Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File:                     r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier:          My2t155Z1tNHFrf66D4u4UQ8KSyYBasR1FtfiTFIonk=
Subject key identifier:   D1:46:49:96:86:C9:E4:37:AA:D8:22:99:94:ED:99:19:39:F5:EF:5A
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer:       /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial:       0197B96B204FB4632C97A140BEA0E8630441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number:          15B5
Signing time:             Sun 29 Jun 2025 02:01:34 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:34 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:34 +0000
Files and hashes:         1: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (hash: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=)
                          2: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (hash: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=)
                          3: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: lvl326o/FJQb6634jzEHtof285ogl0LYr5D/N7oPEwI=)
                          4: wfzndjh_1PyK6B8Rf4Qnrhzhf1I.roa (hash: conmJC0uHXltpd+fK7k2U4ghVYU0Xoj8HIet8R78GBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:20:4f:b4:63:2c:97:a1:40:be:a0:e8:63:04:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
        Validity
            Not Before: Jun 29 02:01:34 2025 GMT
            Not After : Jun 30 02:01:34 2025 GMT
        Subject: CN=d146499686c9e437aad8229994ed991939f5ef5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:81:71:43:b2:0e:3f:76:26:58:97:2c:69:
                    2e:33:82:74:95:a4:6e:f4:16:93:66:d3:a0:77:ac:
                    14:a4:9b:30:45:d5:0f:15:ff:49:dd:ad:c4:c4:e6:
                    a7:ff:36:25:77:d7:13:63:27:9e:f6:ec:b8:34:1e:
                    62:bf:67:23:30:80:81:5b:02:67:e1:48:5f:82:4b:
                    0f:95:c0:84:b2:0d:8c:25:77:72:27:eb:57:41:87:
                    02:11:da:4c:28:61:c4:92:12:1e:fa:c5:94:d0:c3:
                    3f:b4:be:3d:aa:f1:16:3f:28:c4:8a:b0:7a:c7:0d:
                    3c:ea:96:c5:4f:ee:bc:0e:26:a5:75:b7:cc:4e:7b:
                    70:bc:e7:e3:55:e5:22:b0:ea:e3:7d:88:56:4f:88:
                    ec:a7:87:5f:d9:89:98:29:3b:4e:fe:c4:d2:0c:c0:
                    33:14:3d:fe:cb:53:a2:82:63:fe:60:d2:27:15:8e:
                    56:27:46:0f:a2:c9:e7:ee:f7:3a:21:57:80:47:18:
                    e7:ee:fe:88:83:3d:a4:6a:4c:56:7f:7c:8a:c6:37:
                    7f:e9:76:06:de:65:af:0c:74:a8:58:67:50:1d:3a:
                    8d:88:fa:db:e5:39:8f:2d:60:ae:5d:4f:59:ec:4c:
                    d6:11:08:d1:9f:13:6d:08:e0:7d:7a:ee:ff:a9:8a:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:46:49:96:86:C9:E4:37:AA:D8:22:99:94:ED:99:19:39:F5:EF:5A
            X509v3 Authority Key Identifier:
                keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:35:d6:45:fc:2d:ba:f0:97:bd:fb:52:1c:d3:79:dd:e3:9e:
         3f:de:23:66:14:1c:58:5e:27:c7:32:eb:c8:55:61:53:d9:88:
         70:48:fb:aa:9b:21:7e:92:d8:96:fd:bc:55:5f:59:6d:b9:8e:
         74:3a:63:8b:74:a0:53:61:38:88:e2:44:ce:47:a4:b9:fb:51:
         7d:a1:5d:93:60:24:fe:51:3a:9a:c1:f9:8b:3e:42:d2:f4:ce:
         7c:3d:59:2b:51:0f:0e:62:61:65:16:00:2b:64:b3:ab:61:7e:
         8f:08:4d:cc:0f:d7:45:50:62:0a:f5:9b:10:ee:d9:db:da:86:
         7f:a4:81:c8:67:fe:94:ed:1b:64:3f:b3:7b:02:10:78:7b:74:
         26:c0:44:9f:40:ff:56:ae:4e:82:1e:6b:3a:4d:60:d1:4a:e0:
         d6:ec:2d:cf:a1:ea:36:09:5c:14:50:35:01:18:33:2e:cd:27:
         25:26:0a:eb:9e:44:fb:8f:7b:e0:94:7a:1e:71:ac:01:b8:f7:
         60:4b:cf:44:88:f6:e3:de:4d:cf:b2:71:51:ff:99:7a:38:73:
         3d:e1:44:67:cc:b4:41:dc:70:15:1e:92:df:ec:f2:9f:89:d4:
         a9:4a:f9:d6:b8:68:7d:c9:3b:31:27:d7:f7:ca:e2:56:f0:81:
         61:64:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:09 2025 by rpki-client