Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File:                     bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier:          WpLlxNUJnUOcn4U8/U5LV9upzyT1IQYx+Jf2tfC47AI=
Subject key identifier:   C7:42:1A:C8:3E:69:1C:EC:E1:DC:C9:73:61:C1:DD:76:3B:6B:5F:84
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer:       /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial:       019749D61DDA4CC47C1D496FAB6FFCEE1394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 10:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:58 +0000
Files and hashes:         1: MPfjjHiW5RCCQLGoqV4SDUyXeMs.roa (hash: Y2fZJZKn10InnxGKnVnqAmc8EguVTfd+z1YpmsbQgEo=)
                          2: TrY4v3NhxFVwxgTD-Y4gD2336Kc.roa (hash: nCbc7sJSjISh7d4Jw47iX87H7og+ireTFEgeVDSgXYU=)
                          3: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: r+SQaOECemG+hwc4loSXCB4XewS00U7CwnUpG+J23PM=)
                          4: iMxQ2AOySk_FZxXcjfPe4fAEOGg.roa (hash: zaY98e3Y+bpnfMZKNHgnuKftqgMn0QZNLBsrc2JhQww=)
                          5: mAifwF8GUv7G8ELn9OeFpxHYEK8.roa (hash: PG25x/zzal7YNB1dwfK9vMIqUeHjak2merNPumiM3Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d6:1d:da:4c:c4:7c:1d:49:6f:ab:6f:fc:ee:13:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
        Validity
            Not Before: Jun  7 10:00:58 2025 GMT
            Not After : Jun  8 10:00:58 2025 GMT
        Subject: CN=c7421ac83e691cece1dcc97361c1dd763b6b5f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:eb:af:a5:dd:b3:7a:5c:c8:8e:10:c7:f6:
                    ef:ac:05:ab:5d:9e:0b:95:f5:71:1e:1c:a9:9e:a0:
                    7d:69:52:d0:91:23:de:0b:fd:01:f7:53:95:03:a7:
                    fb:52:c4:f5:29:01:a4:bb:13:db:24:22:fc:53:97:
                    0e:58:2f:6a:63:1d:30:5a:8a:91:bf:f8:d8:12:31:
                    da:e2:88:d4:e1:1b:59:a5:86:ba:80:d9:ef:64:d9:
                    86:a2:b2:77:5b:09:d9:c7:18:69:f8:4e:fa:4d:32:
                    19:fe:5d:5b:b8:b1:eb:8d:98:96:ff:b5:18:b4:9d:
                    f0:94:0e:a2:0d:7c:02:88:d7:bd:b7:82:7a:d5:67:
                    84:da:f4:1b:bc:7d:29:60:8f:05:71:36:6e:5b:5d:
                    28:aa:55:ab:3c:19:53:3a:6e:dd:e1:68:84:0a:a9:
                    11:f0:60:f3:fb:84:bc:6e:a2:4f:b8:00:29:16:63:
                    a2:98:73:bd:c8:ce:b9:53:54:ee:cc:83:30:9f:ce:
                    e2:01:f1:c2:7b:83:26:23:f8:a5:e0:5d:ef:a2:18:
                    a9:cc:5b:62:69:24:b7:68:dd:07:cf:c1:e7:e3:1a:
                    23:f5:eb:7d:d0:03:d1:cb:28:a5:13:ad:5d:92:1f:
                    ab:ca:e9:57:c9:c3:70:a5:ec:b9:f0:d3:6e:a1:a8:
                    cf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:42:1A:C8:3E:69:1C:EC:E1:DC:C9:73:61:C1:DD:76:3B:6B:5F:84
            X509v3 Authority Key Identifier:
                keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:af:ec:60:45:82:41:f3:72:85:e6:8a:77:2b:ad:ac:3b:
         ef:e9:ce:13:bc:43:b0:b5:92:77:7a:89:99:df:62:28:95:26:
         b7:80:e1:fb:0b:e7:84:60:a5:9e:bb:98:2d:03:34:e9:e9:42:
         c0:76:43:d3:34:f1:f9:0b:cc:5b:df:4d:e2:1e:72:44:1e:04:
         e4:40:ab:4a:43:68:8f:2b:f5:ec:d9:75:87:55:2c:31:fc:5b:
         72:b8:37:63:8d:cb:74:af:59:03:5f:ed:00:96:34:58:7a:29:
         20:33:1e:4f:31:1c:bd:35:ca:20:7f:e6:aa:3e:12:9b:05:1f:
         da:b6:c7:48:61:82:5e:30:db:91:cb:19:07:22:10:ac:92:10:
         71:66:31:61:2c:52:bd:2d:a0:cd:46:13:0d:09:79:a1:6b:fd:
         ce:6c:c9:db:85:85:a0:46:7d:ba:61:78:a6:ed:1f:be:1b:4f:
         5a:3f:53:9b:78:b1:66:d8:13:2c:01:15:0d:8b:b5:fc:56:b9:
         3c:09:9e:d5:75:1c:ed:c7:ca:05:12:e0:ae:1e:c8:05:60:db:
         5b:64:b9:d0:6b:5b:d9:75:2a:68:2f:59:c3:a2:29:27:85:c8:
         6a:e9:38:cc:ac:99:3d:0d:4c:2e:03:15:07:37:4e:39:30:bb:
         8a:5f:17:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:49 2025 by rpki-client