Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
File:                     1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json)
Hash identifier:          5vjIwnZupkJOlnRrIr+3emwfLbLFROiIelFDzvYGb9A=
Subject key identifier:   44:D4:44:91:B2:4E:A3:93:DB:E1:44:CD:6B:C5:DF:A1:79:64:95:3C
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Certificate issuer:       /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial:       0197B70F1723F1872C6743FC639F042FABE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
Manifest number:          0218
Signing time:             Sat 28 Jun 2025 15:01:48 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:48 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:48 +0000
Files and hashes:         1: 1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa (hash: i5ay2vgUuK/RxNcOzQcdamhI5FZ4CZrQepcSEalRxfU=)
                          2: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: tyunNKshaqzETvRnKYijPbwxyZvmeFLD3wtqg/rGoQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:17:23:f1:87:2c:67:43:fc:63:9f:04:2f:ab:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
        Validity
            Not Before: Jun 28 15:01:48 2025 GMT
            Not After : Jun 29 15:01:48 2025 GMT
        Subject: CN=44d44491b24ea393dbe144cd6bc5dfa17964953c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:f0:52:1c:77:f7:72:ea:cc:3e:7e:87:9c:
                    ce:3b:b0:b8:cb:b3:52:5b:53:b9:7e:37:48:98:5e:
                    d3:97:f3:c8:cb:b1:12:30:93:8b:81:dc:4b:a2:38:
                    36:ed:ee:f6:be:9a:5b:d6:68:e7:01:ea:1b:af:21:
                    75:1f:b2:76:e7:6d:09:1c:ab:bf:b4:da:f3:9c:78:
                    81:14:6e:36:31:01:c5:5f:53:5c:92:b4:58:ba:ff:
                    b4:2c:3d:1d:92:d8:3e:79:f7:26:cb:dd:ba:9e:6d:
                    0e:4d:a0:2a:d4:3b:63:df:87:70:c3:f8:e2:16:97:
                    7d:8d:7d:90:d2:df:83:67:47:86:68:9d:22:b9:07:
                    47:0d:68:92:40:26:c9:38:71:00:ef:8a:c8:d4:b7:
                    f8:a5:19:e1:44:72:31:e2:a0:23:de:ef:6f:3a:e8:
                    59:a4:2e:b3:d7:d9:58:9f:4d:ba:4d:56:99:98:9b:
                    12:06:b1:b1:98:d7:0d:58:a0:43:b0:9a:04:ab:dc:
                    b0:ef:f9:23:fd:54:4a:dd:f3:b2:93:3f:df:5d:34:
                    e2:04:dd:4d:08:d4:92:d3:f0:0a:c0:25:f5:47:b6:
                    2e:58:1a:a8:76:b6:b2:6b:22:13:03:5a:26:60:85:
                    c3:5a:23:d6:e1:55:9a:22:4b:fc:8b:20:68:69:4e:
                    e1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D4:44:91:B2:4E:A3:93:DB:E1:44:CD:6B:C5:DF:A1:79:64:95:3C
            X509v3 Authority Key Identifier:
                keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:20:3b:d7:cf:90:6f:11:e8:6c:7c:c9:8a:0e:2e:5b:ed:02:
         43:7d:4e:88:51:58:b4:90:cc:49:d8:88:04:85:04:f4:ad:c0:
         94:94:50:96:4e:09:32:9f:72:40:38:b8:62:63:41:7f:e5:81:
         eb:34:8d:73:4c:d0:1d:c6:e4:5e:7c:a3:4e:2b:3e:4a:1d:96:
         d8:aa:76:42:4e:0e:8d:cc:85:42:91:30:32:ec:d7:03:d4:04:
         45:d1:8f:1e:0d:08:95:6a:6e:bc:80:ec:fd:cb:4a:e2:59:eb:
         3b:cf:93:7d:bc:62:e4:53:87:d3:36:08:b5:af:30:f6:87:65:
         c2:f1:7f:ed:ef:4b:51:9b:49:b9:28:fe:4a:e7:bb:24:8d:33:
         d2:49:d3:56:9c:1a:99:e6:0a:78:e8:a2:c9:29:43:55:ba:df:
         d3:91:de:bb:d4:a8:08:4e:97:4c:88:a5:c7:84:77:13:7a:19:
         a3:c6:bf:43:51:97:c3:7a:e5:ac:f0:0e:ae:c7:5e:53:9c:14:
         43:79:87:23:b8:43:6f:f5:71:26:56:ea:3e:e4:0b:0b:cc:1b:
         92:25:4c:f2:dd:30:59:a2:79:17:d3:78:f9:62:2c:3d:c6:85:
         40:74:51:54:f6:91:5e:4a:65:8d:ad:a6:78:11:c4:ad:43:13:
         58:fa:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:32 2025 by rpki-client