Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File:                     1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier:          8L18KjVHHiB1n2MAYW+r+YNsP3JtwpGo7Y+IO+KRgV0=
Subject key identifier:   E2:27:F3:A2:43:CA:8F:24:15:C0:A8:19:81:9C:11:68:D1:A8:F9:D4
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer:       /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial:       0197D776C665DDBDE849FDE404D982DFA4C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number:          0251
Signing time:             Fri 04 Jul 2025 22:02:54 +0000
Manifest this update:     Fri 04 Jul 2025 22:02:54 +0000
Manifest next update:     Sat 05 Jul 2025 22:02:54 +0000
Files and hashes:         1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: HivkFJWBRwB1GKrhHvVTPmIvlmaI7Lu57vvBMZHlMtU=)
                          2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d7:76:c6:65:dd:bd:e8:49:fd:e4:04:d9:82:df:a4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
        Validity
            Not Before: Jul  4 22:02:54 2025 GMT
            Not After : Jul  5 22:02:54 2025 GMT
        Subject: CN=e227f3a243ca8f2415c0a819819c1168d1a8f9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:a1:b2:2d:85:d0:d3:b6:f0:2c:09:eb:83:
                    ad:44:c9:46:ab:44:90:a9:5f:0c:5d:1d:dc:b5:e1:
                    16:81:11:3a:f4:3e:73:64:79:08:6e:04:4e:81:d1:
                    f6:f2:f3:8a:84:a0:73:31:18:41:b7:9a:98:82:ee:
                    38:1e:33:0a:42:78:f9:ec:2a:62:a4:51:98:09:27:
                    c7:4f:73:be:5d:9a:74:7a:0a:0c:c4:7e:f8:3d:09:
                    b8:12:1d:39:9d:9a:17:47:87:f8:06:c0:d5:d2:1f:
                    d7:84:ec:18:a3:c0:a3:59:4d:df:55:71:16:57:af:
                    f0:1c:e3:67:74:b0:ff:0b:fe:c2:01:aa:b6:ba:fa:
                    ce:25:d2:3c:e2:bb:59:d5:03:36:46:85:de:f1:37:
                    d3:86:33:b5:0b:93:4a:65:f9:45:f1:d8:c1:8f:38:
                    06:52:fe:2c:05:e8:3a:d1:72:17:07:be:93:8e:7a:
                    b5:ed:c8:43:b9:05:b6:3c:9c:e5:7b:e7:ac:2e:83:
                    49:75:4a:ba:91:bb:2c:1e:b9:cb:df:7d:ac:58:17:
                    56:f4:b2:db:33:0f:44:56:2a:f4:dc:c5:76:32:00:
                    af:81:f8:46:54:21:3d:e8:31:f1:17:8a:47:c6:f1:
                    22:81:65:d6:f1:97:ba:86:73:56:c0:e0:70:26:d4:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:F3:A2:43:CA:8F:24:15:C0:A8:19:81:9C:11:68:D1:A8:F9:D4
            X509v3 Authority Key Identifier:
                keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:6e:b9:54:7f:2e:28:f2:c9:62:54:43:69:59:08:2d:bb:
         80:97:b0:57:ad:ee:47:8c:00:c2:7f:ff:06:92:ee:a0:4d:5b:
         fd:6a:bf:22:cb:4e:77:53:b3:7b:59:78:20:7d:42:f2:d4:29:
         34:64:7e:04:93:f6:16:15:60:4c:3e:db:2a:bb:47:09:28:b7:
         81:0a:f5:fb:83:bf:52:a6:08:56:91:70:38:9e:01:8c:88:79:
         05:65:9e:41:92:d7:53:19:01:e8:09:1d:21:0b:ee:dc:43:20:
         d0:0d:da:25:c0:dd:30:19:77:79:df:19:01:e2:42:dc:28:b0:
         7c:5a:59:8e:66:1c:26:81:a5:ba:05:fb:e7:7e:1a:da:3e:fe:
         d5:ec:8c:11:d1:75:fa:05:80:b0:9c:8c:88:59:24:ec:95:a3:
         13:f3:ca:c4:2b:5f:26:a8:78:80:41:9e:6e:43:f5:6b:26:b2:
         5e:82:b1:88:7b:5e:83:49:e0:eb:8f:d9:35:52:a9:3b:e4:7e:
         2e:ca:02:27:3a:6b:f0:f9:7d:a1:53:0c:94:9c:dd:1c:ad:c2:
         43:96:d9:94:e8:14:45:49:a6:37:6e:fc:b4:d3:1e:3e:f8:ce:
         48:81:42:bf:26:16:9c:4c:76:7b:2d:d5:5b:7e:a2:a9:0c:e3:
         b6:8c:e7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:21:01 2025 by rpki-client