Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
File:                     SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json)
Hash identifier:          Rl3olv9Q3HkqEGAqrvWhieh4J9UXpesAYAXkpwPOCA0=
Subject key identifier:   EF:38:8D:04:7D:2A:94:85:2D:43:10:F7:68:04:D5:44:AA:35:42:44
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Certificate issuer:       /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial:       0197C8DE5040DE6FBEEDDCA3C19206A5E78E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
Manifest number:          1390
Signing time:             Wed 02 Jul 2025 02:01:41 +0000
Manifest this update:     Wed 02 Jul 2025 02:01:41 +0000
Manifest next update:     Thu 03 Jul 2025 02:01:41 +0000
Files and hashes:         1: 0KNJIwezZb-3FaFJUpqxhGPSa2k.roa (hash: A4j/zF7WMM+1P8qhcyYitAkcAPo5hxRepqaqzU+Jk9c=)
                          2: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (hash: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=)
                          3: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (hash: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=)
                          4: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: m8WYDXFTjLlnR2HJMXq+TY97xtZT3TZp+/J/4XT/xGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:de:50:40:de:6f:be:ed:dc:a3:c1:92:06:a5:e7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
        Validity
            Not Before: Jul  2 02:01:41 2025 GMT
            Not After : Jul  3 02:01:41 2025 GMT
        Subject: CN=ef388d047d2a94852d4310f76804d544aa354244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:b7:dd:88:93:20:93:e7:69:0a:d5:18:ab:
                    b5:a7:ec:88:d5:40:27:49:83:7a:16:57:50:fc:bc:
                    ff:ca:f3:9c:96:ea:7f:6b:04:a3:e8:dc:f6:c4:b7:
                    e3:f0:6f:e8:23:bc:f3:e3:55:0c:d7:c2:9a:bf:1f:
                    62:60:26:57:78:4a:7a:83:ad:44:10:e8:03:d8:34:
                    4a:f7:9c:37:57:12:e6:67:b2:be:28:b2:d3:be:69:
                    e7:e7:59:b4:cb:48:10:8b:bb:60:fb:f2:6a:be:f0:
                    2a:d7:a4:6c:42:72:3d:0c:53:4d:8d:fb:f9:8b:03:
                    24:b0:48:26:9a:7f:73:c0:98:3c:fb:19:ab:06:82:
                    f8:55:ec:02:65:8c:fb:06:79:27:44:1e:00:25:a2:
                    ab:44:f8:db:cc:05:45:20:79:89:1e:1e:53:00:9d:
                    b1:3c:8a:89:93:af:5c:91:03:28:26:8f:db:a4:c5:
                    03:60:19:6e:37:84:3b:08:06:d1:1e:27:f1:ea:fe:
                    99:f0:c6:01:38:39:d4:c6:19:76:38:08:28:5f:ec:
                    4d:1a:2b:f8:f8:60:42:8b:e6:10:31:d7:c6:eb:b9:
                    97:cb:36:ef:90:39:7a:c6:59:3b:25:87:03:7a:8c:
                    c8:2a:57:b8:d4:fa:cf:d6:dd:f5:ec:5c:fe:4c:4a:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:38:8D:04:7D:2A:94:85:2D:43:10:F7:68:04:D5:44:AA:35:42:44
            X509v3 Authority Key Identifier:
                keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b4:e2:06:b5:f4:62:5e:2a:b4:4e:a5:6f:94:31:06:03:c1:
         91:5e:90:eb:c5:83:1c:39:73:a0:87:9b:a2:3a:12:dd:81:5b:
         40:16:3e:da:01:34:7d:e7:56:56:b9:07:9a:16:4a:24:3b:b2:
         b8:4e:40:30:d1:2b:3b:da:ec:e4:64:79:9d:07:7c:64:fb:12:
         d8:87:30:ea:32:82:d1:51:ab:d9:d7:bd:95:b0:dd:c3:3e:f6:
         08:dd:11:e8:80:dc:ae:9d:ea:21:8a:3e:39:a9:1c:d2:32:b5:
         20:b8:f6:69:65:7f:0f:73:aa:6c:de:c6:28:71:b3:f0:0f:89:
         95:2e:9c:f6:6f:95:26:c5:16:1f:12:54:bf:11:8c:45:9f:0c:
         17:8f:60:7d:40:8c:31:27:10:3a:59:28:08:0d:58:63:a3:74:
         69:e4:99:d3:2b:3e:5f:cc:00:98:58:15:ce:58:89:83:8e:ad:
         6b:97:66:94:dd:ca:05:a3:fa:aa:13:1a:aa:5d:11:41:cf:27:
         a8:80:39:f5:fa:0a:8e:1e:9a:99:d7:e3:78:68:a6:8d:68:c9:
         cd:b8:6b:37:31:85:f3:2d:ba:58:ba:56:77:56:76:af:b2:ea:
         8e:89:f7:86:07:e4:d2:e6:44:b3:10:17:51:cc:27:ce:35:bd:
         f4:93:84:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:38:55 2025 by rpki-client