Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          JrAzCxNFSEmOArAlSqhbnsp6cgNnDYEf5ccfOMzT1gs=
Subject key identifier:   8D:12:A3:4C:18:28:25:A6:4F:8B:3C:AA:F6:DE:B1:BB:DE:C3:11:62
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       019745F951635C4DFC1E103075BF83AC244D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 16:00:56 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:56 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:56 +0000
Files and hashes:         1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
                          2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
                          3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
                          4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: x7V4QCy51MWBeoPeoOTsPICEzpCepicJ2rvRirjPUL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:51:63:5c:4d:fc:1e:10:30:75:bf:83:ac:24:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: Jun  6 16:00:56 2025 GMT
            Not After : Jun  7 16:00:56 2025 GMT
        Subject: CN=8d12a34c182825a64f8b3caaf6deb1bbdec31162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:66:00:85:5e:14:8d:9e:cb:dc:45:06:8d:
                    8d:e9:69:87:37:a7:3b:1d:cb:14:d4:ea:1d:cc:35:
                    a6:96:60:bc:e2:05:8d:2e:89:40:df:f5:ca:98:3b:
                    ac:76:c8:23:2a:22:34:04:2d:d4:6d:53:0f:f3:62:
                    30:73:1a:6e:a3:35:78:21:85:94:7d:c0:8c:14:5b:
                    0c:8b:98:05:ad:9b:ff:4e:78:25:fa:4f:9e:67:69:
                    dc:98:d3:2a:a8:1c:b7:3c:86:4d:89:a0:11:4d:d9:
                    06:08:f9:72:83:23:18:a8:e6:f8:29:19:37:f6:59:
                    b4:95:8b:56:1a:e8:b1:eb:62:cc:05:1e:07:fc:2c:
                    f0:f3:04:cc:77:52:63:bc:86:de:c2:c8:ef:bf:c3:
                    47:62:2c:03:8f:8a:8f:d7:44:46:35:ae:26:0e:2a:
                    2f:10:9b:c1:f2:31:30:05:9c:e6:94:94:b1:12:b9:
                    43:5b:09:d1:7f:5f:a8:11:d5:57:91:8e:51:95:d4:
                    81:7b:b9:44:19:27:7c:24:55:7d:26:38:7f:6d:6a:
                    b6:33:c7:ee:1e:a6:31:c1:43:06:63:0f:07:f8:0c:
                    9d:0a:79:ed:cf:34:fc:ed:c7:01:97:96:31:0e:da:
                    ab:32:48:af:4e:ce:96:43:da:80:12:0b:4f:0e:ea:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:12:A3:4C:18:28:25:A6:4F:8B:3C:AA:F6:DE:B1:BB:DE:C3:11:62
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:92:84:84:74:07:ff:e5:ab:27:a0:a4:b2:c7:cb:58:92:f0:
         a5:f7:83:82:5e:90:ab:99:b1:b9:fc:4e:4f:4e:5e:9a:0a:b5:
         12:3e:49:5f:f7:6c:3e:e0:58:5a:fd:e0:28:ba:a7:d4:e8:54:
         c5:9b:27:82:d5:04:da:ae:33:18:76:eb:8f:a4:a1:ef:c7:52:
         b0:fe:83:a4:aa:b9:0c:ce:11:8b:28:42:2a:f1:ab:82:4a:24:
         5e:62:ae:51:c5:e2:d3:90:ae:55:6a:8b:02:16:f4:bc:45:c9:
         93:a6:08:17:87:f5:45:ed:e8:57:57:ea:6b:c0:b1:ef:e0:d4:
         7d:f8:8b:d1:ee:53:dc:21:a8:62:8c:07:b9:9e:e0:37:5f:2c:
         a4:2b:b5:72:b3:f1:1c:ab:3b:48:23:0b:c0:60:a6:0f:8d:98:
         bc:7c:e2:c9:1c:ae:d2:79:08:1b:b4:f5:07:a7:51:52:b7:d7:
         47:de:d6:6e:9f:8e:e7:aa:db:e5:f6:94:09:5c:9f:c9:5a:6d:
         d8:a3:2d:6c:18:85:df:ef:3d:9c:52:27:24:2a:c6:1d:80:69:
         bd:44:71:40:21:c4:ce:79:2b:f5:7a:91:0e:f4:0b:dc:13:45:
         01:bb:ac:22:9b:04:0b:45:28:dd:35:6d:e5:17:d1:00:c5:0a:
         bc:b6:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:29 2025 by rpki-client