Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
File:                     b5jR-Z44M-9AHUY0juyLdSCIxV0.mft (raw, json)
Hash identifier:          I+KX60ewH1gVYcd8ct8UrpgXnLnTiBXvTWOUBfygtbA=
Subject key identifier:   E1:76:0C:8D:2A:59:A7:09:1F:FD:86:34:0E:F3:4E:34:A2:D5:CC:B6
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Certificate issuer:       /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial:       019754237105ECD9D29778476075A7BA061D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
Manifest number:          1584
Signing time:             Mon 09 Jun 2025 10:01:38 +0000
Manifest this update:     Mon 09 Jun 2025 10:01:38 +0000
Manifest next update:     Tue 10 Jun 2025 10:01:38 +0000
Files and hashes:         1: AK8oH-hdcdWqkx1j19Sg4WRGU6k.roa (hash: UL0wVMMPQ6seHx9+E4jjcivFpYmeRRoPs0aDR4HKrBk=)
                          2: WtT0iRRNWOEnnJNbpojOaIceMDQ.roa (hash: GuNBmImvmC1qMkMAYPrdjYcM0SGHFORb2IyKWp/uvJM=)
                          3: b5jR-Z44M-9AHUY0juyLdSCIxV0.crl (hash: QyGMrTpPi4nMxqRzBbwrsS0QaQRYnSZcph+gj9QbbV4=)
                          4: j7Ttn2BWFaDhab7ZDneYB8Izk6w.roa (hash: k9js+BE4RFtwEtbQ/V0azAY+xGWrWmclJFMU8tYRWW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 10:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:23:71:05:ec:d9:d2:97:78:47:60:75:a7:ba:06:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
        Validity
            Not Before: Jun  9 10:01:38 2025 GMT
            Not After : Jun 10 10:01:38 2025 GMT
        Subject: CN=e1760c8d2a59a7091ffd86340ef34e34a2d5ccb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:d7:fe:0f:e8:e7:76:7f:a9:d5:e6:53:c2:
                    34:51:a1:21:5e:9e:77:fd:09:ad:47:0d:f1:aa:d4:
                    cb:82:81:68:53:d4:2e:b8:5a:bc:8b:2f:a9:1e:d3:
                    da:e8:98:46:d1:b3:0e:a8:a6:c1:af:0d:44:3d:62:
                    e7:b6:31:de:74:49:aa:d0:88:a5:97:fd:0f:6e:90:
                    8f:4f:15:d4:c7:67:25:0a:5c:cd:9a:10:7d:0b:f8:
                    3c:a1:6e:35:33:4f:4b:26:87:37:ea:5a:eb:fd:a4:
                    a4:8a:c3:70:31:a2:6e:da:9e:cd:78:70:0f:d4:07:
                    75:62:5d:ba:03:4f:52:44:25:33:9b:0f:53:17:7f:
                    54:8c:29:04:35:5a:9f:c2:ba:40:fd:4c:33:f8:f5:
                    f1:51:e5:a7:4c:89:2c:54:d5:e6:9a:0a:56:4a:1e:
                    10:21:d2:93:f2:80:72:0d:92:4b:8b:24:cb:75:b2:
                    1a:df:dd:45:ea:d4:44:b0:26:81:e5:f6:c3:ef:23:
                    31:03:f9:a3:99:34:4b:ab:45:6c:93:68:8c:f3:fc:
                    8f:74:2d:94:c8:6b:7d:f1:41:f7:6f:13:3c:cf:20:
                    16:10:70:76:a7:22:4a:b1:d9:3c:5d:7a:34:3f:c5:
                    94:8b:bb:1a:d2:78:b1:17:0e:da:30:6d:9c:3a:79:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:76:0C:8D:2A:59:A7:09:1F:FD:86:34:0E:F3:4E:34:A2:D5:CC:B6
            X509v3 Authority Key Identifier:
                keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:eb:94:f2:b9:fb:22:08:40:af:be:b6:77:52:fe:9a:cd:
         2b:a9:da:45:68:2f:a7:c3:16:b8:bb:9a:ac:d2:0a:0f:d8:03:
         f4:e2:37:8f:6e:24:97:28:72:e7:b5:37:e0:af:a0:b1:aa:d8:
         0d:04:e3:d8:b4:cb:d9:cf:93:08:7d:62:12:c5:b4:fb:17:df:
         21:5f:5a:a5:a4:11:b0:25:ab:f0:fd:5a:2a:54:58:4d:cb:0e:
         1b:09:3e:3b:14:ca:3e:79:bf:7b:43:69:e0:2e:da:96:86:98:
         d8:1e:08:f1:4c:74:19:31:0f:f7:bc:8c:1c:51:e0:36:1a:dd:
         7d:a8:aa:53:f9:c3:d5:50:f3:12:fd:5d:b0:ab:df:d7:f8:1d:
         c9:c8:cb:ef:83:bd:02:d9:7a:61:9f:e6:f3:e2:06:07:1e:f2:
         e4:a9:53:7b:12:db:be:ae:f7:87:52:3b:f6:8e:8e:0c:21:58:
         45:a5:e2:d4:f0:ce:00:b5:78:d4:7e:39:3a:df:b4:0e:ce:3e:
         12:08:70:8d:12:51:5e:7b:20:0f:ae:fb:46:da:4b:91:4b:28:
         b5:27:a4:78:4a:c2:08:0a:d3:17:1b:a8:b1:d8:07:aa:a1:8a:
         0b:5c:e7:0b:03:ad:c5:de:1f:4b:d4:bd:ad:8b:e2:7f:99:5a:
         5c:55:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:51:18 2025 by rpki-client