Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File:                     toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier:          /mh3g7ssKWjGRQp3PgUf2P6OrsPd5p7oqnHxXA0+jT4=
Subject key identifier:   85:1F:71:46:0A:B7:20:1B:4D:54:B3:0C:8D:0D:5B:E8:28:3A:B4:53
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer:       /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial:       01974C32161C38CDD99B770511C9F4E12B3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 21:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:40 +0000
Files and hashes:         1: Gqb6OgiiPyPHWY86Q4S-zwTF1xY.roa (hash: Os7YNQWNXg8f2DoDK3e2S/uuUULEf5X8h6dOyySYafw=)
                          2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: zuodhXYUQT/U3QKQ5GDoy25IhnVNUDTUu5g+3qUD5jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:16:1c:38:cd:d9:9b:77:05:11:c9:f4:e1:2b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
        Validity
            Not Before: Jun  7 21:00:40 2025 GMT
            Not After : Jun  8 21:00:40 2025 GMT
        Subject: CN=851f71460ab7201b4d54b30c8d0d5be8283ab453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:34:2d:c6:05:c2:9c:c8:22:5b:c0:83:28:
                    de:c9:07:5e:50:94:60:12:ef:a7:e7:0f:61:c9:4a:
                    b9:33:7e:f6:92:bb:d5:20:8c:77:d1:98:9b:d0:32:
                    21:88:6e:26:13:61:c5:d4:37:bf:36:b9:d5:30:92:
                    07:16:9d:a0:bf:91:88:11:d8:77:b7:5d:96:2e:c8:
                    2f:b1:e4:b8:cc:3a:e9:19:0a:d4:97:98:42:2c:43:
                    3f:b0:28:64:42:ff:49:e2:a9:5c:92:a3:c5:e7:6c:
                    39:ba:90:f7:98:d6:79:ac:15:bc:1b:2e:03:2e:f5:
                    03:4d:ac:49:00:83:69:8e:5e:b9:37:40:04:36:b1:
                    c6:9e:81:29:83:bc:c7:63:d7:be:11:a4:c7:98:61:
                    8d:59:33:e2:26:9c:1d:97:54:08:ec:a6:76:fd:c1:
                    4c:55:6d:85:e5:99:e8:4e:5d:29:ea:e2:36:a8:50:
                    c3:00:45:39:d3:e0:cd:6a:b1:00:85:b7:c9:e3:7f:
                    68:78:a7:33:f6:3d:f7:f5:ce:34:49:ab:3d:ab:8c:
                    41:d6:d4:fe:24:30:e4:50:a3:32:3e:01:d1:33:f5:
                    1d:a9:22:5c:20:d2:a4:e6:d0:23:02:31:12:dd:24:
                    4b:85:e1:bd:f5:a8:a6:4c:28:69:43:5c:62:47:a3:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1F:71:46:0A:B7:20:1B:4D:54:B3:0C:8D:0D:5B:E8:28:3A:B4:53
            X509v3 Authority Key Identifier:
                keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:49:17:6f:ee:d0:ff:61:c6:bb:6d:bd:08:43:2a:51:96:85:
         42:fe:4f:22:6f:4c:b7:1c:9a:ae:a5:fe:da:be:4f:58:c6:9c:
         cc:c3:13:28:4a:26:ae:87:61:0a:6e:1a:2c:79:30:11:65:60:
         50:cf:d9:58:4a:ae:54:00:6d:d5:fb:cb:2c:a2:81:70:9b:fd:
         91:fb:ac:b1:f9:11:60:aa:a9:3e:88:ae:0f:09:67:da:22:64:
         af:b5:b7:7e:33:6a:81:16:2f:c0:19:10:98:9d:8d:57:46:01:
         8c:66:5c:22:3d:84:79:a6:08:0d:f8:58:f4:17:4b:3a:a9:f9:
         0c:2e:de:a7:76:a4:b1:73:d3:a4:59:06:22:fa:4f:62:21:e5:
         fd:5a:1d:44:ff:45:8e:ce:04:05:8d:d5:58:6b:17:b3:9b:2f:
         a3:92:9d:c2:9b:93:90:bb:81:93:1d:5a:4f:c7:2b:44:37:a7:
         1a:c0:90:cf:6a:cd:89:07:24:96:5e:7a:c3:5c:44:53:f0:da:
         38:c5:ac:af:56:34:16:5f:84:6c:74:83:22:ca:24:63:67:83:
         92:ab:7e:59:30:17:3d:3e:cb:08:1a:19:4d:50:3e:12:99:f2:
         cc:b9:4c:09:d0:26:60:36:41:32:9c:99:5d:f3:de:5f:b3:fb:
         5e:84:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:15:13 2025 by rpki-client