Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File:                     U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier:          6Bn4+9H4z08GFyPySEkBI3PoIEpqb+60mxYoGd+5Sd8=
Subject key identifier:   C8:7D:FC:59:32:F8:72:46:9D:44:EA:75:96:F7:C9:41:C7:01:F7:1D
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer:       /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial:       019757FF7A63D1C049B1E8D4E7C6D59A1760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number:          1585
Signing time:             Tue 10 Jun 2025 04:00:50 +0000
Manifest this update:     Tue 10 Jun 2025 04:00:50 +0000
Manifest next update:     Wed 11 Jun 2025 04:00:50 +0000
Files and hashes:         1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
                          2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: igdFUiqvSZRp6k9JgSx2honV3sksBTNSxfZoJwFBNcU=)
                          3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:ff:7a:63:d1:c0:49:b1:e8:d4:e7:c6:d5:9a:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
        Validity
            Not Before: Jun 10 04:00:50 2025 GMT
            Not After : Jun 11 04:00:50 2025 GMT
        Subject: CN=c87dfc5932f872469d44ea7596f7c941c701f71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6d:40:0f:c0:b4:29:9d:48:aa:74:12:b3:b0:
                    0c:d7:ec:6f:db:ce:5c:b3:fb:bd:64:f8:55:38:4b:
                    fb:08:56:e3:69:bc:23:2a:74:8f:81:55:e0:f9:c0:
                    9e:27:e2:b0:82:50:b9:c5:dc:02:1d:bc:5a:98:4d:
                    0a:06:7d:dd:e2:83:d0:ae:21:74:b9:45:f1:de:4c:
                    09:7c:16:b0:f8:55:34:4c:2f:aa:e6:93:8f:e1:f9:
                    a9:9e:72:5e:39:ae:0b:d9:c0:d0:ba:85:af:d9:fa:
                    92:e2:8e:c7:b0:fc:96:2d:86:e2:65:81:84:cb:a1:
                    06:cd:e3:6e:77:ed:cb:b0:a4:b4:63:30:36:88:3b:
                    ae:d6:6b:25:c1:61:cf:9d:39:c0:c6:cd:01:6c:58:
                    46:e8:85:1d:ff:07:be:a6:6d:7f:90:4e:82:91:ec:
                    3d:66:d1:08:d1:63:8b:aa:7d:d2:00:a2:42:37:73:
                    02:17:c6:ec:09:d6:e5:b2:e8:2b:13:61:d5:eb:e1:
                    35:dd:a3:c3:ce:da:d5:ae:0e:71:37:db:b7:a1:af:
                    2a:41:e1:d2:ee:9a:e4:6f:2f:ab:07:f8:bb:69:62:
                    36:e7:9b:13:0d:5c:20:32:50:2a:76:8a:c8:9e:bd:
                    a7:6a:76:bc:b3:b3:19:e4:d1:f5:0f:49:46:ec:18:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:FC:59:32:F8:72:46:9D:44:EA:75:96:F7:C9:41:C7:01:F7:1D
            X509v3 Authority Key Identifier:
                keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:84:e0:80:2e:9b:19:d3:48:3e:b2:cd:c7:39:bb:c0:4f:06:
         ac:a2:c1:4b:b0:69:27:5d:1f:7a:8c:f1:a9:99:28:81:43:99:
         ca:4d:57:4c:d2:82:b6:8d:1b:1b:b7:96:ab:d7:47:14:1c:a2:
         0b:5f:f9:2b:b6:80:ee:6e:f2:a4:7e:28:57:72:f0:aa:d1:1d:
         2e:eb:34:af:5d:29:b8:59:04:94:dd:72:83:13:ce:85:86:3e:
         49:46:b3:91:6a:7e:7b:bf:68:85:2b:a0:e3:d4:7a:da:c5:4c:
         6b:8a:89:1d:5f:26:98:2e:28:4d:87:09:4e:a8:98:3c:b1:4a:
         47:af:07:e9:97:f3:86:30:65:f1:53:58:e8:20:84:37:68:86:
         ce:f3:e3:95:03:7e:43:98:52:fb:4b:aa:ff:56:06:8c:42:8c:
         ba:b4:30:40:8a:79:75:46:87:89:1c:73:20:5a:56:b5:6d:e9:
         fc:d5:92:c8:0f:87:39:1c:f1:71:58:5a:c4:0e:12:c3:ab:b6:
         47:b8:bb:7b:41:43:ad:f6:47:0a:5f:ff:a7:06:2f:e1:9c:b4:
         be:c6:2d:cd:e6:d1:71:b1:79:41:1c:51:e2:21:c4:79:a5:dc:
         32:fe:7a:fd:c7:ab:62:32:1d:da:6a:56:fa:71:6e:5e:02:e0:
         28:5a:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:33:26 2025 by rpki-client