Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
File:                     6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft (raw, json)
Hash identifier:          Kp0qY2IHf9Qr8M8sE9wlKQV4bWliZT2+xP3MfltxRIY=
Subject key identifier:   7F:D3:F4:40:50:AA:24:A7:C2:2E:47:12:DD:4D:5E:63:C4:0B:94:55
Authority key identifier: E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40
Certificate issuer:       /CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
Certificate serial:       01974742F15CE87EFE291233E3DC8283F0F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 22:00:58 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:58 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:58 +0000
Files and hashes:         1: 1-Gp-Aj6rXUl3rCcfTEV_zKX81GM.roa (hash: jcNgC8sUFB2sRMcieBCYPhWYxbrZslrozKmwIIc2sSY=)
                          2: 6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl (hash: +T+YehwDBYQyy7segbMa8Hot7IEMxzSAIfuhfDIVt6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:f1:5c:e8:7e:fe:29:12:33:e3:dc:82:83:f0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
        Validity
            Not Before: Jun  6 22:00:58 2025 GMT
            Not After : Jun  7 22:00:58 2025 GMT
        Subject: CN=7fd3f44050aa24a7c22e4712dd4d5e63c40b9455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:2f:e2:ff:32:e9:9b:84:c9:36:02:9a:bc:
                    1a:66:eb:92:86:55:05:8b:cc:1c:46:e5:64:af:5b:
                    41:c9:13:f3:09:e8:99:04:df:67:b3:52:c8:16:8e:
                    2d:99:77:c3:55:b5:02:48:26:07:59:74:66:6d:31:
                    84:a7:19:b2:f1:75:74:c7:51:7d:36:3d:91:70:21:
                    cf:d5:9a:92:57:fd:48:2f:d1:5b:aa:08:ee:ea:64:
                    b7:a4:dd:00:28:b6:67:20:ce:d7:9b:df:d3:cb:e0:
                    71:e6:fe:bd:2d:4e:f9:f2:4f:0e:13:a2:1b:ca:a9:
                    f1:0e:24:4f:01:63:82:78:90:af:74:e3:e5:07:23:
                    45:77:9c:b0:40:76:99:be:a7:96:69:d7:2b:fe:dd:
                    5b:62:91:cb:4a:82:09:43:62:ca:7c:e3:2f:6a:c0:
                    c4:c9:e2:b2:e4:0a:40:ce:d2:55:07:a3:37:8e:73:
                    04:09:1a:c1:3f:ae:cf:28:ae:47:9a:34:e9:52:0c:
                    49:40:f3:70:46:79:20:d3:96:01:1b:6e:f8:cc:c8:
                    42:04:36:e8:fd:32:d3:fd:5c:66:ea:ef:d9:65:ad:
                    ad:d2:ba:af:b5:61:ce:ed:72:df:ae:9f:93:8e:9f:
                    1b:e8:3e:f9:cd:3b:43:f4:4f:d6:23:0b:da:67:1d:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D3:F4:40:50:AA:24:A7:C2:2E:47:12:DD:4D:5E:63:C4:0B:94:55
            X509v3 Authority Key Identifier:
                keyid:E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:75:2a:d9:14:7b:6c:68:fc:37:7a:d7:e0:de:83:cb:53:fe:
         85:8a:9f:81:fc:5e:26:cd:41:9b:e1:64:e9:4c:3e:c7:fa:0c:
         8f:43:ad:cf:e0:72:f3:ac:6e:42:ec:be:90:40:cf:9c:f6:9e:
         dd:51:c3:7a:bb:2b:65:62:f0:5f:c7:9c:02:40:44:7a:3f:5e:
         e3:5d:58:ee:3a:81:a0:a1:f6:c3:e6:f8:42:a1:96:cf:d9:5b:
         25:57:19:63:06:a9:b9:68:62:7a:a9:4e:41:0a:03:f7:db:3b:
         61:03:b6:5e:aa:bc:31:39:a5:02:0d:4a:45:a2:28:cd:bd:c7:
         90:41:20:df:a4:fa:f2:9f:c5:9e:8b:19:35:c5:2b:96:bd:53:
         2c:31:c2:15:c7:f6:01:2d:b1:46:8e:2a:47:d9:5b:7b:cf:60:
         0b:62:4d:42:db:77:65:69:26:82:6a:60:21:3f:4f:4d:9d:22:
         d9:37:84:a8:12:b8:ad:a5:f6:9d:92:8c:71:19:1f:cf:af:5f:
         6e:85:99:85:d7:4b:d5:39:86:bd:e9:08:3a:99:0c:ba:76:86:
         5c:cf:ee:07:3e:75:f7:9a:d5:bb:8f:62:ed:e2:29:23:da:fb:
         ef:8c:3c:1d:e7:de:da:b1:93:ae:52:9f:f5:0e:7a:0d:b4:c9:
         b3:7a:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:30 2025 by rpki-client