Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File:                     1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier:          m6OIKNICdgo8csr04BFy9qFDZWeCRqeuWwroBZHYdOs=
Subject key identifier:   1C:D3:E3:02:61:51:7F:53:82:F7:E0:13:C9:15:59:77:88:72:AE:90
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer:       /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial:       0196AB7A0EF383A6C95864F41869FBBBD390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number:          1553
Signing time:             Wed 07 May 2025 16:00:25 +0000
Manifest this update:     Wed 07 May 2025 16:00:25 +0000
Manifest next update:     Thu 08 May 2025 16:00:25 +0000
Files and hashes:         1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: B9cZCspXaMfDfK6pIwFpcxUotH/bIV/cgzPAzxZZlSM=)
                          2: BLXtsOUKyjdzK6aUOnCi71Mjrfo.roa (hash: 5RpGYLrJit43EcAURB9h1zI7H1uWOJSb9Qx7yrRnckQ=)
                          3: V-GIRa4RhBB5m370Enq6or4JiHM.roa (hash: UFAtbOA2t0xq9xi4Z+YcT3sVB/rcW17aDpzABEqf3T0=)
                          4: VrkSL_uLOzBJaQboxgGZhD5yRHs.roa (hash: uhelo2jKYMgJm7cPXMljK9cyP0e88kVGFreD1+QpSuE=)
                          5: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=)
                          6: nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa (hash: WzE9rCGNMfQ+mIxm9E1YIp9r6V0lkGRucRNG6aY0mCs=)
                          7: rIf0kB8Rc3IRATRBayI1xPvP3QA.roa (hash: Rx69uj0bTYsl5V2DHt7vMOyICCeb975OsfQSSz+LlmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:7a:0e:f3:83:a6:c9:58:64:f4:18:69:fb:bb:d3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
        Validity
            Not Before: May  7 16:00:25 2025 GMT
            Not After : May  8 16:00:25 2025 GMT
        Subject: CN=1cd3e30261517f5382f7e013c91559778872ae90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:f5:cd:e5:f6:a5:9f:93:cf:0e:f8:94:93:
                    14:24:0c:60:e2:3b:fd:95:b7:3f:3c:8e:93:08:ab:
                    b1:6a:8a:f5:5d:70:cf:7e:5f:9c:fa:7f:54:b5:64:
                    10:ac:3d:d8:ad:ad:56:ed:b6:2d:cc:f7:30:fc:d2:
                    76:c1:5e:58:96:27:47:d9:11:45:56:78:1c:c1:38:
                    52:83:47:d9:8c:fe:fe:cc:81:10:7a:c6:30:00:88:
                    cb:93:0f:44:3b:70:8f:44:51:4e:c3:c9:94:72:53:
                    3b:c2:ad:43:21:54:8b:07:23:c8:4e:9b:10:8e:70:
                    60:e9:5f:36:38:61:28:b8:f7:29:08:c2:95:1d:ba:
                    6d:e5:c0:33:8d:22:9a:e1:10:63:34:11:a7:e3:a9:
                    8c:82:32:b9:9b:e2:ed:08:23:12:e6:2c:2a:5b:f3:
                    6c:70:62:8a:3d:17:c6:94:ed:48:81:d2:3c:32:1d:
                    3d:51:8e:f9:66:31:9c:c3:eb:33:be:c7:86:f3:9a:
                    ea:4f:3b:28:ff:10:f9:24:a8:63:94:d6:c6:f5:61:
                    98:1c:60:81:62:3f:ae:c3:a0:8d:32:1d:b8:5d:9f:
                    c3:0f:c0:38:a9:c1:53:08:42:2f:39:f8:b2:d6:bc:
                    aa:72:55:82:08:e5:be:b4:65:b2:e3:42:cc:31:17:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D3:E3:02:61:51:7F:53:82:F7:E0:13:C9:15:59:77:88:72:AE:90
            X509v3 Authority Key Identifier:
                keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:71:6e:46:ed:98:e5:8f:2c:d1:60:74:9f:ed:ab:68:a1:a3:
         d1:a4:c6:af:b4:6b:6f:56:44:ab:be:2c:69:6d:68:08:ef:bc:
         e2:41:25:23:c5:d2:b5:d1:84:24:46:6d:0a:fc:0e:f1:f7:26:
         54:38:6b:96:a2:d8:c8:ec:17:2a:cf:24:7a:82:1a:b6:6d:7a:
         5e:21:51:01:1b:b5:80:19:5e:f0:b9:65:99:a5:cc:12:ee:9d:
         c4:ee:38:95:20:7b:d7:d1:55:ca:4e:6a:41:da:66:35:ed:51:
         21:b4:37:13:4e:6d:6a:d8:84:d7:a0:3e:bb:bd:f7:67:a4:fb:
         51:6a:a9:bb:a7:97:b6:18:cc:d2:b4:9c:62:7b:41:e2:06:69:
         d7:36:e9:68:fc:24:ef:4b:ce:cc:d2:9c:a7:51:37:41:32:82:
         bc:6d:78:f4:41:f7:0e:dd:51:fb:ff:ee:ac:86:4e:00:46:04:
         ad:a2:c3:39:cf:2f:a1:5f:b7:56:06:2c:a0:99:88:06:c0:a6:
         80:ae:aa:f7:7c:52:11:b6:07:7d:4b:06:f1:dd:bc:1f:61:2f:
         8d:6e:73:7e:a3:af:5d:b7:bf:d0:4f:7a:fa:29:fa:bb:9c:21:
         ac:5d:29:53:83:04:86:de:93:58:e2:3a:55:14:a2:e4:c8:4b:
         52:da:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:34:53 2025 by rpki-client