Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File:                     R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier:          P4rOVQ7fpqL4Lrqs2Pc+Ad7m4TCXc5aurucUDiFE/cA=
Subject key identifier:   19:06:65:6F:44:0B:8A:15:06:9D:46:12:E9:29:B9:3B:0D:73:08:6F
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer:       /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial:       0197499EF06A0555C405BA6ACD4787D4E905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 09:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:42 +0000
Files and hashes:         1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=)
                          2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: GtbHbfRq7qrc1Q3CeaNQqtTSkji1pQ6JbMbAIGspOAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:f0:6a:05:55:c4:05:ba:6a:cd:47:87:d4:e9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
        Validity
            Not Before: Jun  7 09:00:42 2025 GMT
            Not After : Jun  8 09:00:42 2025 GMT
        Subject: CN=1906656f440b8a15069d4612e929b93b0d73086f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:dd:27:1b:91:0b:06:4f:e1:7c:8c:c2:86:
                    da:a7:2d:cc:bb:c0:eb:1f:57:c5:bd:0d:f8:86:b9:
                    34:ea:43:83:a9:de:0f:b3:6b:f9:a9:4b:42:3c:e7:
                    2c:13:1d:8a:85:2f:eb:8d:79:cf:2e:a1:10:73:07:
                    ce:da:f3:56:f4:8c:b1:f9:1f:a3:56:d5:10:26:1a:
                    62:a6:74:a3:0c:8c:22:f2:7f:c0:b7:f2:b0:3e:5f:
                    07:e8:6a:91:a1:95:39:36:02:89:41:66:1f:92:4f:
                    d7:7c:2d:48:aa:4a:d2:f2:9b:be:84:07:5b:ec:eb:
                    6a:24:28:62:fb:5c:77:b0:62:ec:b2:30:59:ba:6a:
                    54:da:2a:33:e6:d8:c2:1e:88:d3:88:12:bd:29:3c:
                    9b:a5:ad:da:f8:f6:10:b5:dd:cd:10:f5:33:90:69:
                    e8:2e:43:ed:06:d8:b7:81:e3:b9:3d:6c:ef:b6:28:
                    aa:55:97:d2:00:3a:c5:88:62:66:5b:c6:20:87:a1:
                    37:2e:d1:05:9b:ea:87:eb:24:c9:8d:ea:7b:34:78:
                    80:33:62:1f:5a:b3:36:32:43:ad:a4:91:91:5a:05:
                    d4:eb:d7:b3:93:ca:2a:30:92:e7:85:08:ab:9c:20:
                    56:f1:d4:7c:60:9a:d3:75:d3:fe:7a:48:6d:39:a9:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:06:65:6F:44:0B:8A:15:06:9D:46:12:E9:29:B9:3B:0D:73:08:6F
            X509v3 Authority Key Identifier:
                keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:41:0c:a3:51:52:0a:e1:5a:2e:b9:7f:11:0f:57:d6:35:e7:
         ec:9d:ae:ec:6d:8d:ee:34:89:8d:9f:7f:a4:7f:9b:80:06:10:
         86:b7:9e:08:9b:31:2f:a7:bc:5d:37:be:94:7d:e8:56:8b:e2:
         1d:ca:54:ce:8e:05:55:db:14:64:ee:25:10:1f:c5:9f:f6:ad:
         fa:6c:11:ee:d5:32:cd:80:ce:1f:13:7d:47:27:0e:3d:f6:5a:
         f3:d7:72:5f:4d:26:5f:88:f9:b7:ba:57:b8:21:20:d8:c9:89:
         7e:3c:2f:be:b7:43:1a:e4:43:22:ca:b3:22:14:d8:14:a3:10:
         9b:e2:89:2e:5a:7d:92:9e:25:84:a9:a2:c3:17:ab:9e:ee:c3:
         1f:d4:c2:d0:c8:e0:37:86:53:cd:d0:5f:24:7f:f7:d4:7b:17:
         f5:ee:8d:d7:d8:f5:0c:87:57:35:3d:a4:6b:76:5a:dc:03:c7:
         ad:76:76:d4:50:98:75:46:a3:96:d4:aa:75:c5:b7:bc:89:f7:
         fd:ba:c7:e8:e3:e0:b9:a3:1f:69:5f:1c:60:e3:4b:79:2c:a9:
         eb:2f:60:89:a4:bf:e4:e6:0e:b1:42:70:15:52:14:79:bc:05:
         ad:61:dd:3f:3b:a2:00:88:ed:f6:5c:f9:d3:9f:4e:30:46:b9:
         e8:f5:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:52 2025 by rpki-client