Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File:                     c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier:          fIYCUcElnU2azhNCBkSpXbc8KWwxwcbsn+5AHu519+Q=
Subject key identifier:   A4:5D:6E:F7:B3:DD:1B:A4:32:C2:79:1F:A2:CB:96:BE:EA:B2:8B:C6
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer:       /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial:       01976B17F0605DA5804D21355438DB24D9AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number:          1590
Signing time:             Fri 13 Jun 2025 21:00:20 +0000
Manifest this update:     Fri 13 Jun 2025 21:00:20 +0000
Manifest next update:     Sat 14 Jun 2025 21:00:20 +0000
Files and hashes:         1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: G21tzWsn6xGrFcIGhPKcVbKkahfMtX3zc4Mil+QYUk4=)
                          2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:17:f0:60:5d:a5:80:4d:21:35:54:38:db:24:d9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
        Validity
            Not Before: Jun 13 21:00:20 2025 GMT
            Not After : Jun 14 21:00:20 2025 GMT
        Subject: CN=a45d6ef7b3dd1ba432c2791fa2cb96beeab28bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:10:e4:12:69:82:0e:f0:20:5b:e2:45:0b:
                    93:0f:dd:3e:6b:13:af:33:61:18:6f:0f:c6:0f:45:
                    d5:3b:ef:35:d7:aa:de:b6:5b:4d:e2:b5:3b:ec:1c:
                    d7:4c:55:3e:77:27:b0:c5:a2:bd:50:66:e9:85:4e:
                    a4:ed:23:ae:c2:10:93:06:2c:bb:63:63:5f:e3:a1:
                    06:d1:f3:5b:8d:de:ef:c3:a7:e9:b8:a6:2e:2b:d4:
                    7c:69:58:ab:e7:56:97:43:76:f7:a4:af:2f:a5:0e:
                    c3:af:e6:96:44:3d:59:bf:36:a3:f1:a5:c9:f4:8d:
                    57:34:1c:d8:7c:fd:2c:05:57:14:b7:c4:47:19:64:
                    6d:a1:af:bc:85:d9:4a:8c:f5:8f:44:9e:fb:35:ed:
                    96:80:98:9c:04:a3:4c:8c:68:a8:4a:da:60:30:a9:
                    d2:e9:1c:42:21:90:67:6e:92:4d:cc:2e:a2:1d:61:
                    24:16:ef:35:84:03:46:ed:1a:b8:71:4b:eb:9e:86:
                    0d:c3:44:99:5f:ce:81:63:31:75:c5:fd:4c:38:36:
                    92:33:14:a4:dd:ea:55:62:0b:a1:ba:bd:dd:16:b0:
                    44:b8:ad:4e:f6:66:ce:42:5b:27:aa:a4:4b:af:51:
                    d8:b4:34:e7:8c:af:74:32:8b:83:01:bd:d5:39:c5:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5D:6E:F7:B3:DD:1B:A4:32:C2:79:1F:A2:CB:96:BE:EA:B2:8B:C6
            X509v3 Authority Key Identifier:
                keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:04:78:18:48:22:93:35:ea:9d:cf:a8:8d:51:97:76:61:07:
         6d:aa:ed:53:55:d7:20:06:87:36:82:1d:a8:57:91:0d:7d:94:
         8f:85:6c:d8:13:7b:2d:7c:91:b4:1a:55:5d:9f:0c:fa:2c:46:
         19:9c:de:52:2d:44:e3:2f:e3:d4:ab:1e:b1:a6:03:9d:28:06:
         01:69:70:36:e8:64:46:3b:ce:23:19:c4:d9:f6:3d:03:d9:d1:
         13:b3:84:92:dd:1c:9f:95:02:01:98:ec:36:29:94:b1:2c:7a:
         50:7b:15:33:cc:d3:65:9c:ef:97:59:ec:f9:8a:c8:d3:73:2f:
         ae:2d:b0:62:47:75:3f:7f:f4:7f:ce:ad:3f:bd:64:8b:99:7a:
         22:89:b3:a3:c7:6c:cd:ac:63:2c:f9:a5:66:7e:b4:65:54:7f:
         9e:ed:42:4b:56:58:07:1f:82:c5:cb:c8:2a:3d:f2:4a:08:4f:
         67:1c:d0:e4:52:c9:cf:5b:0f:2d:97:d4:1e:a7:08:2c:19:6c:
         7a:d2:96:f7:0e:c5:0a:50:8c:9a:5c:4a:b7:eb:b5:b1:68:d5:
         5c:a4:37:32:ff:41:ca:d4:b7:19:7f:ef:2c:06:aa:eb:d2:73:
         f9:c7:3a:c2:3e:aa:75:a5:e4:f5:4f:2c:12:df:9f:61:86:66:
         71:71:c4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:30:38 2025 by rpki-client