Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File:                     h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier:          V0zWfAPIqFZDrJLqLtkDRmYmAO4tDUqEKZlTvFs2IPM=
Subject key identifier:   A3:26:C6:4A:76:BE:10:01:BD:46:D7:47:9F:52:0C:8B:40:63:9C:33
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer:       /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial:       01974F6A4D91FC243E9EBBBA1BD3D216DD1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 12:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 12:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 12:00:56 +0000
Files and hashes:         1: FsLVTd1Z_Y1_QKD3XsSC6T-7WSc.roa (hash: MfqtShshWzvZLLqxVYU/rnjLf5/rPRnD2xrlVc90HQU=)
                          2: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (hash: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=)
                          3: eXFZQO35x46hI1_B-kM0oX7ba3w.roa (hash: IKEAMPDMrBLKazuRwlONi5mwZJ2E45qg/Wd4/iF4QYg=)
                          4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: OrUWEA0Dtf7shAVTNr8sS2aGYDLLwv1mlHA+jRYcYkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:6a:4d:91:fc:24:3e:9e:bb:ba:1b:d3:d2:16:dd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
        Validity
            Not Before: Jun  8 12:00:56 2025 GMT
            Not After : Jun  9 12:00:56 2025 GMT
        Subject: CN=a326c64a76be1001bd46d7479f520c8b40639c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:5b:09:17:c7:e4:e8:c6:50:cf:78:2e:72:
                    47:11:7e:46:8a:1e:42:78:7e:f5:c0:fb:b3:e1:6c:
                    37:76:01:c0:7c:28:d4:c1:f0:c9:9b:9e:75:c0:0b:
                    78:9c:e3:f3:e4:5b:3c:75:58:bd:f7:c1:32:13:b2:
                    a2:4e:f8:0d:6f:10:a7:4a:b1:75:45:a5:a8:cb:c3:
                    7f:d5:79:1d:6f:ec:86:5a:17:24:23:d3:18:a8:f6:
                    37:b6:50:fa:31:6d:5f:6a:a6:08:53:83:d3:3a:76:
                    a0:f1:a7:5f:10:ea:ad:c0:16:cc:49:79:68:80:94:
                    17:ac:77:7a:d7:d1:d8:e8:d8:16:86:11:f3:17:99:
                    3a:b2:c1:fa:cc:d8:58:8c:3b:7f:b6:a8:a7:ec:18:
                    7a:de:34:43:4c:e0:83:75:5c:de:f9:4f:e0:2d:0c:
                    a2:93:ef:09:2a:47:df:0a:e6:7d:7b:aa:9d:12:97:
                    b6:7e:95:72:af:36:91:ac:a0:6f:d2:18:53:27:8c:
                    56:c0:bf:11:82:ac:3a:2b:2e:1b:bf:f9:e7:bc:5d:
                    2d:1e:4b:45:bd:e6:2f:5a:8a:3c:cd:4f:4a:55:19:
                    19:e7:27:61:9a:58:74:58:ac:59:d2:82:98:2c:b5:
                    b9:95:de:f6:8c:4b:77:a6:ea:38:62:5c:95:ab:96:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:26:C6:4A:76:BE:10:01:BD:46:D7:47:9F:52:0C:8B:40:63:9C:33
            X509v3 Authority Key Identifier:
                keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:08:62:ab:bc:1a:f4:cb:28:14:7c:36:45:bb:6c:d8:2d:
         87:5a:6e:1f:1c:a7:9c:57:e4:c7:ba:c6:88:06:4c:9c:b8:eb:
         04:de:3c:34:57:02:21:22:61:cf:a8:39:3b:aa:15:a4:ef:77:
         98:bd:b6:69:2f:c9:70:52:c3:f5:81:c0:3f:ec:17:f6:35:c7:
         e7:10:2e:13:da:78:10:1c:e7:5a:d7:ef:c9:7b:0e:06:39:e4:
         ac:c4:7e:25:94:83:24:b3:6f:cf:ed:1b:d6:e3:1d:7f:dc:76:
         5a:21:f1:b6:2f:a2:dd:ca:eb:f9:bb:86:92:43:31:ac:33:d2:
         54:11:c1:e6:bf:e5:8c:33:d8:47:f4:93:4d:ac:91:2b:ec:28:
         00:d1:15:78:5f:13:12:39:be:fe:cf:93:17:de:37:11:33:b9:
         d3:c4:78:e9:a5:17:91:e4:e5:41:53:43:eb:5f:f3:d6:5d:18:
         15:cb:5c:d1:39:4e:26:33:dc:2e:07:e7:b4:fa:ee:63:c9:8e:
         ce:aa:b5:7f:7c:aa:be:c7:f1:4a:7b:61:a6:18:d6:af:15:27:
         c7:6e:f8:18:4f:f8:66:31:dd:8c:a7:e2:98:ad:71:1f:74:89:
         e0:2b:10:7b:16:ad:e9:d5:60:3b:7f:38:51:04:d5:d1:43:c7:
         a0:99:f6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:35:08 2025 by rpki-client