Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File:                     S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier:          LwEhX0fI20pP3RAA4VacOS6z0pQ7Mvq+vXzrRph6BpU=
Subject key identifier:   C5:97:B1:09:19:1E:66:69:96:09:E7:6F:9A:C1:76:6F:E5:23:90:CD
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer:       /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial:       0197B7455582227184460D8B5A913DC47CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number:          0948
Signing time:             Sat 28 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:03 +0000
Files and hashes:         1: J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa (hash: /UHQgN6Hv0VvhpZbRReiWBOzZfKm+MHd/Eg+DBeHzxk=)
                          2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: BFx3Op3AOBXSlHXq7Zse9lcuOIa/Jo+ozQ9xp26gj54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:55:82:22:71:84:46:0d:8b:5a:91:3d:c4:7c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
        Validity
            Not Before: Jun 28 16:01:03 2025 GMT
            Not After : Jun 29 16:01:03 2025 GMT
        Subject: CN=c597b109191e66699609e76f9ac1766fe52390cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:6e:1e:90:9c:18:ec:5a:07:47:0e:d5:3d:
                    ad:95:94:29:5d:c4:1d:9f:38:a1:36:39:8b:6f:96:
                    b7:cb:00:8a:91:2d:d4:b6:c6:59:e2:1a:ed:a4:19:
                    a6:25:74:a7:89:e5:7e:e3:fa:5c:c6:fe:6c:ca:e8:
                    27:ec:59:89:56:f5:16:0b:f4:28:d6:30:39:78:8c:
                    a1:c4:c8:a4:74:ee:b3:86:6a:ad:0c:8a:c5:34:41:
                    06:fc:0c:73:3a:21:c6:14:e1:25:12:e8:65:ed:e7:
                    9d:e8:36:a5:f0:92:37:5f:56:bf:08:7f:aa:6b:2b:
                    82:5c:6d:22:7a:2b:b1:23:ea:e9:83:33:0e:02:0e:
                    2c:7d:8a:02:93:40:ea:b0:b0:b6:5e:f4:05:62:b9:
                    9e:33:cc:fa:0e:12:81:f8:6f:b5:f7:4c:8e:32:c7:
                    b1:69:4d:5f:82:fc:1d:15:9e:df:51:10:a2:f8:b8:
                    6d:d8:8f:cc:0e:cd:05:92:04:cb:cf:74:58:c0:f5:
                    61:18:e1:7c:8e:a4:03:6b:5a:54:ec:a6:a2:2e:4a:
                    74:98:b8:d8:c4:4c:c4:60:20:1d:6d:47:44:a6:73:
                    8e:91:ad:e8:8f:48:ed:aa:e1:b1:6d:33:8b:e9:cd:
                    e1:50:1d:4b:c8:38:6f:87:a0:6b:76:2c:1d:72:91:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:97:B1:09:19:1E:66:69:96:09:E7:6F:9A:C1:76:6F:E5:23:90:CD
            X509v3 Authority Key Identifier:
                keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:62:d7:e5:1d:4e:1d:bc:50:6e:b6:b2:1b:d5:bd:36:fe:b6:
         2b:17:21:22:cf:9a:e4:2c:97:cd:98:d3:eb:ea:41:25:7d:d5:
         2e:6f:b7:3a:8b:3f:8f:0f:d3:7a:3c:85:2c:50:28:7f:60:cb:
         98:1b:ac:df:92:a1:8c:f6:05:88:71:d7:71:7a:f0:55:11:a8:
         0d:63:ba:f2:79:c5:51:09:b3:57:a8:80:ad:79:c8:50:b4:b9:
         99:27:02:10:1c:5f:ce:11:d7:4f:07:a7:bb:ef:dd:bf:3e:69:
         65:f8:bf:5e:b4:5a:73:e7:c3:c2:fb:e8:6b:0a:80:fb:49:79:
         0a:93:c8:b4:85:8a:3c:fc:fc:80:eb:52:51:9f:95:24:76:13:
         ac:30:d6:06:b2:f3:9d:f4:5b:ab:3a:5a:6c:ae:46:f0:73:19:
         d9:70:d7:68:35:5a:8f:03:79:4c:d9:0f:34:e3:dc:08:05:24:
         6c:30:0a:da:0c:a8:33:07:4f:23:56:d2:18:9c:a6:f2:f0:e8:
         cd:6a:be:45:a3:e1:b8:75:ca:07:85:7a:b0:ef:b0:cf:ae:b0:
         d9:d3:89:60:9f:9f:7f:6c:c5:34:61:12:0e:ff:c3:09:76:88:
         52:1b:72:27:09:2c:59:77:1a:72:1a:e7:4a:71:2f:da:26:4f:
         e2:70:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:35 2025 by rpki-client