Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File:                     rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier:          OxqcHM3yPBqIlKJnoqAAUne2uPe9LSO2S/rjVvS6kSY=
Subject key identifier:   15:C1:84:8E:55:84:3B:E6:F7:CA:D8:FF:EA:81:C8:20:F4:5B:F2:7D
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer:       /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial:       0197474271DDC44EB1B4B30D44B46CD425E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number:          1199
Signing time:             Fri 06 Jun 2025 22:00:26 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:26 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:26 +0000
Files and hashes:         1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: yFr9A+ZMvvYR2ujDXgRRuIOMLG/ysI82TuSyVCcLYok=)
                          2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:71:dd:c4:4e:b1:b4:b3:0d:44:b4:6c:d4:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
        Validity
            Not Before: Jun  6 22:00:26 2025 GMT
            Not After : Jun  7 22:00:26 2025 GMT
        Subject: CN=15c1848e55843be6f7cad8ffea81c820f45bf27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ff:43:c7:cc:8d:c9:34:ca:f9:f6:4b:75:81:
                    00:dd:f5:42:3e:48:ee:06:a0:b6:8e:15:4e:72:75:
                    f7:28:44:0a:d7:62:20:11:bb:f5:a2:49:0b:6f:cc:
                    99:6b:b2:7c:49:17:ad:af:65:36:20:bc:a1:61:b4:
                    90:75:81:ac:6b:d1:22:27:5d:7e:89:61:6d:e1:91:
                    06:4f:4b:61:a0:9a:cf:1d:a5:d5:94:6c:29:e8:0d:
                    0d:f7:2d:03:5c:68:10:13:e1:f8:93:60:ee:3c:cf:
                    bf:dc:83:f4:b0:69:98:94:ba:5f:26:45:15:a6:42:
                    9e:32:93:b3:17:ec:61:46:a4:de:ee:cf:fc:e8:fa:
                    5d:d7:40:dc:98:3d:6d:4d:79:b2:7e:d8:00:7c:57:
                    6c:0d:da:ab:3a:cb:8b:54:37:a9:6a:be:3d:91:90:
                    50:5c:dc:14:a9:6d:7e:c4:92:6e:94:8b:b6:10:4f:
                    ed:79:3e:9f:23:cc:82:e4:d4:0f:87:24:44:a0:5c:
                    63:00:9d:a7:dd:5b:a2:80:37:51:e1:1f:31:c5:f9:
                    25:86:8f:54:6c:af:f1:c9:cf:1c:4e:53:58:35:c5:
                    c8:b3:dc:74:69:21:35:5f:04:e0:36:db:42:ac:ac:
                    8b:36:82:a9:b2:64:61:64:4d:51:01:ac:f3:8c:09:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C1:84:8E:55:84:3B:E6:F7:CA:D8:FF:EA:81:C8:20:F4:5B:F2:7D
            X509v3 Authority Key Identifier:
                keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:66:db:43:20:e9:1e:ef:11:9b:7d:0f:a6:ac:80:f5:a0:b0:
         22:d2:b7:a8:56:32:63:a3:27:b3:14:67:b9:22:47:b6:a7:9c:
         50:68:19:a0:89:b9:4e:0c:62:f8:49:60:8c:af:06:dd:71:50:
         95:f1:af:20:b8:df:7d:0b:f6:9d:ee:52:ce:c2:62:6d:61:06:
         c7:f1:de:2c:37:22:17:61:00:04:a9:b8:24:aa:67:78:f4:25:
         ae:a6:35:69:4b:9a:00:4d:be:39:64:02:bd:75:8c:a4:8b:65:
         96:16:79:69:2c:ff:7f:32:67:34:84:f9:b3:33:20:10:82:64:
         98:43:f1:14:23:1f:60:81:a9:88:e9:e2:17:0c:7d:b3:44:2e:
         8b:15:86:74:24:86:c0:00:94:cb:84:47:48:6b:e2:37:8c:de:
         32:cd:08:81:da:22:dc:70:54:fa:1e:d5:77:47:ba:d8:bd:53:
         54:eb:64:10:44:a6:ef:a9:fa:c0:a1:76:4d:a3:38:fa:3c:0d:
         fb:f1:ab:ca:fa:9c:77:47:35:71:5e:fe:c1:5d:da:c5:fa:e7:
         19:87:84:ea:0f:b8:d1:fc:e1:90:ce:1d:9d:56:08:d9:e3:cd:
         20:0e:42:32:46:bb:78:45:18:fc:22:c5:8e:08:41:0a:cd:aa:
         5b:42:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:23 2025 by rpki-client