Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File:                     AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier:          BXhSL4nAavof1xOqGsDPkiyXh3oJWQmfAoAXwp4Wy6c=
Subject key identifier:   AF:29:1D:56:A4:FB:85:77:96:D2:C5:CD:43:A6:57:D6:38:D0:3C:FC
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer:       /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial:       019747428768AF843B3EF98C4C66F4BBBBB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number:          159E
Signing time:             Fri 06 Jun 2025 22:00:31 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:31 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:31 +0000
Files and hashes:         1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: 9pq2nifHXWv4IJsLI29dG4+5nCaFiDh4XYsljZOE5yk=)
                          2: v-JLVzUeQuUcO68Dar1EDxEbp-Q.roa (hash: NLn149L4DdRbaEbvCsRst5D4kAzWBmCeuY2VmKeK9O4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:87:68:af:84:3b:3e:f9:8c:4c:66:f4:bb:bb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
        Validity
            Not Before: Jun  6 22:00:31 2025 GMT
            Not After : Jun  7 22:00:31 2025 GMT
        Subject: CN=af291d56a4fb857796d2c5cd43a657d638d03cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:f0:e1:87:83:36:ef:af:26:ee:ba:7f:77:
                    57:22:7b:8f:06:80:e1:ab:3a:28:65:d7:bc:45:9e:
                    56:8b:ab:2c:69:78:28:4c:38:7a:d6:d0:12:9e:c7:
                    3e:77:6a:d9:f7:2a:c0:43:18:32:83:d5:ab:38:ed:
                    eb:7a:3e:05:53:88:e2:7d:4a:11:de:77:20:9d:ea:
                    65:80:4c:da:13:35:43:8d:79:f2:3a:a9:8a:23:4f:
                    bb:95:b7:5a:7d:fb:ec:4c:16:a0:89:40:20:c8:18:
                    18:2e:76:ba:1d:d7:75:cb:4a:9a:d5:3e:86:39:7d:
                    81:e3:dd:05:57:84:48:f6:53:12:ff:bb:cc:1a:24:
                    74:fc:f7:59:a6:db:fd:42:97:56:e6:ea:1b:ce:97:
                    16:20:4d:35:a3:35:d8:13:72:ca:16:a0:99:7d:e4:
                    0c:19:72:7b:ce:98:67:c6:5a:d4:53:dc:d2:d9:14:
                    cd:90:93:f9:6b:dd:b9:9d:dc:c1:79:cb:1d:74:5b:
                    d9:3d:bf:a6:71:0b:52:dd:62:61:b2:fc:c4:6f:24:
                    39:f0:3b:7b:ea:9d:90:6c:98:5e:d9:f6:7f:2c:36:
                    90:6c:cd:c6:c4:64:79:20:3a:bb:fa:df:fc:7a:38:
                    ad:56:bc:22:95:cb:ab:67:82:29:43:37:01:bf:20:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:29:1D:56:A4:FB:85:77:96:D2:C5:CD:43:A6:57:D6:38:D0:3C:FC
            X509v3 Authority Key Identifier:
                keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:23:da:25:8a:dc:b7:15:41:67:e5:30:cc:36:25:17:9a:49:
         f0:96:32:46:62:41:ec:cb:5c:cf:7a:d0:db:fb:da:91:87:5a:
         23:5f:8a:6a:5c:d2:b9:9b:5e:16:17:1d:ec:95:92:c4:90:cd:
         d4:da:00:06:71:e7:ff:27:f7:22:3f:84:08:0e:6a:ac:46:a2:
         80:8f:12:20:9b:e5:3c:10:eb:12:14:94:e1:b5:18:37:d3:23:
         57:a7:29:67:07:24:34:d0:ef:ad:eb:ae:ad:eb:38:f5:17:0e:
         3b:11:70:6e:9c:04:d1:a1:0b:29:c1:89:27:6b:28:2f:fb:24:
         46:17:32:bb:86:1b:a3:e1:f1:6e:86:81:d2:f3:f6:b5:94:7e:
         75:43:31:04:51:5e:16:92:b1:c0:c4:b9:d0:2e:5b:69:a6:58:
         ae:37:db:ed:cd:41:8f:68:c9:c0:46:8a:9c:9d:94:02:db:12:
         fa:07:9d:6b:12:2a:ea:c5:a0:7f:11:be:69:9b:e7:6f:9c:14:
         fc:99:ea:85:a9:02:6d:4e:c5:13:03:01:4b:31:5c:ae:0e:a9:
         31:16:bc:c7:ee:45:3a:d9:16:e7:dc:98:18:88:ac:e8:77:ff:
         4c:42:d1:1d:aa:f9:0b:1a:d5:65:90:4c:b3:fc:79:c0:20:db:
         5b:b9:71:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:52:50 2025 by rpki-client