Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File:                     c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier:          eIZIlKJSgnS4HbUBvo+VdRE5DiFrjZJLkZ2q7K3ZnAA=
Subject key identifier:   C2:27:81:7C:F0:79:E3:B4:5C:27:42:FB:C8:72:44:60:2E:06:4C:74
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer:       /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial:       01974FA12FFF2E85A11A817203721135E195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 13:00:52 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:52 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:52 +0000
Files and hashes:         1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=)
                          2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: d+HSBVHOPBf559ubG+PMBZJ1oZwoqsG3cbmBejHFojc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a1:2f:ff:2e:85:a1:1a:81:72:03:72:11:35:e1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
        Validity
            Not Before: Jun  8 13:00:52 2025 GMT
            Not After : Jun  9 13:00:52 2025 GMT
        Subject: CN=c227817cf079e3b45c2742fbc87244602e064c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:4b:3b:b9:53:37:4c:7a:d3:08:20:16:6d:
                    73:a1:a0:c6:de:18:0b:9c:cb:19:d3:b5:9e:2c:82:
                    29:0d:3c:20:70:ed:da:68:ef:33:1c:93:3d:cc:c2:
                    5a:2b:fc:10:a6:69:e2:f2:f7:c2:66:05:22:4e:ed:
                    48:2d:26:2a:a7:27:87:47:4b:ca:d6:ba:85:8b:81:
                    77:d0:39:f5:17:82:ab:0a:73:36:91:e2:b1:44:a8:
                    91:f9:fe:9c:31:4a:97:63:d6:31:06:68:f5:38:26:
                    01:fc:dc:b4:b6:8b:85:1a:1e:ae:e6:7b:67:ef:0b:
                    9d:93:90:2a:d2:1c:6c:e6:7b:1e:21:a2:80:22:37:
                    41:af:98:5b:6b:d2:c8:86:37:b4:e1:bd:79:9e:e2:
                    60:02:e4:55:97:25:4e:14:59:1c:a5:49:f2:8e:f1:
                    b4:03:f5:69:9d:a6:83:b7:ba:f8:ba:5b:f3:40:99:
                    ee:18:0e:e9:c5:9d:c8:25:c8:86:db:03:c6:2b:89:
                    8f:ea:ad:7b:b2:a6:d8:cd:e2:4e:ed:31:0a:b9:ac:
                    cd:60:2a:65:da:75:d0:f1:79:27:ae:ad:b3:34:f8:
                    58:9a:a2:48:f1:0e:50:f5:a2:68:d2:cd:04:72:9b:
                    2e:ab:db:de:3b:31:af:bb:b6:6f:bd:2a:72:dd:5c:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:27:81:7C:F0:79:E3:B4:5C:27:42:FB:C8:72:44:60:2E:06:4C:74
            X509v3 Authority Key Identifier:
                keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:21:9e:ee:88:1d:b8:77:ee:be:83:ba:24:b4:ec:93:89:23:
         7a:55:11:44:0e:cb:b4:71:51:d4:11:9e:d3:9f:e0:78:c5:fe:
         24:08:f2:fe:da:ec:c3:75:3f:85:a6:1e:3f:28:54:45:4b:9a:
         a1:8c:92:0a:6f:cc:2f:fc:15:3d:fc:79:10:72:46:b7:83:78:
         59:a2:f8:a0:9c:4d:2d:4e:71:1b:7f:8e:54:07:97:9d:65:e3:
         10:db:da:ee:1c:1c:a2:bc:73:c9:b3:7a:48:5b:df:42:68:f7:
         f3:64:06:9c:52:7d:8e:57:38:cf:42:37:df:24:33:15:6f:11:
         69:89:32:11:cc:4e:51:19:e8:2a:3a:0b:28:2d:96:76:c8:61:
         49:6b:bc:bc:9e:67:9d:f5:0b:2d:02:5f:1c:35:30:41:b7:52:
         17:3a:5d:ef:3a:57:29:95:23:d7:ab:36:1f:d9:c7:7c:5b:64:
         38:d3:52:6c:24:b1:25:4a:88:87:92:a2:22:99:c1:bf:33:fa:
         ac:56:37:92:af:15:c6:b2:1d:aa:8d:c9:b7:40:36:83:72:78:
         49:eb:95:62:7f:fa:0d:79:98:ef:45:17:07:a9:d7:dd:8e:2a:
         b2:aa:9a:fe:8e:9d:38:6b:2f:f7:d4:37:10:91:34:f5:98:15:
         d8:92:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:27:55 2025 by rpki-client