Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File:                     1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier:          dvO+mj1QXfaZZbEs0kUP2ihZRvoOIv6qFXcbvDmvO0c=
Subject key identifier:   45:9B:48:F7:7F:5C:CD:B2:E0:65:97:A1:18:41:A2:AD:E8:49:D0:8E
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer:       /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial:       0196AC8CE754EBA4CB2447965B899E65C959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number:          152A
Signing time:             Wed 07 May 2025 21:00:37 +0000
Manifest this update:     Wed 07 May 2025 21:00:37 +0000
Manifest next update:     Thu 08 May 2025 21:00:37 +0000
Files and hashes:         1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: QE4YK9XR+fs6nmjb2AE4Ky1K3w1Hbp/qBT/JU0QW4fI=)
                          2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:8c:e7:54:eb:a4:cb:24:47:96:5b:89:9e:65:c9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
        Validity
            Not Before: May  7 21:00:37 2025 GMT
            Not After : May  8 21:00:37 2025 GMT
        Subject: CN=459b48f77f5ccdb2e06597a11841a2ade849d08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:e6:79:ce:53:29:a0:fc:53:c9:6c:f7:9f:
                    7e:5d:5e:ec:3f:82:75:d4:c7:8e:f8:bc:c0:da:cd:
                    a3:03:19:8d:0a:9f:f6:2c:9a:23:e2:0b:4c:dd:a4:
                    06:7d:f1:ea:75:f6:ed:6b:dc:f9:ae:86:cd:64:a5:
                    de:c5:c4:da:df:f4:c7:97:35:7f:aa:b2:18:8b:0c:
                    e7:80:67:8f:95:9a:84:d4:b8:11:4f:a8:e3:d0:66:
                    c8:2e:5d:e9:2d:ba:a8:00:d9:a3:7b:fb:d7:11:e1:
                    59:1f:64:c6:07:9c:57:83:c6:a0:d1:0f:ee:83:34:
                    32:ad:ab:ca:77:ba:84:de:85:77:59:f0:f8:9b:f9:
                    58:b1:ee:5c:85:33:34:cf:58:fe:29:d6:85:94:a0:
                    5b:d9:05:bb:71:11:f2:2f:2a:d6:c6:ef:41:05:fc:
                    1b:a7:b2:c1:52:78:d3:b3:00:e4:af:8e:7e:ae:21:
                    ec:89:21:97:5b:81:6c:67:29:bc:89:61:2c:b5:c0:
                    06:23:89:2b:55:9d:98:c3:cf:f2:ae:b0:73:da:8d:
                    60:14:34:44:45:34:78:b9:0f:c8:7d:48:ab:a3:09:
                    5c:bf:71:46:c9:f9:1a:b7:ef:e8:9f:2c:08:97:77:
                    b0:c5:12:ff:5b:f1:07:5b:cd:57:81:cd:20:00:fb:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9B:48:F7:7F:5C:CD:B2:E0:65:97:A1:18:41:A2:AD:E8:49:D0:8E
            X509v3 Authority Key Identifier:
                keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:43:f1:b3:c9:b3:91:7a:4a:92:b3:1c:25:52:ed:4e:a6:1f:
         4b:a3:48:02:59:7e:40:17:20:b9:c9:2d:73:87:d5:cc:d8:63:
         75:25:ac:f8:99:8d:3e:38:bd:e4:cf:80:26:bd:7c:2d:91:8d:
         67:3d:a9:03:2c:b2:59:a8:d0:4a:30:32:20:fd:bd:98:64:cc:
         05:40:36:b1:4b:6d:7e:40:21:e6:72:5d:5d:75:ea:a6:ff:cf:
         20:61:eb:6e:de:bb:66:3e:8d:03:7a:56:68:7b:7c:5b:36:83:
         84:28:d5:e9:e6:66:c0:90:ce:c3:f2:b6:7b:b6:5f:23:1f:db:
         49:c9:9d:ef:a3:ed:19:0e:a9:09:e8:a8:0f:84:d2:45:fa:ec:
         cb:99:63:07:0d:af:4b:d3:42:af:7f:2c:a8:b5:4a:01:c4:b2:
         17:81:f4:ae:ea:19:4e:dd:eb:6c:55:86:8e:92:a1:4f:b8:96:
         3f:03:83:3f:10:26:73:af:e6:6a:11:0c:83:83:59:7d:14:b9:
         77:53:cf:0b:b8:91:14:98:90:e4:e5:55:65:04:9a:9b:c8:57:
         24:4e:22:9a:7e:68:b0:bc:61:88:f7:d7:b3:aa:dc:73:48:98:
         cf:f4:13:d3:61:bc:36:e1:2d:0e:c5:33:62:f5:42:be:0d:1a:
         18:9f:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:53:25 2025 by rpki-client