Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File:                     ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier:          qtr8hstoxN0ogOYfkYmiSJlhzAFILjz8IEaNhMgO/1A=
Subject key identifier:   3D:21:5C:26:62:B3:88:3A:35:33:9F:F7:D9:F9:A4:55:00:41:D1:87
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer:       /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial:       0197530FBC8950C507278774E08376E63903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number:          1584
Signing time:             Mon 09 Jun 2025 05:00:29 +0000
Manifest this update:     Mon 09 Jun 2025 05:00:29 +0000
Manifest next update:     Tue 10 Jun 2025 05:00:29 +0000
Files and hashes:         1: RhGwqrXWoHdf_u5Xw8TxbPt7XXk.roa (hash: hQavpFz2oCU1+0mLco5J0o7jUBnjsvfgN8INGoEF0q0=)
                          2: a79ubTTcO-rbEIzEJnpKg6XrOxE.roa (hash: IYsHiJt20/J4LFVzebr5lpEx8b1KgX8azoIHYgZmQIM=)
                          3: cwftnOMJWL6OI0cFl6W2kZiEivw.roa (hash: tMF0bm//N5hKVf/varVEdqE9/zqDLvcE/naNsmtxwqE=)
                          4: sa-iiEQk_i_ESYW0XEVLc5fUEDM.roa (hash: tk2qiKz5w3ItJrfdyPO9YfeczBBuvWHAVgHNYJne0ws=)
                          5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: lC8d81qyFxY1rQc90eWFjmfuvpk5pk0pve8D9PcPXeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:0f:bc:89:50:c5:07:27:87:74:e0:83:76:e6:39:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
        Validity
            Not Before: Jun  9 05:00:29 2025 GMT
            Not After : Jun 10 05:00:29 2025 GMT
        Subject: CN=3d215c2662b3883a35339ff7d9f9a4550041d187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:74:15:60:34:2c:c4:ce:1c:c5:1e:df:da:
                    14:c6:5a:00:85:4e:83:43:6f:4d:3f:d1:4b:cc:5d:
                    08:de:22:62:f2:b8:de:5e:6b:72:49:6e:2a:8d:04:
                    51:24:15:7a:7d:00:9a:de:96:a5:c6:81:a9:1b:2b:
                    ba:2d:e8:60:99:c9:bd:5a:3e:36:dc:e6:f4:58:70:
                    db:f6:d5:ac:98:5d:f5:92:06:37:c5:48:a2:4b:4d:
                    9c:a5:2b:7e:ad:a0:3b:a2:6f:01:6f:92:da:1d:52:
                    70:56:58:71:50:67:16:a9:95:61:21:af:9b:9f:09:
                    ed:85:e4:de:42:30:60:96:5f:77:0a:aa:c8:c0:17:
                    32:3f:bb:82:a8:bc:34:46:30:06:c6:21:f7:86:a7:
                    9f:be:1a:d9:60:e0:70:f2:38:17:51:fb:0c:73:48:
                    38:08:3c:52:a1:d9:5b:d2:a9:56:29:7f:4c:60:d9:
                    29:01:5b:40:8c:1a:06:3b:d0:1d:4e:8d:78:67:17:
                    bb:27:27:f1:d4:0d:59:ba:40:22:60:92:92:5d:1b:
                    27:86:be:c7:ed:a0:c6:ec:b7:32:c5:67:3b:7a:b1:
                    e4:8b:e2:9b:82:0c:95:29:75:50:a7:75:29:fa:c2:
                    d4:bb:9e:cc:b9:5c:5b:83:5b:b3:cd:dc:37:fa:81:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:21:5C:26:62:B3:88:3A:35:33:9F:F7:D9:F9:A4:55:00:41:D1:87
            X509v3 Authority Key Identifier:
                keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:26:66:ac:0b:09:e6:e4:79:d1:0b:51:c6:9c:69:ce:8b:9b:
         76:e9:9b:a7:91:10:23:c2:4b:6a:b7:d6:ee:c0:33:ec:ba:99:
         7f:7e:9c:58:66:c1:f5:6a:eb:84:df:b6:be:04:bf:c6:d7:39:
         0e:d7:1d:fc:14:b9:74:4e:3c:f8:cd:c7:d3:ca:24:e7:74:d4:
         ff:80:44:a7:45:77:b5:37:13:87:00:ca:26:8d:bf:21:23:d0:
         92:3a:5f:40:40:3f:f9:1b:15:fb:b0:d2:9b:b4:23:cc:da:28:
         7d:c9:1e:6b:a0:fd:e6:cc:cf:08:14:53:c2:8e:b8:a5:ab:2a:
         ed:67:d0:ab:a0:ed:9f:4e:51:74:2c:cb:4b:9d:e4:c1:e7:df:
         26:b4:95:6f:da:de:07:c7:c3:a5:5a:e7:6e:67:5a:85:16:72:
         1a:ce:69:84:9d:db:c6:73:a5:f1:fa:c8:21:a1:07:9f:c7:6b:
         5b:af:77:ad:cd:91:de:87:73:fd:19:c3:83:b5:18:a0:6e:47:
         90:30:88:b6:91:5f:93:55:d3:8a:10:81:a8:c1:66:be:f5:ea:
         08:d3:cd:c7:d6:82:a4:5e:e1:b3:c8:38:b0:bb:e2:b0:df:5b:
         ed:d9:89:59:8b:03:b7:14:b4:94:22:01:2b:bc:79:ba:bb:f9:
         9d:49:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:47:36 2025 by rpki-client