Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File:                     1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier:          s+k5ymMHobrTEZY40WZuk5uaQPt7vZt+rOPXQIfgEsU=
Subject key identifier:   A5:5A:45:E8:00:D1:4A:9D:23:3A:50:76:3A:CC:2E:A6:3D:A3:58:7A
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       0197B70EB29DB077941A569A1F53FF3089D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number:          1188
Signing time:             Sat 28 Jun 2025 15:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:23 +0000
Files and hashes:         1: 0cg-ABQ5F07wo1zUc9k0K5Ly8to.roa (hash: Rkj4lRwYBqE7QsZIcMHOzWOT71EQLWq7kKtekOL+dc8=)
                          2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: 6mdHzOnK3M3Q3ck0rxqaKp3p9ZGuigHSo09FsLBIHgQ=)
                          3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=)
                          4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=)
                          5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:b2:9d:b0:77:94:1a:56:9a:1f:53:ff:30:89:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: Jun 28 15:01:23 2025 GMT
            Not After : Jun 29 15:01:23 2025 GMT
        Subject: CN=a55a45e800d14a9d233a50763acc2ea63da3587a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:00:89:bf:fd:ed:d3:6b:42:10:9f:3d:d2:
                    94:03:a3:1e:dc:8d:23:6d:73:d3:89:57:bd:20:ff:
                    67:9b:66:38:36:93:d3:16:b1:0d:25:5c:90:05:61:
                    d7:de:a3:9b:e4:67:92:76:10:35:d9:4e:2b:de:43:
                    bf:0f:ec:76:30:1c:36:9c:bf:cd:db:76:44:e9:1c:
                    d9:3f:93:fd:41:d4:d5:0b:81:da:a2:ca:07:da:67:
                    3e:1c:ef:ce:b9:a8:eb:ba:47:b4:6a:a6:37:22:19:
                    f6:ce:04:6a:8f:be:56:95:5b:5f:d8:15:f8:0c:40:
                    3a:3f:47:a5:d3:47:4f:7c:67:ff:dc:84:2d:e8:cf:
                    83:6a:37:eb:20:98:85:6e:f9:a6:b9:11:cc:26:02:
                    dc:2e:9d:27:bb:5b:7e:d6:42:84:98:cf:ff:0e:79:
                    94:6f:ae:34:5d:a5:cf:e8:ed:51:e7:7a:9c:69:47:
                    40:be:43:cc:e3:e4:2b:a6:27:9d:8a:2b:e3:73:9c:
                    b6:6f:d9:68:b2:c7:b5:e1:52:a2:f9:32:2e:90:1b:
                    9d:f6:57:0e:b1:59:07:5b:07:59:01:7f:a8:03:f4:
                    65:0e:0d:e3:61:42:a6:17:25:64:6c:53:bf:58:a7:
                    6a:9c:c3:d4:c9:5a:3f:42:dd:9b:30:f7:b6:97:0f:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5A:45:E8:00:D1:4A:9D:23:3A:50:76:3A:CC:2E:A6:3D:A3:58:7A
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:92:b1:f3:11:f5:22:e1:48:a1:95:c5:db:62:6a:8f:dc:35:
         6f:61:88:01:4e:d3:5b:81:8d:53:47:69:1f:db:26:dd:fb:3f:
         9a:b1:16:b1:f8:ef:fd:05:17:d3:a4:e6:fa:0e:d2:92:96:c3:
         7c:8e:98:89:c6:bf:48:be:e4:bc:a5:b4:0d:15:82:04:9a:05:
         8f:3b:c6:65:34:55:be:25:68:0c:1e:60:3a:6a:20:29:88:3a:
         91:8c:ea:83:b9:34:fe:32:cd:37:8d:87:7a:fc:37:47:11:2e:
         0c:ab:e8:03:a9:ec:18:7e:75:ee:93:41:18:8b:d7:fe:0c:b3:
         57:c6:27:56:6c:9a:61:1e:e7:f7:4f:1d:d6:86:c5:5f:c7:87:
         1e:25:79:2e:59:50:99:51:06:99:cb:79:84:67:40:cd:c2:e9:
         01:49:1a:4b:9e:5f:33:31:26:c4:a5:8a:eb:3c:f9:bd:36:bb:
         46:ba:5d:86:07:79:95:71:52:6f:a2:6e:cc:b4:f6:fa:fe:41:
         38:cd:ad:9e:33:54:bd:2d:0a:5a:35:68:a0:97:63:56:83:3c:
         59:98:1f:2c:60:9e:b5:e2:44:45:f4:f8:fc:6a:94:5f:03:6c:
         1e:aa:15:56:eb:f5:e3:c5:4e:70:16:94:5e:fa:88:08:df:6e:
         d9:dd:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:45 2025 by rpki-client