
                    c4:a1:97:ab:32:5b:03:a0:4e:ca:72:19:35:ff:3c:
                    a5:80:db:9e:10:e7:91:40:41:79:71:33:09:ff:65:
                    76:06:8d:43:68:c7:cd:11:0e:b8:70:c7:cb:1b:73:
                    5b:58:9e:20:47:88:e1:bb:17:9c:e5:0c:85:7b:a7:
                    ad:6a:70:26:93:d6:b7:16:82:85:54:f0:d6:e6:39:
                    6f:e0:65:7c:da:39:1e:9a:ef:63:46:e6:86:60:67:
                    27:4e:ac:bb:14:b7:e4:4f:84:a5:ca:99:81:6f:b7:
                    a3:0c:81:56:a2:23:39:f9:f2:6b:78:40:3f:52:4e:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4E:0E:32:D1:5E:99:12:D8:39:7E:F0:97:4C:55:97:59:87:0F:D3
            X509v3 Authority Key Identifier:
                keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bd:97:e7:d4:64:5a:34:78:26:09:d8:05:2a:15:5b:3c:d3:
         9c:c7:47:03:cb:d4:60:5d:b9:b3:2e:e6:68:c4:2a:5a:ca:74:
         57:6e:55:d8:9a:32:d5:b8:8c:50:50:62:82:ce:1d:b0:18:8c:
         2d:e1:b5:84:18:c7:9c:b9:9c:c8:99:07:6d:7e:e6:fc:da:69:
         94:f6:fe:1d:69:2c:43:94:f3:65:6e:12:8e:87:04:c4:cc:08:
         be:6a:cd:aa:aa:34:7e:b3:d3:c4:99:70:fb:e7:5d:27:2b:a5:
         1f:0e:dd:07:c7:20:d3:b3:df:a9:74:a7:da:5f:18:ce:f1:aa:
         9c:56:32:58:69:e8:27:85:a7:17:e9:29:4c:6e:7c:66:c4:88:
         54:45:36:7e:b6:ea:8c:cd:1b:bd:01:40:8c:91:05:42:28:ae:
         fe:e1:65:56:d5:33:0f:03:f1:d1:5d:8d:1d:7f:36:62:e0:0d:
         bf:2a:73:88:3d:87:ea:05:38:06:3a:6d:60:1e:75:0e:59:38:
         08:98:84:9f:42:c6:c3:f9:75:ce:78:be:17:83:bc:4b:99:ed:
         3b:7c:6f:10:01:b4:7d:e2:e5:4e:43:e7:c1:1b:19:f0:b1:a3:
         8c:fb:cf:ba:af:68:96:ac:eb:d7:86:a3:5d:72:a8:d0:23:08:
         ae:de:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:26 2025 by rpki-client