Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File:                     18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier:          ZYMXLvxEx2ExXUJXqAXV9qn7wSpomOJMxRMWcn1Auwk=
Subject key identifier:   6B:75:97:6D:DB:98:CD:BF:66:49:98:D2:8A:3C:C0:6F:72:74:DC:1B
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer:       /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial:       01974C31C5CDC280AF429F6354BB79A7A830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 21:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:19 +0000
Files and hashes:         1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: rQkUraAzJJOTiCPqMyHWuIgVmoIjujmSgF1HJXLzSe8=)
                          2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:c5:cd:c2:80:af:42:9f:63:54:bb:79:a7:a8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
        Validity
            Not Before: Jun  7 21:00:19 2025 GMT
            Not After : Jun  8 21:00:19 2025 GMT
        Subject: CN=6b75976ddb98cdbf664998d28a3cc06f7274dc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:1c:38:8a:50:fd:7b:4f:a8:58:10:ea:9b:
                    b2:1a:9f:17:59:6c:88:b4:9a:52:e9:13:3e:30:5e:
                    6d:a8:ca:c5:6a:5c:6b:b5:70:e4:0e:b2:01:a3:65:
                    68:61:a7:1c:bf:7c:d6:33:8a:6e:10:8d:54:75:cd:
                    18:5e:79:c6:1e:c9:92:6b:b6:82:65:c0:77:b4:f9:
                    e8:73:2b:cf:79:b4:60:8b:7b:3d:cd:6f:75:8c:19:
                    72:3a:03:ed:5e:b4:b9:7e:39:fe:0f:97:e7:a7:43:
                    a2:d4:31:e1:c9:eb:8b:e4:ac:ce:a2:fc:2c:17:6f:
                    38:a7:90:48:39:42:9a:79:6b:2e:2d:a1:f1:c6:49:
                    6b:fa:6e:99:c2:ea:10:6b:70:e5:74:f4:cc:80:36:
                    e6:ca:1a:bc:34:cc:2a:5d:6c:ef:54:02:29:61:35:
                    11:f3:38:04:21:8c:74:25:58:ba:0f:83:4f:e2:00:
                    37:7d:93:ef:40:ef:8a:c2:76:69:ff:ff:91:77:ca:
                    dd:77:65:49:2f:62:74:e1:ff:1a:21:33:81:6e:0c:
                    42:0b:53:90:d1:d5:72:14:03:94:cb:e9:d1:ad:99:
                    63:f9:6d:b3:13:0d:8c:b1:92:a6:b7:2d:bc:78:ca:
                    c4:06:c2:2c:90:c2:b2:de:ad:b3:9a:49:b8:09:53:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:75:97:6D:DB:98:CD:BF:66:49:98:D2:8A:3C:C0:6F:72:74:DC:1B
            X509v3 Authority Key Identifier:
                keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:89:4d:96:20:e7:88:3d:dc:61:a2:21:0e:c8:2b:15:ff:b9:
         45:19:ee:89:a7:67:68:02:a9:a9:74:a8:df:01:e7:9f:fd:2a:
         3e:ad:78:c4:ed:e5:b9:cc:53:b4:65:c5:60:bf:68:7e:40:ad:
         95:61:ba:57:6b:7a:76:27:7b:f4:1a:cb:d1:8b:69:2e:38:6b:
         6a:f5:36:04:82:35:20:4c:e5:3e:d6:cd:37:56:92:dc:da:53:
         28:cc:58:20:35:3a:80:71:43:7a:36:8b:5e:99:7b:e2:71:74:
         3a:24:ee:af:fc:fe:c2:49:95:a2:7d:4a:06:21:76:87:68:b4:
         a4:f0:e8:22:e1:39:39:d8:d3:90:7c:3f:08:9c:82:2a:02:8a:
         a2:ea:ba:1c:3e:50:be:8d:90:f5:78:91:4b:c7:e9:2f:eb:0a:
         23:f4:a6:61:c8:20:25:ad:67:63:47:d4:45:5e:0f:a1:2a:36:
         6d:29:96:5c:ee:c2:52:f7:32:75:2d:52:e0:69:9b:9e:38:08:
         84:3b:c3:08:b5:d3:53:79:89:65:3f:0b:ef:1c:34:b1:09:09:
         bb:e9:41:57:9f:de:cc:96:7f:eb:df:2d:31:3f:f0:cc:46:06:
         6d:f5:94:b2:d1:6c:52:1f:15:33:3c:1c:7e:69:19:a9:c0:5b:
         b8:a3:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:35 2025 by rpki-client