Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File:                     45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier:          EE8Zqu48rDvofcrE/c0hbEfMKJm0fiZx4+FKEFfRMJQ=
Subject key identifier:   91:89:3A:F8:17:ED:BB:72:A8:86:98:82:9E:37:CF:03:62:8A:D9:69
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer:       /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial:       0197B70F39BC3F76C5A713A465FB2D7DBA5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 15:01:57 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:57 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:57 +0000
Files and hashes:         1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: cWRCI76Xq75bPxUfO8slw/9xtmU8BSfoINmUfq1to4k=)
                          2: R7JL9FH-2QrwFM5epJeXae1YV-E.roa (hash: Z+kLiV+Tl4XxDqngd/q42hXqK5SlkiW5r2j2WXBsESY=)
                          3: iDFuGk6oYIqLw3GPihSSyyo3kF8.roa (hash: cwnT8XNunIwbvLFN3GthMjNOhsdwtyQiIir5eoCVPD0=)
                          4: o9F14TmJz-3o4btxFTmUNxIaMVQ.roa (hash: htBHVS9bsjwqqv6NPJnNf70ZDfm1OC4b9PUSs5jzuTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:39:bc:3f:76:c5:a7:13:a4:65:fb:2d:7d:ba:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
        Validity
            Not Before: Jun 28 15:01:57 2025 GMT
            Not After : Jun 29 15:01:57 2025 GMT
        Subject: CN=91893af817edbb72a88698829e37cf03628ad969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:89:96:73:c2:03:92:24:cd:ce:6a:66:4c:
                    63:c0:5d:64:ca:99:48:ff:4c:b1:6d:65:12:cd:99:
                    f7:3a:e4:e1:d6:5e:a0:2f:d6:73:e3:f7:be:e3:e4:
                    15:39:5c:b3:04:41:77:42:c3:22:01:cf:b5:eb:dd:
                    65:e0:00:4f:89:d7:15:70:85:0b:15:c0:f4:ae:d7:
                    f9:b0:08:13:68:01:bf:36:54:1e:74:15:3b:49:d9:
                    b3:3a:31:5e:00:4d:15:df:57:92:0e:ea:fb:bd:ce:
                    3d:3f:e9:a9:05:e9:3c:58:66:05:aa:75:d6:12:9f:
                    5b:0d:04:9e:7e:e8:f9:0e:e7:d5:a3:4d:48:74:28:
                    79:61:cc:3c:a1:d2:1a:15:db:f6:62:b1:db:73:09:
                    02:39:e0:bc:10:0d:a9:c2:c5:32:3a:f1:38:56:76:
                    ab:83:43:b9:2f:c0:1f:a2:d2:7a:5a:40:ca:be:0d:
                    0a:0d:82:c1:c1:9b:38:0b:69:00:61:c7:27:72:41:
                    ca:91:1b:cd:eb:9f:0b:d8:67:7c:e3:98:21:46:d0:
                    fd:be:a0:24:a8:f6:fe:0c:e1:34:bc:36:2a:c4:1e:
                    eb:97:e0:f2:80:26:e1:a8:1a:89:c7:cb:8b:0c:e3:
                    03:3d:49:5b:60:ad:79:21:1e:ec:01:11:53:b1:d9:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:89:3A:F8:17:ED:BB:72:A8:86:98:82:9E:37:CF:03:62:8A:D9:69
            X509v3 Authority Key Identifier:
                keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:21:db:4f:34:26:c5:ec:c9:d6:de:69:47:b3:10:b8:62:38:
         c7:e1:56:0b:13:53:f3:c8:d2:2c:fe:48:d9:12:14:f3:8f:de:
         1e:80:d8:9a:98:18:b5:59:0f:1f:76:c2:63:d7:84:5a:1d:39:
         6f:a2:46:e1:a7:cf:7c:0f:35:f4:9f:8c:26:c3:e7:e4:b4:04:
         57:72:49:8f:fb:67:94:33:aa:49:75:42:38:41:09:a7:a6:31:
         60:d7:f4:e7:cf:59:bc:c6:e3:f0:21:ae:33:cd:57:e3:85:4b:
         ea:ea:9d:c7:76:44:60:3b:54:9b:f8:6a:ea:c7:1e:f7:55:b2:
         b5:5a:8b:5f:ce:6d:92:fd:b5:8c:93:7f:b3:a8:d7:2d:8e:ee:
         30:3f:67:43:2d:06:dd:05:f5:6e:0c:33:cd:e4:56:49:27:39:
         40:96:a0:14:fe:b2:67:09:e2:9a:bd:13:36:db:26:67:d4:11:
         ab:71:78:fb:aa:7e:da:3b:18:93:5f:0c:ed:13:df:42:46:ae:
         59:35:9e:45:db:33:ed:05:5f:30:da:fb:ae:17:30:51:0d:5f:
         5d:3e:6c:0f:50:09:ee:2e:aa:82:e3:9b:9e:3a:26:5b:fa:3a:
         b0:86:64:6e:7d:19:48:01:f7:5c:40:e6:ed:10:62:20:44:f6:
         6f:0d:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:36 2025 by rpki-client