Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File:                     1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier:          T7GeEf5ZC/+zEMWBbSkYc0lasDZYV3RJ2tYgelvv2OE=
Subject key identifier:   BD:66:2F:DD:5A:F3:EE:00:C4:10:E1:46:E2:8D:55:92:56:47:D4:E1
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer:       /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial:       0196B1EA7B51D7FB71B0BDEF58F29380D8CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number:          0281
Signing time:             Thu 08 May 2025 22:00:56 +0000
Manifest this update:     Thu 08 May 2025 22:00:56 +0000
Manifest next update:     Fri 09 May 2025 22:00:56 +0000
Files and hashes:         1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: cJwXs54nnIa14WK1cseyamr737ZAkpUfofons7UtoN8=)
                          2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:7b:51:d7:fb:71:b0:bd:ef:58:f2:93:80:d8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
        Validity
            Not Before: May  8 22:00:56 2025 GMT
            Not After : May  9 22:00:56 2025 GMT
        Subject: CN=bd662fdd5af3ee00c410e146e28d55925647d4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:a4:ce:42:fe:84:38:b2:11:4a:10:ce:02:
                    35:aa:33:fe:60:0d:45:5d:34:58:c0:7b:b8:65:30:
                    12:4f:84:68:43:ab:b7:a7:6f:b6:f4:e9:40:87:79:
                    09:ee:b6:75:ea:d5:5d:7c:d6:d7:bc:d9:bc:88:8e:
                    19:2b:d0:ee:ac:2a:eb:c6:0d:6f:04:ae:15:81:60:
                    eb:c2:58:81:84:dc:88:fb:41:f5:5d:19:16:9f:f4:
                    1e:4d:be:0c:9d:3d:2c:45:a8:41:cc:1e:dd:6e:dd:
                    25:33:fe:18:f3:de:d8:d8:e2:60:1f:87:eb:57:54:
                    5f:e1:bd:d1:19:b1:18:c7:b0:b6:0e:73:a1:f5:39:
                    93:1a:aa:53:4a:03:df:be:10:2b:50:07:24:94:a4:
                    0c:dc:1e:9e:a6:cf:d6:e0:a3:a0:28:04:eb:e5:82:
                    f5:7d:98:3b:02:af:6b:29:f5:74:0f:b6:02:76:96:
                    99:09:fd:d2:70:d4:45:db:8d:f3:e4:08:a6:f5:bd:
                    2a:1a:6a:10:82:28:3d:5d:33:68:51:08:cf:cd:a3:
                    04:b7:0b:03:e5:eb:92:3e:c0:2c:6e:83:27:8e:fc:
                    8f:b5:e6:af:ec:42:bc:ca:29:3e:52:6e:f1:91:51:
                    9c:d3:e9:69:56:f0:e8:25:13:5d:b6:f1:5c:1e:99:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:66:2F:DD:5A:F3:EE:00:C4:10:E1:46:E2:8D:55:92:56:47:D4:E1
            X509v3 Authority Key Identifier:
                keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:37:88:35:69:5c:14:83:4a:40:0f:e0:50:55:9c:f1:28:bf:
         10:e6:29:d5:82:43:25:70:cc:e5:91:ff:1f:8b:16:fd:f9:5e:
         4f:da:ef:cb:66:43:44:ed:70:2e:0b:08:47:45:f3:92:6b:49:
         96:b4:27:13:8f:77:81:a8:19:1d:f0:55:43:6f:4b:51:3f:a5:
         1e:a4:e5:e0:69:39:cf:14:6e:24:4e:80:08:ab:1e:5c:b6:55:
         40:86:7f:09:76:ce:11:64:97:b4:9f:fd:13:cf:55:30:fb:ca:
         d4:a8:8a:ff:01:68:8e:af:2c:79:2f:93:51:66:a4:2d:50:23:
         f1:0f:a5:90:4b:fe:e1:32:d8:9d:1b:93:35:0e:9f:f1:a7:10:
         1b:12:91:df:74:a6:0e:1e:a3:bd:d8:23:76:40:18:ab:15:55:
         a9:2b:1f:56:4c:d1:1d:d5:c2:11:26:29:48:7a:37:02:41:23:
         b8:3a:4c:fb:3f:4a:d4:e2:73:f0:79:ac:19:79:09:0d:7d:3e:
         02:4c:18:87:86:d0:e5:b6:91:78:07:7a:2b:83:e2:38:0a:f9:
         58:48:84:7d:9d:63:1d:62:78:89:cf:73:8b:16:ab:b5:f6:50:
         e8:94:f2:0e:ac:79:b1:58:52:3f:95:55:11:e5:84:78:33:9e:
         83:b0:e1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:02:48 2025 by rpki-client