Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
File:                     1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json)
Hash identifier:          aCnZMTC75OiNL72iCp9n2tLC8FQyXQHjC/fV7tfIvfM=
Subject key identifier:   2E:81:78:EC:1D:13:67:86:1D:5D:27:FB:28:5C:93:10:03:6F:D5:94
Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
Certificate issuer:       /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Certificate serial:       0196C34B6A45FA07CB9BAF52D08BD428A688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
Manifest number:          02D9
Signing time:             Mon 12 May 2025 07:00:21 +0000
Manifest this update:     Mon 12 May 2025 07:00:21 +0000
Manifest next update:     Tue 13 May 2025 07:00:21 +0000
Files and hashes:         1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: VG2HXqN4chUsZoHYdIAvUQynBKzFdbDHbM0CMIFqpI8=)
                          2: D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa (hash: gHeiDeVEOHYv0WXJX1y/YBwNlFOyEUt5hFygVZ9yIyc=)
                          3: YNsqLkitHpqkjiltdLgc2bdx6rs.roa (hash: 3Qov5yHW6YQLGF3KdMXPXf4671PbN4pLA5bsaPPsRlI=)
                          4: gkfVq5pqris09sYZ6oxV9_B3k7k.roa (hash: txlMX2TP/JiHw0qHy7bbrrf1DRw3ThhHjdL7DQDHFqs=)
                          5: zi6tgxxdXu-KjRvwqkHo4TAbCCY.roa (hash: /Ka11sy39OKnCI674OTDKtIC713gWaXNerptag8ixr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4b:6a:45:fa:07:cb:9b:af:52:d0:8b:d4:28:a6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
        Validity
            Not Before: May 12 07:00:21 2025 GMT
            Not After : May 13 07:00:21 2025 GMT
        Subject: CN=2e8178ec1d1367861d5d27fb285c9310036fd594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:12:67:99:cb:fd:ff:90:69:10:26:31:a7:da:
                    09:32:e0:77:a7:d1:2b:00:e9:e8:a9:5e:63:18:8c:
                    47:50:4c:9c:d6:bf:6e:5a:ca:1c:a5:78:d6:21:e0:
                    e2:e0:39:6b:ce:8e:45:0c:99:d1:a2:2b:c4:91:60:
                    1c:ea:7f:d1:74:f9:6c:9a:a0:c1:af:7f:88:7d:2d:
                    57:f2:89:56:d5:4b:4e:8c:62:77:f8:2e:9f:e7:aa:
                    df:59:44:8e:98:36:51:59:4a:4f:d8:76:7d:65:2f:
                    89:a9:19:3f:b1:79:2f:08:0b:f0:03:d5:6e:65:3a:
                    aa:e6:78:02:be:af:3d:da:5e:98:7c:e7:96:a4:1c:
                    09:7a:92:76:8d:87:61:37:96:64:e3:30:fd:16:10:
                    6f:b8:cd:b0:19:4c:1a:cb:c6:a0:93:f3:38:12:03:
                    e9:3d:d9:84:2b:62:60:a2:ff:1f:e4:11:5b:72:c7:
                    12:f5:6a:c8:69:be:ec:b3:6a:5b:9f:28:bd:13:68:
                    13:3c:a2:67:74:07:1f:c8:9c:2a:2f:99:33:0d:74:
                    52:d2:29:3a:4c:92:0f:58:67:56:38:42:f1:7c:80:
                    fe:1c:13:b4:b4:d3:1c:ef:88:42:4b:9d:87:bf:32:
                    dd:36:09:e6:72:85:20:78:75:a5:dc:d7:74:d1:ac:
                    5d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:78:EC:1D:13:67:86:1D:5D:27:FB:28:5C:93:10:03:6F:D5:94
            X509v3 Authority Key Identifier:
                keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5c:37:80:5a:87:bf:16:e8:39:d8:69:00:2c:c3:5d:fa:44:
         ef:2f:f9:2f:d5:c9:e7:41:70:2f:d0:bb:e2:5d:b0:e8:32:39:
         32:bc:5a:0d:3d:84:7c:fb:86:9c:09:f5:48:99:3d:3c:d2:93:
         5f:13:24:e1:b6:21:d9:1f:56:0d:05:c3:e0:41:a6:65:48:25:
         46:c9:04:b8:ec:7f:0c:bc:a1:43:51:70:62:2a:ff:86:38:09:
         1a:e2:c6:c8:d7:81:39:6b:77:60:36:12:fd:9a:19:18:b6:8b:
         5c:b9:1a:92:5b:b1:8f:d0:a4:ed:fa:27:18:c5:c6:4f:f7:60:
         14:69:1e:08:1b:8e:c5:f5:e8:d7:30:75:9c:94:4f:93:25:f1:
         07:19:f8:00:89:6d:37:7b:32:ea:f8:f4:75:84:63:44:a7:0c:
         c7:fb:2a:e4:49:a0:82:3f:a1:19:cb:ed:bd:d2:5d:58:d1:cd:
         ca:76:57:2e:40:ce:0b:01:b2:5c:01:02:98:e7:f5:b7:29:7d:
         61:e3:5a:a6:b8:dd:65:c0:ce:b1:3f:ba:fd:7f:9c:59:d1:33:
         a9:00:5a:61:53:4c:00:47:4b:97:4c:48:30:15:03:2e:d1:27:
         b4:23:60:57:6d:04:ef:03:b5:49:35:b3:93:9f:28:67:a0:e8:
         ed:1a:7b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:36:52 2025 by rpki-client