Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
File:                     aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft (raw, json)
Hash identifier:          RvdG23uHXSENT7JqfPzx/wrjhMDBTTzXDRFWNfElSEM=
Subject key identifier:   EB:DE:1E:8B:E3:D6:D1:10:1D:CF:B4:0B:39:30:03:E5:72:0D:D9:F5
Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Certificate issuer:       /CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Certificate serial:       01974A7B4E83C1F7F9E5D60B5EFB73349E5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 13:01:24 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:24 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:24 +0000
Files and hashes:         1: 1-RRFLFYvpdDCB0gIWM3HeWx7I8g.roa (hash: pD8ORJEMQZjbq/pqQVUKzZDauGOud+2TyXVh5uPBOWk=)
                          2: aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl (hash: fly6L0oBoPeexNnN/GHbOPzyQhlpNnMVmpuOcSc/+7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:4e:83:c1:f7:f9:e5:d6:0b:5e:fb:73:34:9e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
        Validity
            Not Before: Jun  7 13:01:24 2025 GMT
            Not After : Jun  8 13:01:24 2025 GMT
        Subject: CN=ebde1e8be3d6d1101dcfb40b393003e5720dd9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:e2:39:c4:d7:c3:d9:2f:75:c3:24:0b:13:
                    86:b7:04:a8:d2:e6:3a:8d:97:2f:13:5e:22:d0:52:
                    6a:10:e0:64:5e:1d:7d:20:e0:7c:0b:57:ac:bd:7f:
                    b1:d6:07:0d:1d:6c:88:e1:65:90:d5:3f:50:e2:19:
                    24:ae:23:57:23:de:95:e3:7a:1a:12:d3:61:bf:39:
                    3a:d4:dd:28:5b:5e:54:4a:bd:70:20:ef:f9:89:99:
                    89:12:99:00:8e:9e:b6:43:14:2c:5b:1a:37:2a:86:
                    62:7a:fa:de:3d:c4:69:d3:73:e1:a1:f3:9e:9a:c0:
                    fd:45:da:d6:c3:0f:26:e3:3d:c2:38:77:b6:e8:e5:
                    a1:6d:91:ca:7f:09:65:02:6e:c3:86:0e:50:99:fe:
                    09:38:57:44:d3:25:84:11:18:8f:4d:b3:bd:33:f4:
                    23:33:92:2c:25:1b:a0:f7:69:12:87:57:e5:89:c4:
                    04:72:c6:5b:f2:74:df:be:e3:0c:c6:3f:54:15:49:
                    5e:41:c8:48:9a:d4:10:11:65:c6:b2:ba:23:89:56:
                    91:8b:0e:d1:9e:d5:48:12:52:18:8e:df:f7:8b:69:
                    7b:c7:32:81:d1:97:49:a6:6a:eb:4b:7f:24:f3:f2:
                    b7:1a:dd:1d:bf:92:a1:77:98:1c:12:b9:c4:0e:ac:
                    5e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:1E:8B:E3:D6:D1:10:1D:CF:B4:0B:39:30:03:E5:72:0D:D9:F5
            X509v3 Authority Key Identifier:
                keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:34:a0:52:bc:90:64:58:8b:ed:5a:2f:98:d2:dd:ae:08:de:
         61:49:3e:9e:15:c9:31:06:7d:e5:56:fa:c8:fc:3e:b9:28:79:
         15:9b:6d:bf:a1:7e:89:c7:f1:48:fd:3c:21:71:13:d3:e9:d3:
         cd:dc:fa:d0:8d:83:cb:e2:1e:8c:65:15:eb:cb:9e:87:ba:6d:
         95:3c:b7:fe:dc:79:26:3f:bc:76:df:d2:33:6f:44:ee:33:ac:
         21:1e:55:59:36:19:70:b6:75:21:fa:de:6d:45:89:67:ef:37:
         ce:dd:2d:45:e4:58:41:d9:e0:ba:6f:9b:02:74:18:2c:e2:35:
         a3:25:44:7e:6e:3e:3e:69:0d:e2:53:1b:e6:da:8a:7a:22:c1:
         9f:2e:96:5f:7c:16:cd:b0:67:67:1b:04:81:1a:0e:42:67:96:
         de:1a:08:b2:44:76:78:41:1c:4d:c1:7a:3e:0d:bd:88:70:13:
         fd:5e:f7:ba:a5:6c:1c:de:65:e4:69:5d:ee:c5:e0:0f:cd:08:
         6d:65:78:b4:75:8d:f5:0d:17:17:57:cd:b1:9e:4b:33:d2:fb:
         1c:3d:4b:ca:6f:c0:59:25:cc:75:42:89:56:00:6b:2b:6e:58:
         57:28:2e:f6:38:dc:a0:8d:bf:c7:2f:2b:11:45:30:9d:dc:a2:
         a8:91:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:58:54 2025 by rpki-client