Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File:                     irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier:          ut2w5xqHbrtd+0PnT+8d+huO1wTEBdtwlSwjuBUlcFo=
Subject key identifier:   28:3B:A2:84:2E:6A:D8:4E:C0:15:29:72:D3:95:ED:E4:E1:C3:52:1F
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer:       /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial:       0197B7B31FA40DEAF77E44A813FA81D087AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number:          1549
Signing time:             Sat 28 Jun 2025 18:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:58 +0000
Files and hashes:         1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=)
                          2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=)
                          3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=)
                          4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: X0ES3SA/ZvgxNIqVwYxqy1gCA772fYZZ+Kah6AUkESY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:1f:a4:0d:ea:f7:7e:44:a8:13:fa:81:d0:87:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
        Validity
            Not Before: Jun 28 18:00:58 2025 GMT
            Not After : Jun 29 18:00:58 2025 GMT
        Subject: CN=283ba2842e6ad84ec0152972d395ede4e1c3521f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:70:ce:47:30:41:23:2a:e7:6c:29:fa:b2:
                    b0:b1:cb:cc:62:a1:63:eb:38:e8:f6:19:fd:0e:e9:
                    fc:7a:37:24:15:af:5f:d9:f3:d8:03:af:41:26:af:
                    0a:43:1f:ca:7f:d7:c8:52:b8:81:ab:af:d0:f2:d5:
                    e4:8e:d6:8e:62:9e:df:43:18:df:ac:a2:1f:fa:6a:
                    c9:5a:89:69:30:e8:67:d4:1c:c3:24:44:dd:e1:6c:
                    81:3b:84:eb:a6:7d:ca:4c:d6:af:37:37:a9:09:33:
                    a0:dc:4b:f4:63:fd:19:a4:d5:89:d9:2f:79:42:9b:
                    3a:4f:e5:fd:2b:94:26:3f:9c:fb:90:85:f0:ba:88:
                    b9:53:88:5c:50:37:9f:fe:98:8c:78:f8:19:10:df:
                    3d:02:85:c1:ed:17:a2:31:66:d1:3f:29:26:0b:16:
                    8a:dd:b6:5e:ee:b6:ae:81:50:44:48:15:17:d1:5b:
                    8d:0e:eb:06:9f:ee:e9:a8:ef:7f:9a:3b:71:9e:e4:
                    11:c6:74:50:31:dd:0e:12:76:f0:f1:a4:5d:91:20:
                    34:72:ab:0e:13:2d:17:f7:b5:83:97:a6:db:5a:69:
                    b2:9a:46:8f:0e:1c:3a:d3:88:bb:31:6b:46:71:de:
                    81:23:47:ba:4a:fb:48:ce:95:f2:7b:ec:28:e8:d7:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3B:A2:84:2E:6A:D8:4E:C0:15:29:72:D3:95:ED:E4:E1:C3:52:1F
            X509v3 Authority Key Identifier:
                keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ca:36:f7:37:0b:f5:94:4f:18:69:88:7d:48:6f:99:b5:54:
         42:00:5c:fc:2b:19:16:7e:99:3d:44:ed:11:6b:dc:16:a0:81:
         37:ca:e5:d9:b7:c2:53:a7:01:f0:d7:bc:c3:48:43:47:39:b0:
         75:fb:dd:83:24:09:f1:a0:3e:40:f2:9e:a7:5e:89:9f:11:61:
         99:34:6a:4e:e8:b1:d5:9d:3e:ce:06:ac:69:64:3e:99:61:5c:
         79:67:d9:e8:82:e5:9e:f5:26:16:b5:b8:5b:8c:78:87:77:03:
         c3:db:43:32:3a:7d:56:0c:1d:fb:59:44:f0:7a:92:59:a4:0f:
         26:f2:69:f0:7a:7a:97:3c:21:1d:fd:5a:fb:37:63:34:a1:14:
         1e:d2:4b:83:e4:32:ad:46:a4:ce:c2:9f:18:36:37:78:78:e8:
         31:7c:f7:95:f6:60:a3:62:ed:67:99:8d:e6:a6:e0:90:65:c7:
         ac:1a:e3:33:95:b2:52:1b:08:7e:ce:42:c1:3c:17:46:69:23:
         66:e3:80:c6:ba:1f:42:8e:35:a2:43:8b:a3:a7:63:98:a7:4d:
         ee:ef:70:eb:70:86:30:a6:9f:a3:15:59:00:eb:ac:25:8a:76:
         6d:d1:bd:4b:78:f6:9b:05:bd:1f:84:70:11:0d:bb:de:80:16:
         b0:4b:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:33 2025 by rpki-client