Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File:                     uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier:          Y91fZarlimNdDm+qZ4au7FNV3nifnwtCOfBy1yy9PPY=
Subject key identifier:   6E:28:70:68:22:D8:9B:45:4B:2B:CE:6D:4D:45:83:C6:AC:83:F1:1C
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer:       /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial:       01974B56691AAA4B543B5B8506B1F13558F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 17:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:43 +0000
Files and hashes:         1: PA8CjloTPg-68N7OnvoYD-1oLhk.roa (hash: 4/Ym4G39HmXB13TW6+krF+Wwi7w8FIhxrF2UkWzgLLU=)
                          2: c26zPerzgVBHPu_vijyV_Oovrl4.roa (hash: Gk43PDLGRAfU27KozR+OSnOsvS5KnMxHT/HJnzP3YQ0=)
                          3: i_g5q7-hPStlEv1O5n0OZOzfR60.roa (hash: m3x1cS4XhcesKKNznb1VTlqwdh2lVHJU/PvB8L7dB+M=)
                          4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: D17aU7Hk17qmGj6bpPIE6tRIU5RbQXsQqx3ZC0GpfLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:69:1a:aa:4b:54:3b:5b:85:06:b1:f1:35:58:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
        Validity
            Not Before: Jun  7 17:00:43 2025 GMT
            Not After : Jun  8 17:00:43 2025 GMT
        Subject: CN=6e28706822d89b454b2bce6d4d4583c6ac83f11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:bf:15:66:d5:19:60:98:5f:5e:3e:82:2c:
                    d5:2e:74:cd:0a:05:a9:49:d5:10:37:d6:59:9b:62:
                    49:56:41:bd:88:0a:21:e0:24:e0:c3:83:68:e0:92:
                    a4:67:e4:0f:6f:09:f0:cb:5c:ed:d2:1c:4b:0d:87:
                    61:7a:b7:96:9d:8e:da:b3:b8:f9:c0:6a:cb:3e:20:
                    ae:1e:bf:3f:ee:76:f4:b9:0b:ec:ef:de:48:b0:2e:
                    42:9b:1b:5d:88:10:08:19:c3:86:3a:bc:de:f1:08:
                    91:03:93:c5:1f:b2:c9:90:78:12:4c:6f:59:2b:e9:
                    a4:c8:5b:6f:27:57:a1:e9:81:5d:a2:56:21:7e:99:
                    46:7d:d4:f9:3b:68:ec:a8:f7:b6:1f:fe:89:22:0e:
                    d2:07:b0:4b:9e:61:8a:74:91:d4:8e:a5:18:c8:2c:
                    04:0c:ae:0d:94:17:22:55:6f:2a:33:84:88:b6:d6:
                    13:2e:b1:1c:5e:9a:bf:47:a8:e8:13:a0:a5:b9:7e:
                    a6:e1:ff:0d:2f:c9:26:34:5e:9d:bf:45:6b:d0:69:
                    80:23:d1:ac:3e:9f:41:14:52:3b:34:5e:f5:28:2b:
                    ae:31:bc:f1:f0:95:bb:63:7b:25:36:c8:f3:af:f9:
                    67:6e:ea:8d:7a:37:93:5c:95:73:cf:4b:77:99:64:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:28:70:68:22:D8:9B:45:4B:2B:CE:6D:4D:45:83:C6:AC:83:F1:1C
            X509v3 Authority Key Identifier:
                keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:46:57:2e:0b:b0:78:b3:72:80:99:48:64:51:81:89:58:93:
         60:d2:06:01:29:1c:f5:6e:ef:29:dd:33:2d:f3:4d:02:6f:cf:
         ae:9c:4e:19:8b:09:4c:d7:2c:ca:3d:0f:03:53:72:7f:8a:88:
         fc:c4:f9:00:03:f1:ad:15:2d:b6:94:8f:44:9c:f6:b2:81:b3:
         e4:df:88:cf:8f:9f:ef:a5:57:6d:d8:b7:19:1f:5f:57:e8:41:
         b4:6e:7f:df:c3:61:f4:0c:20:a9:c5:5a:6b:87:6c:84:17:91:
         d0:77:78:ab:a1:88:24:38:b3:a3:a5:65:a4:37:33:da:7c:99:
         87:f2:9d:56:33:c2:2d:b4:8e:46:3e:0b:c2:de:b7:59:a2:2e:
         f3:63:de:0b:55:35:7c:c8:d4:ed:89:0f:d2:0d:a8:f2:d7:f7:
         18:47:2f:f4:a0:4f:aa:82:2a:fc:95:15:31:f6:d0:29:ce:1c:
         1f:2f:40:25:bb:24:f4:2d:34:97:33:e6:c5:aa:37:b8:5b:37:
         86:aa:51:f5:6a:5c:72:bf:02:29:d5:c8:f4:99:a4:1f:ae:df:
         5d:02:4e:f1:8a:ae:18:b9:b7:f1:a5:d9:3b:d4:31:59:96:07:
         20:73:86:a2:0d:a0:3b:8c:b5:a1:dd:d1:e6:4e:15:c2:99:c1:
         4e:10:57:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:57:46 2025 by rpki-client