Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File:                     1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier:          8rT+ae2riC3Sj2NFA8vraf/UvA9UrMQyN6xU6PD/tOA=
Subject key identifier:   19:5C:ED:24:AD:1E:A7:D0:AD:E5:41:54:BF:73:5F:12:3F:75:18:A6
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer:       /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial:       0197B77C58B4899AAB98D9C38C574033B94F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number:          154A
Signing time:             Sat 28 Jun 2025 17:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:08 +0000
Files and hashes:         1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: IeGGkwrKNnszTJKeWXXTzOU1c/YX9my6ySCnZ+nqpT0=)
                          2: 86fKM31DBBSwZ8M6qcIf6r_iQR4.roa (hash: EWjBxOajWLT9vZOY8gky8VpcjsYK4HfbzBG5oTI1lvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:58:b4:89:9a:ab:98:d9:c3:8c:57:40:33:b9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
        Validity
            Not Before: Jun 28 17:01:08 2025 GMT
            Not After : Jun 29 17:01:08 2025 GMT
        Subject: CN=195ced24ad1ea7d0ade54154bf735f123f7518a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:b5:e9:2f:ee:aa:99:8f:93:e9:c9:08:d4:
                    1b:e9:b8:af:c5:fc:6e:40:59:a6:18:43:51:d6:80:
                    64:a8:e2:e9:6c:ee:44:4d:4a:f8:fb:93:8b:d8:93:
                    ac:d5:22:cd:c5:c2:31:39:ea:75:9c:6f:88:9c:ae:
                    62:8b:0a:9d:90:58:db:74:5e:aa:5c:70:f0:1f:ae:
                    ff:d5:92:96:ec:cc:40:14:7a:3b:79:c8:41:67:bf:
                    9a:dd:ec:48:77:0a:c3:29:30:6e:ac:e4:94:e0:06:
                    cf:cf:ee:21:93:41:57:11:14:a1:9a:d8:7e:54:0d:
                    b6:07:b2:b5:27:4f:8f:f7:76:20:6f:7d:cf:5d:ec:
                    2f:5d:bc:d8:93:77:54:8f:20:7d:30:89:e5:ab:b5:
                    24:98:f0:fe:ab:23:0f:22:54:02:b1:ce:08:d7:0a:
                    76:e4:d9:6a:c0:34:8c:c9:53:4c:0b:9c:e6:a9:29:
                    d8:b9:0a:b0:8a:02:db:2f:2e:f5:3f:90:aa:45:db:
                    0f:e5:83:4e:23:9e:b1:fb:22:fe:c7:06:98:26:a2:
                    d7:23:34:af:b6:37:03:93:44:63:3c:72:8f:68:99:
                    e6:a4:ce:6f:a9:e3:37:ae:03:a6:c7:1f:25:10:b1:
                    cd:ac:a3:1f:06:04:57:28:6c:e8:d0:ae:c2:a2:97:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:ED:24:AD:1E:A7:D0:AD:E5:41:54:BF:73:5F:12:3F:75:18:A6
            X509v3 Authority Key Identifier:
                keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ff:af:fe:ee:06:e0:25:72:48:b7:52:cd:38:d5:0f:1d:09:
         45:e0:7f:94:f9:e3:e3:21:64:48:76:4f:b8:04:f8:c9:41:4a:
         35:61:e9:e2:27:52:f7:f8:77:da:a6:01:7b:77:3c:4a:8c:a0:
         b3:88:e8:9d:24:3a:4f:f7:0a:61:89:ab:c7:47:9c:fe:26:86:
         f7:21:b6:bd:c6:c0:ae:a8:d0:a7:d5:5f:3d:37:7c:5f:0b:45:
         55:08:e6:07:83:f5:1b:f7:35:36:cc:0f:18:28:04:2e:c7:65:
         a1:f1:24:9f:e9:e9:82:40:eb:be:68:a7:63:d6:9b:55:41:ca:
         a7:2d:98:21:38:d3:49:5a:34:66:b9:67:a0:62:81:84:b9:e1:
         4f:af:8b:87:e0:66:12:37:b7:8f:c0:f6:77:f7:43:f3:e0:ee:
         a6:15:b1:24:a7:0b:6e:08:fb:fa:cf:54:69:e9:3d:31:98:ba:
         66:2b:a0:2d:00:82:05:36:f2:e0:b3:eb:57:4f:ea:77:09:fc:
         4d:e0:83:23:72:f1:08:33:f4:d2:98:91:11:81:e7:ec:58:c6:
         49:53:2b:17:4c:64:4a:74:16:7f:70:66:67:35:66:c1:56:5d:
         24:b0:ef:5b:06:de:73:1a:e9:99:d3:94:a7:46:96:7d:f7:97:
         8c:63:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:42 2025 by rpki-client