Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File:                     srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier:          4Z4/WVgvhJn/AplXRGFWgzZTC7g505RhUvthU6rNbnU=
Subject key identifier:   5D:D7:E8:08:2D:F2:03:13:8E:0E:92:6B:73:67:65:EF:D6:0F:AE:64
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer:       /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial:       019748C2E2C00ABB6E1E9991193437334B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number:          0571
Signing time:             Sat 07 Jun 2025 05:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:20 +0000
Files and hashes:         1: Ypuf3qV0JE2AXfUrk2eNRiGtQN0.roa (hash: AxG4SgT0VS5arc9FHux7pFhrFyFYGK0/0AgX9zPeSBE=)
                          2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: TPRQODnkrEhcDS2SHgTldbbsvl5c+8bDm5aPkjQwT+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:e2:c0:0a:bb:6e:1e:99:91:19:34:37:33:4b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
        Validity
            Not Before: Jun  7 05:00:20 2025 GMT
            Not After : Jun  8 05:00:20 2025 GMT
        Subject: CN=5dd7e8082df203138e0e926b736765efd60fae64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:ae:4e:26:f1:f2:04:fb:f3:6f:b0:e5:33:
                    07:d3:75:07:94:c1:b7:82:20:21:1b:b9:46:4c:2a:
                    4f:5e:18:a2:0a:c4:eb:e7:e9:a8:73:3c:c7:29:38:
                    f4:67:1d:13:50:cc:f1:ac:51:46:35:f2:4f:74:9e:
                    df:23:0a:da:87:ee:c4:b6:e9:fb:d3:23:b2:95:a2:
                    66:22:da:c0:e0:9f:12:a9:c2:14:e3:50:a3:33:f5:
                    9b:e5:50:0e:66:bd:e5:26:1c:88:25:b5:0d:66:a3:
                    92:39:4d:c7:c2:5a:56:b2:f9:6c:2a:d9:13:eb:8c:
                    8b:4b:eb:af:d2:a9:d1:d5:59:fe:9f:f9:5b:e0:3a:
                    56:f3:af:1f:9e:1f:d6:99:c3:f6:68:ca:08:69:96:
                    41:b0:1f:fd:ac:70:f9:bd:0e:ab:7a:82:d4:c0:f2:
                    61:7f:a9:d0:36:3b:18:fd:1a:87:c5:5e:2c:cc:04:
                    ac:66:a8:84:11:d7:d4:f2:dc:f7:89:fb:67:eb:0c:
                    d0:18:bb:88:e0:4f:b3:87:53:e5:a3:89:43:2a:e5:
                    6c:03:89:f6:31:0d:ea:d9:67:d6:5e:3d:5d:05:39:
                    32:48:e2:08:3b:a0:e7:17:88:0e:76:25:00:6f:9a:
                    d7:30:5e:7e:37:a6:8a:4b:35:35:df:70:3b:3c:e2:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D7:E8:08:2D:F2:03:13:8E:0E:92:6B:73:67:65:EF:D6:0F:AE:64
            X509v3 Authority Key Identifier:
                keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e1:69:6e:a3:05:ad:ce:6f:7f:35:9a:53:ce:25:6a:e9:ef:
         83:b1:55:04:49:42:52:43:d7:e1:b2:0e:67:91:2c:02:f1:89:
         48:15:b1:4c:6d:37:8c:3d:4f:0f:b9:78:c4:95:59:0d:b4:f3:
         71:85:1b:f4:dd:b3:fd:cc:51:6d:5d:c7:f4:b7:83:f9:bc:1e:
         93:e9:c0:e7:06:ac:fe:07:56:5e:48:e3:d7:1e:81:02:b5:09:
         79:48:37:88:fd:10:8c:49:9d:76:0a:55:64:d1:1c:b2:ae:2e:
         66:3d:d4:b6:16:40:60:1e:2e:cf:37:6c:7f:91:85:b0:79:2b:
         ef:53:71:7a:49:67:e2:5b:a0:f3:f1:e8:45:13:6e:8b:4b:f1:
         00:fa:fe:ce:fc:69:e6:d8:27:78:25:df:62:7c:a4:05:fc:c5:
         2d:a3:11:50:00:6f:cf:69:37:2f:28:36:f6:f8:0a:0a:d1:e6:
         3a:bf:2a:cb:41:16:4a:f2:0c:02:4b:39:62:14:23:3f:fc:89:
         00:62:06:09:90:3d:75:dc:eb:a4:a8:b0:61:10:85:12:f9:7e:
         b5:fc:e0:ad:b7:df:b5:1a:23:b3:fe:9b:fb:cf:27:3d:e3:8c:
         99:1d:2e:d6:c4:fc:f6:ef:93:03:b0:6c:c9:45:68:01:01:f7:
         a5:a1:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:12 2025 by rpki-client