Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
File:                     _eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft (raw, json)
Hash identifier:          rFY3beM3qRW2zBojYZTaH/QnHHKn177gVgu6NsaH0o0=
Subject key identifier:   9F:C6:5E:02:D6:D5:49:CF:81:67:8C:CD:6E:C5:93:DF:42:C2:89:B3
Authority key identifier: FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
Certificate issuer:       /CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Certificate serial:       0197470BD1E905F26B17DA21F172A688FEDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
Manifest number:          157E
Signing time:             Fri 06 Jun 2025 21:00:46 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:46 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:46 +0000
Files and hashes:         1: YExiaarbuvH9TQzZ24egFcmAkD0.roa (hash: mt2m3RTRnmt9DmA4UJddV/a1P2ybagRmPkEyYSpRGrY=)
                          2: _eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl (hash: 8p+j8ApirmI1y8bWvJvKlMuzws6TN/dVrt1gzdbawQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:d1:e9:05:f2:6b:17:da:21:f1:72:a6:88:fe:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
        Validity
            Not Before: Jun  6 21:00:46 2025 GMT
            Not After : Jun  7 21:00:46 2025 GMT
        Subject: CN=9fc65e02d6d549cf81678ccd6ec593df42c289b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4a:fe:be:fa:8f:85:b2:19:45:c3:d9:17:63:
                    f1:65:90:5d:ad:4e:90:29:49:68:fc:4a:52:c9:c3:
                    9c:43:e3:b5:1e:e0:93:d0:2b:df:56:2a:d7:32:a8:
                    60:2e:2f:87:c9:a3:e8:d7:f5:ca:28:16:26:88:59:
                    d3:ae:45:aa:48:95:d1:8c:ad:e6:80:56:cb:b9:ba:
                    43:5d:a1:d5:63:d1:19:b1:ca:c8:40:e2:d2:0b:cd:
                    8d:27:9a:87:7d:b0:a0:3e:5f:6c:90:64:67:2c:b1:
                    89:94:de:ab:cd:15:6b:60:b7:e6:2b:3b:c4:de:f0:
                    85:c4:9f:89:d8:31:8e:46:47:e1:35:12:85:9a:26:
                    fc:d4:ba:6e:5e:34:cd:e4:35:ed:8f:64:d2:91:86:
                    c2:ad:7f:c7:d6:02:e3:ad:e9:17:d1:e6:f8:c5:87:
                    23:24:5c:ad:bb:21:ed:1a:29:2e:54:f7:9c:17:b9:
                    34:16:d4:bf:db:dc:9e:14:29:a6:53:10:14:05:00:
                    e7:8e:e2:f5:1b:c6:ca:fa:b8:56:c8:fb:40:98:2b:
                    80:38:37:40:76:ee:d9:b2:1e:cc:b2:22:0e:71:84:
                    0a:c4:b8:2c:9c:9c:07:1c:86:58:93:42:b8:ab:23:
                    e4:5d:7b:ac:4f:cd:03:ba:34:11:01:7f:4f:17:22:
                    c6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C6:5E:02:D6:D5:49:CF:81:67:8C:CD:6E:C5:93:DF:42:C2:89:B3
            X509v3 Authority Key Identifier:
                keyid:FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9e:09:f5:54:01:12:d9:fc:c2:9e:e6:c3:67:26:b5:53:97:
         3b:70:45:81:df:ad:1f:01:c0:98:d6:16:5b:2f:08:50:83:b2:
         13:12:63:aa:fa:7d:9e:68:0a:a9:e3:61:ee:79:05:9a:52:e4:
         a2:02:7b:15:18:d4:43:b2:a8:2c:02:1b:6e:d6:3a:fd:64:ea:
         f8:c2:a3:0f:39:61:37:51:de:a2:e0:49:b1:4e:f9:24:56:79:
         48:24:c0:41:5d:fa:de:07:bb:2a:3b:d8:4c:c5:f4:3c:eb:55:
         82:66:89:60:39:9a:5f:f3:96:bd:7f:3c:b1:14:50:26:1d:3c:
         e8:2a:d7:02:a5:80:67:8b:c4:10:85:5e:63:e3:31:a3:c0:ee:
         3b:a5:c9:0a:15:cb:8b:7e:06:0e:47:52:2e:41:f5:5e:44:e2:
         ba:60:d3:40:8a:72:4b:51:71:f8:4e:f2:67:52:18:32:9f:d0:
         91:da:d6:9f:50:c3:f8:77:6b:79:be:32:fd:45:d5:45:bb:bb:
         e7:92:14:f3:fb:3d:36:ca:9f:c1:dd:0a:5c:e8:75:7c:8c:c3:
         60:78:23:43:28:73:5d:96:26:dd:a2:33:e0:94:ef:03:79:b8:
         79:15:e8:73:ab:c7:5e:b5:76:b2:e8:0c:0c:ce:fc:bd:af:e6:
         c5:b6:7e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:35:28 2025 by rpki-client