Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File:                     1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier:          VxwpIftc1loP41M1B9EcOU9e0CvdaiXfThIwtGVmGT8=
Subject key identifier:   87:4F:3D:EC:54:2C:15:62:9A:9C:AF:C7:98:66:FC:EE:6F:71:19:24
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer:       /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial:       0197B6A0A935DFDB99536BA22563795B23FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number:          0308
Signing time:             Sat 28 Jun 2025 13:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:11 +0000
Files and hashes:         1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: ZQLdv0ApucAWSsBLyMSk7tot6u+Ll30U27uGxaXL6vA=)
                          2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:a9:35:df:db:99:53:6b:a2:25:63:79:5b:23:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
        Validity
            Not Before: Jun 28 13:01:11 2025 GMT
            Not After : Jun 29 13:01:11 2025 GMT
        Subject: CN=874f3dec542c15629a9cafc79866fcee6f711924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:b1:28:82:e3:f7:91:04:c3:cf:33:23:f7:
                    0e:42:16:b9:c5:dd:7b:c9:f8:2f:43:4b:3b:87:91:
                    a6:48:54:03:e7:91:ea:99:15:c6:bf:27:f3:6a:1a:
                    9f:68:d0:20:c9:2a:fd:23:7e:b4:a5:87:b4:dd:10:
                    96:51:38:eb:d4:38:4b:07:d2:ee:aa:60:96:c3:10:
                    7c:28:b7:85:77:8d:bb:10:16:83:56:45:40:df:f1:
                    66:09:c9:4d:ea:9c:d0:0c:bf:aa:3a:79:7f:22:60:
                    6b:26:39:ca:bb:d4:4c:fc:9f:23:a6:14:48:71:46:
                    1d:05:9f:7c:28:7f:59:e8:9d:54:3c:c8:64:0a:39:
                    fb:78:57:e8:9b:5b:32:dd:f1:96:13:5d:35:a7:c8:
                    78:0e:0b:fe:4b:ef:55:33:2b:1b:ec:a9:49:ab:0a:
                    b3:4f:85:02:17:1c:ea:a0:80:38:db:eb:f6:c7:ac:
                    ba:cb:bf:a2:0d:ea:ba:9c:cf:5f:24:fe:0e:ca:ff:
                    76:b4:41:c8:0b:c4:3f:92:13:e7:ed:fe:56:26:62:
                    85:99:47:04:f4:62:8e:98:70:9c:d4:39:90:1c:d2:
                    4e:29:2f:69:2d:3f:2f:d6:0d:c9:bc:10:5c:e2:1a:
                    ef:b1:ad:79:1c:96:2b:64:44:95:b4:f3:b1:4d:4d:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4F:3D:EC:54:2C:15:62:9A:9C:AF:C7:98:66:FC:EE:6F:71:19:24
            X509v3 Authority Key Identifier:
                keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:16:19:95:d3:a5:60:ea:18:1f:48:58:73:bd:b4:51:f9:d0:
         60:9f:d8:1d:d6:61:ce:2f:aa:5c:2c:2f:b0:c6:7f:48:ab:5d:
         c6:85:05:90:97:aa:bc:98:f0:eb:f7:dd:5b:6d:1f:3d:29:01:
         c1:0b:64:83:bd:ab:f8:d3:81:6f:33:5f:a8:73:0c:5e:f1:ff:
         c3:23:32:6f:26:04:90:2a:ce:80:22:38:b3:7b:76:8a:03:aa:
         5a:8b:cc:0f:91:26:14:fd:a1:b3:82:34:c1:de:59:c1:7a:57:
         46:f4:5f:73:79:77:49:ea:c8:75:0b:06:8f:f7:22:ab:c3:b2:
         32:70:af:f7:0f:64:5b:83:e0:f4:eb:8c:25:44:ad:0b:62:f5:
         8e:d8:bc:be:0f:6f:85:34:67:7e:7a:b0:a3:b8:02:7e:e4:36:
         cb:3f:d6:97:e2:88:02:e4:48:8a:0b:0c:69:21:6e:f6:a5:df:
         30:00:db:48:a7:c4:7d:a1:86:0a:1c:9b:3e:81:7b:81:51:6d:
         77:5a:b3:c5:89:b2:9e:06:48:07:b5:84:1d:68:be:7f:d6:b3:
         97:96:11:36:4c:8e:3e:ee:95:55:7e:59:84:07:3a:53:44:6c:
         8b:b7:36:f0:83:68:88:32:e0:1b:4f:7f:9e:fc:c4:c6:8c:b0:
         ad:58:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:07 2025 by rpki-client