Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
File:                     d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json)
Hash identifier:          jrjFAGQqEYeJPlLCu0f0zK9XnqKkhkH8WQgDJ9HxbXI=
Subject key identifier:   78:A5:7A:1E:E5:72:CC:9F:88:FF:4F:C6:6F:71:80:AE:0D:13:BC:FF
Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
Certificate issuer:       /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Certificate serial:       01974BFB58A4DAD2B3A92EDD88A371A8674C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 20:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:52 +0000
Files and hashes:         1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: /bgK5FsrwP3Y3+CykVGIHg9MltagzL0dJQUKK0X878w=)
                          2: xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa (hash: sEUW5djd1NzJ3pooD+mv2egmXyQ8A1sExKT4CHNq2Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:58:a4:da:d2:b3:a9:2e:dd:88:a3:71:a8:67:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
        Validity
            Not Before: Jun  7 20:00:52 2025 GMT
            Not After : Jun  8 20:00:52 2025 GMT
        Subject: CN=78a57a1ee572cc9f88ff4fc66f7180ae0d13bcff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:90:b2:c2:d6:f4:79:6b:03:66:dd:2a:22:
                    0e:5f:dc:b3:c6:b9:bb:3e:08:85:52:f1:78:41:4d:
                    6b:f3:ea:fe:51:c1:63:92:09:4e:c6:78:86:37:6d:
                    10:47:cb:31:99:1d:cf:ee:95:e8:68:12:07:92:35:
                    49:18:f2:8c:22:0d:79:74:db:8d:9b:9d:0a:b5:4d:
                    bb:a6:40:49:bd:75:51:43:ea:50:a6:ba:97:1f:ba:
                    ed:bd:4d:4f:6a:34:9a:d5:45:51:32:3c:2a:3e:2e:
                    57:b0:f8:a4:7b:9c:f4:f7:9d:65:18:f9:b1:84:1a:
                    85:e5:75:1f:9e:ad:c9:15:e6:19:3b:bc:bd:56:dd:
                    2e:30:64:37:ae:e4:bc:6b:81:0e:b4:90:4e:44:ad:
                    cc:f9:bd:f3:bb:a0:10:36:6f:b0:b0:8f:bd:14:95:
                    3b:6b:f9:a6:63:8a:38:8a:2c:a0:43:ce:74:21:41:
                    91:90:32:80:65:6f:8b:0d:26:a3:fb:8c:36:62:53:
                    9a:bf:fa:5b:bd:84:a2:fb:c9:2a:46:de:20:21:98:
                    50:df:03:5b:f5:00:ec:06:49:41:af:19:83:5f:b7:
                    c4:7b:7e:7f:68:f7:91:95:60:70:db:00:af:8e:b1:
                    85:9d:8f:3c:cc:74:94:f7:c0:51:fb:85:b8:9d:3e:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:7A:1E:E5:72:CC:9F:88:FF:4F:C6:6F:71:80:AE:0D:13:BC:FF
            X509v3 Authority Key Identifier:
                keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:a3:97:9d:e8:06:b0:96:12:51:37:22:f7:d3:39:8e:7a:
         9d:73:fb:f9:2e:e6:bf:0f:46:a5:c5:cb:6a:e5:91:c8:a1:0e:
         da:f3:94:d0:84:fe:68:fa:c4:87:4f:7a:e6:16:49:d6:d1:79:
         a0:03:56:80:07:ac:73:93:d3:a6:12:97:21:40:d0:c3:14:9e:
         81:02:79:c9:52:70:e7:db:d1:c2:20:16:4a:b8:5b:a8:dd:d7:
         59:5d:39:54:ab:81:04:99:eb:96:58:4c:24:62:02:f5:dc:63:
         02:a1:b5:66:22:cf:9e:d6:52:00:58:70:27:61:39:00:fa:8c:
         86:2f:11:a1:f0:c3:8d:aa:3f:14:ab:98:0a:96:af:db:62:31:
         e6:13:dd:c6:cb:c1:1f:36:4c:2f:1a:31:b0:90:8e:49:b5:bd:
         05:a5:70:51:ff:ec:52:14:b7:49:f0:af:d6:08:9e:5f:92:34:
         ae:48:b0:74:b5:c8:c2:09:51:5e:76:f3:5f:49:24:dd:57:21:
         0c:c5:03:7d:c0:5e:c9:74:e7:0e:94:d4:8d:b6:65:68:2a:33:
         05:d6:e5:4a:6b:78:a4:9e:a6:6c:ec:ce:34:bd:1d:d5:de:46:
         4d:c6:bf:0b:d6:29:90:c8:40:87:f4:bc:fe:60:56:2b:fe:92:
         ce:6f:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:00 2025 by rpki-client