Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
File:                     Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft (raw, json)
Hash identifier:          M/5s3N5u6tHvbV5p5yz3Zw8ACIvIJTg4IFiksxAX0cc=
Subject key identifier:   30:F8:F0:74:A5:08:AE:18:00:6F:81:4B:A5:3C:AC:24:A3:68:08:7B
Authority key identifier: 4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
Certificate issuer:       /CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Certificate serial:       01974931A31D12A2E499CBB2B29875693048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 07:01:19 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:19 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:19 +0000
Files and hashes:         1: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl (hash: WeKv2GLL+8OqZeR2zXQZaMaNfhXQDKfsiA9sQZzi54E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:a3:1d:12:a2:e4:99:cb:b2:b2:98:75:69:30:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
        Validity
            Not Before: Jun  7 07:01:19 2025 GMT
            Not After : Jun  8 07:01:19 2025 GMT
        Subject: CN=30f8f074a508ae18006f814ba53cac24a368087b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:da:f4:0c:da:3b:7e:12:3f:25:e5:59:c3:
                    76:fe:da:e6:8c:44:cc:46:ff:f0:2b:a0:23:1f:52:
                    46:24:07:14:b4:57:7c:7c:08:a7:9b:de:26:7f:52:
                    90:52:03:da:1d:89:f7:4a:cd:f0:55:54:49:66:a5:
                    bf:eb:09:55:33:90:f1:e9:49:d8:8c:77:dd:82:7a:
                    bd:50:33:37:1c:98:30:24:ff:18:98:c8:fd:fa:33:
                    29:89:44:3b:27:f8:cb:b9:07:e8:52:55:17:2b:41:
                    5a:88:d7:af:18:7a:4e:ba:36:b4:fe:5a:ce:dc:8b:
                    c5:ff:ac:01:bf:35:a6:dc:83:2f:7f:2f:b2:ce:39:
                    56:be:78:4f:ba:0b:d0:93:54:75:67:6b:4b:48:07:
                    ff:ce:e2:62:01:09:97:c7:e5:ce:87:6c:7a:8f:66:
                    c2:32:3f:73:7d:41:cb:7f:3c:1b:db:87:f2:b0:fd:
                    f3:4e:56:a8:a8:88:cb:ea:fa:f5:7b:3d:0b:0f:1b:
                    76:43:5a:64:1a:8f:3f:53:af:bc:fe:49:63:0a:2e:
                    63:11:ab:5e:09:fd:fe:fb:78:48:69:48:33:cb:22:
                    c0:7b:9f:7e:83:b6:51:4c:33:5a:3f:33:c9:be:50:
                    2c:b5:89:e2:03:f7:2f:ee:a1:3e:26:ba:dd:a4:0f:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F8:F0:74:A5:08:AE:18:00:6F:81:4B:A5:3C:AC:24:A3:68:08:7B
            X509v3 Authority Key Identifier:
                keyid:4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:27:29:62:f1:a7:8d:c4:f1:94:b7:0f:1d:a0:9a:bd:40:91:
         00:d2:47:f6:14:0a:2c:01:ab:f3:51:ba:c6:46:5e:1f:9a:53:
         bc:23:ba:14:14:cf:ba:a6:11:d2:71:5a:c4:3e:82:10:6c:c3:
         a4:41:1a:ad:57:48:af:79:f2:69:ab:3d:af:69:e8:a5:96:9f:
         21:d8:ed:7d:1a:20:7a:fc:ba:05:47:e6:86:86:3f:38:2f:9a:
         cf:c9:d3:fa:6e:38:b9:eb:95:be:bc:8e:b8:d4:b8:3f:e7:0c:
         41:15:6b:61:2b:74:ff:2e:13:51:43:3b:60:c5:64:b5:d5:d5:
         e6:67:53:e4:21:9d:37:00:3d:bc:5c:37:c6:34:22:9c:e3:f1:
         91:e3:3a:c3:ab:08:b4:97:a8:b6:b4:d9:dd:5e:57:da:4b:72:
         1a:73:d1:1b:11:77:9a:b3:f6:87:a3:9e:2c:7d:21:20:a1:e4:
         fd:03:30:0d:e3:4c:65:a9:a8:7e:d1:03:0c:a6:ed:16:0c:d2:
         4f:2f:36:32:12:ad:d8:9f:b6:af:5d:0e:8b:2e:57:6f:df:7b:
         b1:e8:7f:d4:96:aa:5c:72:69:48:02:d1:f8:1a:c9:3b:cb:8c:
         e0:eb:a1:9f:a8:7b:aa:2f:4e:d2:3c:1b:9d:ef:2d:8f:d5:be:
         77:6b:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:02 2025 by rpki-client