Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
File:                     ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json)
Hash identifier:          5fwgOAnevRtkNrKT91fJc4dW+qRd/uzyX0Qc7FmPKUA=
Subject key identifier:   CB:8B:F4:E5:5F:57:5A:DD:EA:57:43:55:62:37:03:4B:8A:D3:64:1D
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Certificate issuer:       /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial:       01976997D0CDAD2B2135E7E6AA7E3FCA572B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 14:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:46 +0000
Files and hashes:         1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: nhMc6XjJdEwg1RiXR89TR/Pqt7pomr1GWAALdKn3DqQ=)
                          2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:d0:cd:ad:2b:21:35:e7:e6:aa:7e:3f:ca:57:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
        Validity
            Not Before: Jun 13 14:00:46 2025 GMT
            Not After : Jun 14 14:00:46 2025 GMT
        Subject: CN=cb8bf4e55f575addea5743556237034b8ad3641d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:e5:5f:76:e7:db:53:1e:ad:1f:61:5f:f4:
                    d0:3d:b5:73:7c:08:e8:ea:36:93:b2:9c:41:f2:ff:
                    3d:f5:ce:da:10:5e:82:7e:fe:a3:0a:69:aa:72:5c:
                    2f:bb:97:0c:a4:64:ff:cb:dd:ce:e2:2a:cc:77:89:
                    b8:64:28:11:b7:28:d2:fe:fc:78:47:79:0b:d8:ec:
                    23:78:bd:84:13:37:94:fe:31:0e:ad:cd:b3:4e:6c:
                    f1:26:a7:ba:9a:94:91:87:d3:16:19:41:4d:d2:ad:
                    94:82:9a:9b:67:12:e7:aa:49:80:1d:10:d2:d3:36:
                    23:55:cf:8d:79:3e:87:7b:30:96:03:09:25:6f:7c:
                    76:f2:5c:68:c9:70:05:88:d9:9e:4f:dc:80:1a:59:
                    52:b2:e5:aa:76:7b:b1:b7:b6:a5:29:ba:3e:94:55:
                    3d:6b:ef:01:dd:e1:74:ac:89:06:74:4b:a5:27:b3:
                    87:3c:df:8e:4e:8f:59:77:08:f2:0a:a0:db:d7:51:
                    96:7a:27:0e:6b:35:d5:21:25:f2:df:31:d0:f6:85:
                    82:30:3e:18:79:d5:0c:0c:96:b4:e4:0d:3b:22:27:
                    7f:2b:e9:21:55:66:d4:10:f9:a6:ce:73:84:e6:ba:
                    d0:ae:8c:e1:24:ce:83:1c:1c:12:1f:f3:67:0f:ac:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8B:F4:E5:5F:57:5A:DD:EA:57:43:55:62:37:03:4B:8A:D3:64:1D
            X509v3 Authority Key Identifier:
                keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8f:6d:a0:20:c5:ba:5d:3a:28:54:71:7c:ca:cf:c3:81:71:
         ad:ed:36:2d:31:38:1a:30:eb:ff:e3:7a:b9:29:5b:2f:3a:7d:
         23:0a:37:76:73:19:9c:fb:1e:7f:6d:de:92:da:a3:9a:74:1c:
         0a:07:32:66:14:4f:e3:e3:33:b2:70:f8:ae:6f:3f:1f:ad:ea:
         d7:e5:1f:2a:c5:c0:f2:03:68:9c:6e:f9:9b:2e:a4:ab:bc:8e:
         11:91:7e:97:6f:ba:2b:c0:43:ae:f0:22:7a:9f:ae:de:b9:6b:
         f0:f9:24:97:3c:44:bc:4a:19:0d:16:97:70:1c:a2:69:a1:03:
         bf:4e:c7:17:d5:89:27:6f:48:ad:eb:05:27:47:68:fd:a9:1e:
         3a:52:ff:92:36:97:1f:ee:85:64:7d:f5:1b:fa:2d:15:4f:00:
         50:44:2c:db:ba:81:26:b9:19:17:cd:69:4f:a5:f0:87:96:64:
         6b:5e:1c:8a:8c:66:11:85:3f:09:e7:b1:84:b2:0d:53:fc:72:
         2c:10:00:4e:2b:76:ff:c4:75:54:e6:94:0c:ca:60:35:ce:1f:
         d4:a8:72:6c:00:15:03:28:fc:bf:67:22:3a:5c:67:6a:60:c7:
         f1:82:fd:a1:02:8f:ea:e7:c7:37:14:56:89:e5:52:76:bd:b0:
         08:22:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:07:37 2025 by rpki-client