Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File:                     ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier:          3ZIpPxkrJIM1RS3MdbOUiP8WO/gj5IE7oDISpcuGncE=
Subject key identifier:   25:6A:59:F1:74:C5:38:64:E4:12:A5:74:7E:FC:14:2E:08:21:3D:5F
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer:       /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial:       0197469E1CB069A1D5AC224C141FFD39D9D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number:          157A
Signing time:             Fri 06 Jun 2025 19:00:56 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:56 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:56 +0000
Files and hashes:         1: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: km101A7vV4oSqaOcXeZXo+xnYn2rKJUomqLh6nMijaU=)
                          2: SCt2QF1ZyfGumaW10dxyBcs0tjI.roa (hash: RDkYHsg9brN71rMixotxKpzbe8KGvrl7wQ7cHVhi6eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:1c:b0:69:a1:d5:ac:22:4c:14:1f:fd:39:d9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
        Validity
            Not Before: Jun  6 19:00:56 2025 GMT
            Not After : Jun  7 19:00:56 2025 GMT
        Subject: CN=256a59f174c53864e412a5747efc142e08213d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:eb:e0:ed:6e:4d:b6:57:3a:25:33:3f:0e:
                    24:b1:d2:1d:71:3a:7a:56:4e:cc:d4:49:f3:50:28:
                    a9:d6:8d:3a:22:f8:da:aa:9e:f1:e7:97:49:1f:10:
                    ae:d0:49:4d:49:bf:5f:8e:d6:5b:36:14:b1:aa:d0:
                    6c:c6:ba:4f:08:41:39:41:7a:53:61:73:5d:6a:c7:
                    9e:cf:fc:35:87:9b:aa:61:b2:48:6e:cd:3c:10:58:
                    b7:aa:19:21:a1:79:24:2d:12:90:78:68:22:c1:4f:
                    3f:77:23:f0:03:28:5f:b3:c8:05:dd:d3:7c:3f:65:
                    3d:75:ff:ca:48:bc:0e:a4:0a:30:96:60:38:2b:c2:
                    d2:56:99:da:bc:95:46:45:7b:f8:42:4f:74:d8:30:
                    23:cd:31:21:bd:46:db:5c:ce:1b:f6:4b:60:97:45:
                    ce:05:c9:7e:5b:bf:61:b1:70:35:fb:eb:02:38:80:
                    6e:6a:e1:c7:3c:36:db:a1:32:29:7f:22:b6:4c:90:
                    be:7b:27:60:61:db:f1:ae:9e:69:7f:a9:3c:17:ae:
                    fc:2b:90:ee:09:19:54:da:5a:f1:9c:fa:1a:09:68:
                    ec:98:6a:32:8b:4b:56:97:c4:64:62:64:ec:5d:46:
                    1a:dd:5e:02:ab:5c:e8:02:77:c5:22:56:6c:17:0a:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6A:59:F1:74:C5:38:64:E4:12:A5:74:7E:FC:14:2E:08:21:3D:5F
            X509v3 Authority Key Identifier:
                keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:56:e2:52:96:67:55:5f:8f:8c:ec:30:22:d8:83:27:93:68:
         4b:61:89:9c:4b:c7:6d:78:ad:83:49:5b:fd:4b:03:7b:d8:04:
         54:69:a7:6b:8d:24:bb:76:43:27:9d:7c:74:72:0c:d5:59:e7:
         6c:29:c7:87:9a:7a:4d:47:7b:41:f5:a4:9e:b5:71:18:61:a0:
         3d:57:32:cc:55:96:30:81:37:ea:97:d3:de:4c:a9:09:80:ce:
         0f:4c:45:06:0e:d5:94:5e:56:8a:7d:5e:a5:69:2e:af:be:da:
         be:f4:55:56:d2:94:30:7a:0e:3a:f5:b9:82:94:3e:14:f9:de:
         1d:6b:20:ea:af:66:e1:c5:34:bd:66:37:ba:40:b0:bf:46:c8:
         89:6c:a3:d1:09:04:f4:e7:0e:06:74:b0:db:d9:62:1d:b1:68:
         c4:8b:88:f8:bf:f2:30:ec:ae:29:19:63:4a:7e:98:4d:e6:d8:
         67:1d:02:e9:32:b5:0b:2a:95:c3:4b:06:83:93:40:0e:1d:d6:
         a5:1a:ab:fd:3a:59:d3:2c:04:ad:fd:26:d9:00:09:e9:8e:88:
         6b:df:b9:4d:c3:87:de:59:e2:e8:12:f5:13:eb:34:1c:00:58:
         d5:09:f6:ec:45:35:cb:f9:b0:20:b9:5c:d0:ca:40:3f:8d:da:
         e4:cd:f2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:28 2025 by rpki-client