Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
File:                     vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json)
Hash identifier:          YDlQCHytbeGgggTxLKgaKYx7Li6juDK2aPP6mox5ONA=
Subject key identifier:   1D:6E:94:8E:61:A3:E9:0E:D9:BD:6F:68:3C:29:B8:32:D3:D0:BA:C2
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Certificate issuer:       /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial:       019747E739B332E71E31063A3F4ABE714B7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 01:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:25 +0000
Files and hashes:         1: qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (hash: AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=)
                          2: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: ubD0fc7xkSXA5Q/BSq8wLFRCTiLVgZRSqh4B8p+ji2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:39:b3:32:e7:1e:31:06:3a:3f:4a:be:71:4b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
        Validity
            Not Before: Jun  7 01:00:25 2025 GMT
            Not After : Jun  8 01:00:25 2025 GMT
        Subject: CN=1d6e948e61a3e90ed9bd6f683c29b832d3d0bac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:90:80:51:c4:e3:3c:2c:fe:43:63:7e:3d:
                    d4:82:be:aa:b2:9c:25:94:ad:82:bb:85:2e:0b:49:
                    d4:3c:cb:c8:2f:cc:3b:20:d6:e5:56:35:00:5f:b1:
                    2a:00:30:6a:b0:2e:97:02:9c:eb:83:e5:c6:c8:3c:
                    3c:c8:da:0c:fc:45:05:11:f8:72:21:8d:9c:bd:01:
                    fb:ee:58:86:e5:9e:f0:97:c3:28:b0:c2:54:8b:24:
                    8b:be:ba:06:1c:63:5c:7f:25:68:98:f8:87:5f:7a:
                    86:e0:2a:77:b6:70:af:88:18:ed:90:43:9d:49:39:
                    65:20:6f:de:2f:4d:1a:84:5c:9d:99:28:5a:f2:fd:
                    28:29:f1:0f:d7:dd:1e:8c:2e:90:b1:76:cc:d2:90:
                    b6:89:61:36:6f:76:24:3d:18:e1:7e:c6:40:47:04:
                    1f:40:92:95:b6:71:b6:71:7c:6d:15:8a:d4:57:de:
                    f1:51:fc:64:b0:77:ca:18:c6:21:ac:22:f1:d8:20:
                    23:3c:89:46:9f:49:9a:49:1d:c8:a5:b5:1b:59:f2:
                    31:e4:d6:80:f2:b1:6f:c9:9b:18:67:a7:38:9d:fc:
                    b6:3e:a4:bb:d4:8f:02:b8:16:e5:08:ec:cf:25:d1:
                    73:54:27:81:00:78:99:8b:2c:df:9b:02:9b:0b:45:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6E:94:8E:61:A3:E9:0E:D9:BD:6F:68:3C:29:B8:32:D3:D0:BA:C2
            X509v3 Authority Key Identifier:
                keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:c8:c4:ba:a7:53:00:6f:18:c0:e3:b7:e9:d6:52:0f:77:
         a3:8c:4c:55:ec:ff:71:ea:3b:f0:23:fc:97:8b:bf:79:3b:a8:
         c8:f9:34:74:7a:d4:17:d5:13:ff:8a:ae:ca:97:9c:ba:10:a8:
         6d:54:59:8b:ae:f1:49:6c:c6:2f:91:f3:81:78:7e:f4:00:ec:
         78:37:c2:4b:14:70:33:3c:7b:19:67:dc:1f:f3:4c:ef:06:11:
         fa:89:23:9f:07:64:85:d0:aa:d2:2b:16:a5:9a:62:0b:47:e2:
         24:7c:ce:c6:f6:ae:85:d2:8f:e6:eb:a4:6f:11:da:c4:4c:f7:
         91:9e:09:96:12:82:a7:af:96:66:cc:09:f5:e8:bd:6c:ae:31:
         bc:e7:3c:b6:7b:85:4c:ce:37:95:b1:15:e4:e0:ef:78:ff:cc:
         3a:94:b3:a3:fe:cf:9d:0b:da:af:29:3b:75:fc:94:69:78:47:
         ef:dc:96:aa:91:e4:1f:86:66:15:59:29:31:0c:ec:38:8a:dd:
         67:8d:5b:f0:08:3b:61:dd:c0:9d:44:6a:37:77:7e:da:70:e7:
         29:50:04:78:77:5e:d6:ad:fc:f9:42:dd:21:2c:fd:3b:c2:b9:
         b6:42:0f:5f:fe:5e:44:dc:85:f0:ce:eb:c9:df:43:25:e0:dc:
         79:62:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:58:12 2025 by rpki-client