Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File:                     suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier:          TGzcYv0jm01dmOVXuPd7DeBuV5s2R4aAVTW3Go8jtZA=
Subject key identifier:   88:F0:86:61:7D:74:05:03:72:D0:F3:71:BA:98:31:57:FF:9D:E2:E2
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer:       /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial:       01974C69262339BF5947BD99240F9E2BC140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number:          0F99
Signing time:             Sat 07 Jun 2025 22:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:48 +0000
Files and hashes:         1: cvFGyGJRsZnEcRCD9JCy58T9gVo.roa (hash: Yp1oBHirBIDihtEHMnqKxr3/5zdpx0QZszheovk5A64=)
                          2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: r0xWycCxfShe6aqF2SEpVrlm3UlyY0kxijnCkV4Hheg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:26:23:39:bf:59:47:bd:99:24:0f:9e:2b:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
        Validity
            Not Before: Jun  7 22:00:48 2025 GMT
            Not After : Jun  8 22:00:48 2025 GMT
        Subject: CN=88f086617d74050372d0f371ba983157ff9de2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:a1:a6:99:06:28:f3:14:d6:45:8d:ac:06:
                    96:52:29:0f:b2:43:bd:9f:2d:6f:b1:7b:b5:1e:2e:
                    d9:1a:d9:fa:54:f5:c8:b9:db:9f:8d:7f:ae:61:e9:
                    be:5d:e3:00:ef:17:de:eb:8b:58:e6:2d:88:aa:d4:
                    9c:e3:20:64:65:b8:a2:ed:9e:f8:41:bd:51:22:7b:
                    2b:9e:53:18:68:1e:0d:81:6e:2e:70:a9:59:c1:3a:
                    14:8b:eb:fc:11:d9:fb:b1:1b:a7:85:5c:b0:d5:f1:
                    e4:bd:14:8d:9a:a2:3f:24:3f:98:c7:eb:de:44:84:
                    2f:de:ac:fb:47:87:6f:43:cb:e6:31:97:88:e1:c4:
                    e8:a1:19:67:cb:bf:fd:c4:8d:51:15:63:02:ea:76:
                    ae:db:ed:a5:f2:9f:31:ef:00:95:97:a6:81:c8:02:
                    29:3a:66:42:65:88:18:4f:8f:34:91:b2:d1:6c:67:
                    c7:43:d0:97:b8:2b:d3:e8:3c:0c:03:d5:8b:f2:65:
                    4f:a7:44:a2:e6:b0:db:3b:68:f4:af:8b:4e:6b:76:
                    ee:36:b6:4e:24:5f:d1:da:ab:70:74:62:8f:5e:ff:
                    f6:8e:cf:07:75:38:15:7b:4f:c8:64:e4:1b:8d:aa:
                    05:46:ba:44:8c:7e:2c:e1:28:66:69:73:2a:0f:b2:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F0:86:61:7D:74:05:03:72:D0:F3:71:BA:98:31:57:FF:9D:E2:E2
            X509v3 Authority Key Identifier:
                keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5f:2f:fd:84:8a:bf:e6:59:37:3a:23:84:df:60:15:a4:1a:
         5f:d2:3c:5c:90:e9:59:34:d7:e1:1f:2e:a9:41:ce:73:3d:96:
         a7:0e:2d:32:f5:2a:32:52:7d:38:d6:98:e9:67:6a:a0:4f:47:
         88:13:1c:0c:b6:a4:48:2f:96:62:93:12:ce:a2:85:d6:3b:ae:
         5c:f8:8b:d4:fa:5b:c6:4d:7f:ac:97:0c:a2:96:b8:f6:28:35:
         e4:84:9d:96:49:3c:f0:b7:6f:c7:04:a7:94:31:a9:24:4a:ed:
         16:1e:5a:c6:32:2c:78:f1:a8:98:71:72:47:11:b1:86:02:1d:
         fd:69:f5:0e:2e:ce:42:77:e6:bb:34:a1:09:97:0a:38:83:45:
         cd:ee:a0:04:b7:57:e0:4a:18:c6:77:2a:1b:ab:16:2f:ad:ed:
         ed:2e:c6:96:db:ec:55:e1:47:af:7e:22:19:b6:1c:75:5b:99:
         f0:48:ad:c4:05:2a:24:47:f6:97:59:b6:01:3d:d0:87:64:43:
         bc:49:b7:95:7c:4a:c4:fd:a9:5c:70:94:bd:ac:98:74:d1:a2:
         d6:fd:f2:3d:43:55:99:02:03:0a:fd:03:c4:93:a9:51:ee:b0:
         b1:cb:13:a8:fa:79:81:18:1f:c2:2f:04:e3:aa:76:c6:a1:1b:
         5d:43:aa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:05:58 2025 by rpki-client