Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File:                     MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier:          yxvwJbTwXTfn9jypizWWcbGeWz+/1ZyRXAbKcXIDdlw=
Subject key identifier:   A9:79:19:83:63:8D:74:15:27:BD:6F:E5:36:17:B7:5C:BE:12:E3:16
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       0196C4CC382A9A725E0A905FBAE23D580FEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number:          1540
Signing time:             Mon 12 May 2025 14:00:40 +0000
Manifest this update:     Mon 12 May 2025 14:00:40 +0000
Manifest next update:     Tue 13 May 2025 14:00:40 +0000
Files and hashes:         1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=)
                          2: 4XJYPiN1fgyY_K6wVqkzO9GGpIo.roa (hash: HslWaDijgsXRLbUJY37P5SIKUX/YCI1vBK/fp1leFRU=)
                          3: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=)
                          4: ATev8_uhunQc5j7herGHoXGBx0s.roa (hash: raqWEdHQFWUAKbr4xna0wvj80ivdH8FgqZZk8a2xIoc=)
                          5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: nV6/HOa1fcpXVMR/kLO2tNGXhpD7zzpZHCRPaRI13Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:cc:38:2a:9a:72:5e:0a:90:5f:ba:e2:3d:58:0f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: May 12 14:00:40 2025 GMT
            Not After : May 13 14:00:40 2025 GMT
        Subject: CN=a9791983638d741527bd6fe53617b75cbe12e316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:9c:0f:79:df:f8:d7:b6:ac:af:2c:a0:f8:
                    fa:e9:55:96:d8:d8:ec:65:4b:9b:d5:71:c1:66:4e:
                    fd:fc:47:d8:3f:9e:a3:e2:b0:13:e7:05:5e:f1:b2:
                    2e:d0:cc:8b:87:14:21:c2:d4:65:84:e3:bd:cf:39:
                    71:7c:f0:57:e7:e8:88:83:40:9b:4c:c1:49:6b:8e:
                    7f:e5:58:f9:56:90:1f:c3:26:8b:cb:2a:ca:8a:a4:
                    e1:d2:e9:76:e3:24:04:02:9c:6b:35:7e:80:0a:71:
                    34:5c:06:a8:88:a3:f4:d1:f4:72:c3:63:36:82:a3:
                    86:b2:05:ad:dd:c2:48:68:47:ca:2f:cd:61:c1:9a:
                    8f:4d:0d:37:a4:f1:60:45:a2:2b:84:17:ba:20:0b:
                    cc:24:88:dc:ca:2b:c2:db:c2:ca:75:f6:d5:f5:7e:
                    e2:1f:33:1c:d5:47:c3:8c:93:be:77:b9:0d:66:7a:
                    38:b7:20:5b:b6:b1:f0:d8:a0:f5:4b:83:df:be:09:
                    86:79:a4:c9:a5:07:f0:e7:67:99:f9:2d:dc:5f:32:
                    56:f8:a1:59:8c:7b:7c:3e:d2:9f:6f:ea:14:fc:cc:
                    fc:da:f0:a8:46:ff:74:f8:e1:3a:1f:82:2d:ac:40:
                    f0:76:90:e7:04:14:6b:92:d1:16:d6:55:59:9b:a2:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:79:19:83:63:8D:74:15:27:BD:6F:E5:36:17:B7:5C:BE:12:E3:16
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:34:cc:ee:d7:95:3a:47:57:e9:40:20:39:48:dd:e9:a2:aa:
         22:61:6e:ae:fb:b3:40:45:df:23:82:28:0e:d6:d6:77:f5:3a:
         4f:24:29:45:1b:af:fd:9f:b3:f6:1a:ca:fd:77:28:84:60:b2:
         ac:e0:2e:91:43:4a:30:23:49:cf:1e:82:d8:0b:17:45:f5:27:
         e4:9b:3d:6e:f5:58:3e:fd:b9:db:0a:24:b3:28:fb:8b:e8:12:
         69:5c:9b:f2:df:2d:a2:d6:bd:61:1a:7b:9c:70:1a:04:08:df:
         46:d7:d3:db:80:92:ad:fe:f2:04:f2:83:6e:ee:2e:2d:6a:9b:
         33:6f:5c:bb:42:8f:02:02:5e:be:5f:b4:ca:1c:f5:75:67:8c:
         bb:75:7c:dd:26:ea:7b:08:0e:ca:3a:a6:82:dd:6f:48:f2:dd:
         5c:6a:b7:43:59:25:89:7c:f7:59:4b:00:5b:91:8b:35:37:6a:
         0e:e3:e5:76:6e:e1:b1:ea:41:91:46:82:42:09:73:ed:f8:3c:
         28:68:cc:52:1c:ae:76:fb:6c:4b:a8:c6:05:5e:2e:02:01:6a:
         ca:0d:51:a0:2a:9d:7d:c3:3b:88:26:c6:fa:0c:dd:0d:2a:64:
         a0:07:4f:00:8c:99:be:fd:2e:28:36:62:66:5c:0f:e4:c8:9e:
         14:fa:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:17:26 2025 by rpki-client