Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File:                     1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier:          OofBFpJNFK2Y9KmN2xhZMYj7xzgYYvGft4rRgcqGdVk=
Subject key identifier:   52:D6:55:3D:95:AD:8A:52:32:3B:15:F2:C9:C5:17:92:48:61:7F:C4
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer:       /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial:       0196BDEECC23620229DFCB2D58AC53302F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 06:01:05 +0000
Manifest this update:     Sun 11 May 2025 06:01:05 +0000
Manifest next update:     Mon 12 May 2025 06:01:05 +0000
Files and hashes:         1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: pULNsydCP0MLLhW2yIdW7W1HJqq9k0Rjj06A01cqIHo=)
                          2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:ee:cc:23:62:02:29:df:cb:2d:58:ac:53:30:2f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
        Validity
            Not Before: May 11 06:01:05 2025 GMT
            Not After : May 12 06:01:05 2025 GMT
        Subject: CN=52d6553d95ad8a52323b15f2c9c5179248617fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:8a:5d:36:8a:b7:30:83:2a:36:a9:48:ba:
                    62:43:32:10:cc:9a:91:36:96:aa:7a:a6:53:b6:ae:
                    78:cd:2d:38:94:5a:a2:c3:4a:d3:c9:26:cc:db:af:
                    ff:bb:1c:49:24:7a:28:6c:5b:00:e8:7b:d9:70:0d:
                    f4:76:f5:21:0a:57:18:0a:3f:cf:0a:11:57:ce:74:
                    d5:22:c6:dd:d4:3c:15:20:87:9e:f3:b5:5c:a1:5a:
                    c2:54:41:76:25:48:65:6d:82:9c:d7:c3:54:be:a4:
                    65:d0:19:4c:8c:2c:d2:8d:0b:c9:6d:e2:c9:5c:26:
                    9a:06:71:a4:54:bf:a3:99:9a:45:74:c8:87:20:77:
                    62:2b:b9:67:f7:45:e4:17:fc:5b:81:22:7b:b2:7e:
                    80:98:85:ea:c4:b2:46:61:d8:71:e5:55:5c:be:cf:
                    f5:dc:13:a1:12:1b:eb:24:3f:b1:bf:09:f1:7a:36:
                    2b:8d:80:8e:75:a3:40:26:5c:3d:50:3d:cb:49:b6:
                    e7:43:df:7e:c4:37:8e:c6:45:90:ed:b3:96:bd:29:
                    4b:81:cb:85:36:f2:91:ac:83:13:aa:27:7c:8e:57:
                    03:e9:53:d5:05:dd:8b:d7:c7:59:5b:a6:c6:4f:ae:
                    34:80:d1:64:69:5c:9f:e3:84:11:10:54:30:19:b0:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D6:55:3D:95:AD:8A:52:32:3B:15:F2:C9:C5:17:92:48:61:7F:C4
            X509v3 Authority Key Identifier:
                keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:02:5a:9b:e8:cd:b3:a3:e8:3c:84:15:3a:5d:a8:22:5a:cf:
         f2:dd:1b:a7:b5:cd:27:2e:4c:10:83:38:35:6a:2a:a1:cb:09:
         ab:bf:26:e8:f9:2a:c1:b6:9a:c4:49:bc:23:da:63:0f:b5:08:
         8e:3e:a1:58:d0:c7:f8:b2:db:97:85:53:5a:a0:98:2e:7b:18:
         99:2e:65:fb:30:78:28:34:3c:b3:ae:9b:68:cd:cc:bc:83:e2:
         cb:d8:08:7a:1a:5b:91:39:0f:e4:48:2f:e5:9a:4b:18:23:ec:
         57:37:83:c2:82:0c:5a:4c:49:1a:35:b1:88:a1:62:55:46:77:
         d6:6b:c5:2c:f9:b9:4b:0d:09:57:73:38:6a:1d:28:69:f8:9e:
         aa:f4:69:d4:fc:94:22:4e:d4:db:3c:03:84:cb:a6:bf:fb:4a:
         cb:43:4a:f0:7e:0e:43:88:49:79:c3:f2:39:7a:f4:4f:ce:51:
         3e:f0:33:15:54:54:44:a6:2f:28:24:2c:11:45:90:b6:31:a0:
         91:47:25:30:0e:ec:94:c7:33:8a:79:ab:79:d5:b4:66:38:c0:
         a0:de:22:12:7e:ac:47:18:3a:09:a5:49:c9:37:f8:38:60:37:
         85:6e:f0:e3:08:49:c8:2a:d7:0f:41:22:13:34:ef:85:3d:90:
         eb:87:78:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:01:17 2025 by rpki-client