Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File:                     YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier:          uOlGZzkNXq3kvr/GKnKQPYytf96Da0cxCjWGgmWW2/0=
Subject key identifier:   8A:14:23:75:D1:EC:2A:4C:60:DA:26:AE:37:F5:3F:59:CB:C2:47:B6
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer:       /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial:       0197665FF9EBD640E9EADDB841F2CD39BEA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number:          158E
Signing time:             Thu 12 Jun 2025 23:00:55 +0000
Manifest this update:     Thu 12 Jun 2025 23:00:55 +0000
Manifest next update:     Fri 13 Jun 2025 23:00:55 +0000
Files and hashes:         1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
                          2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
                          3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: kGaPYR02I7U5tcjWiC/bsmJpymR5hGFhRXrJHvUBFz0=)
                          4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:5f:f9:eb:d6:40:e9:ea:dd:b8:41:f2:cd:39:be:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Validity
            Not Before: Jun 12 23:00:55 2025 GMT
            Not After : Jun 13 23:00:55 2025 GMT
        Subject: CN=8a142375d1ec2a4c60da26ae37f53f59cbc247b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:24:5d:58:3c:63:b2:86:11:66:bc:bf:42:
                    63:b2:9d:f2:23:59:ed:7a:75:6f:27:66:04:40:a4:
                    ca:5e:d7:de:3f:45:79:59:20:88:fa:5e:4b:86:0a:
                    aa:e5:d2:4a:6e:fa:6b:ab:1d:fa:11:96:2c:1d:0e:
                    8b:d5:44:96:42:d4:ef:10:06:2e:ce:5a:df:a5:7c:
                    14:53:3d:ce:61:7c:f5:b9:89:b0:42:91:27:b6:cf:
                    b2:37:b0:5f:c5:2f:3b:15:37:c5:80:f7:46:ef:8e:
                    79:36:df:6c:8e:7b:b3:40:cd:8e:79:b8:3a:61:65:
                    83:72:f1:e6:25:4b:42:9a:75:f2:fe:54:83:60:1f:
                    44:29:18:3a:36:14:bf:ae:ac:a1:71:83:9d:09:87:
                    3c:00:a5:72:8d:dc:87:83:eb:e4:b5:f4:04:5c:8f:
                    ee:a3:8d:f7:72:cd:96:0a:e0:d1:df:b5:aa:cc:4f:
                    24:cb:8f:78:bf:d2:53:69:a2:52:f3:64:f5:8f:33:
                    0a:54:b3:da:48:39:c7:09:94:93:aa:5a:d3:a3:88:
                    cd:54:52:d0:23:49:31:9e:ba:81:3d:5a:28:d8:57:
                    73:b4:f5:67:91:a1:73:e5:43:d4:ef:9b:5e:8e:87:
                    f3:f3:43:88:65:ca:c3:fe:33:a4:aa:40:ae:d0:fc:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:14:23:75:D1:EC:2A:4C:60:DA:26:AE:37:F5:3F:59:CB:C2:47:B6
            X509v3 Authority Key Identifier:
                keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:73:b6:fe:8e:05:f1:04:06:1f:6c:f4:a1:4e:b1:55:83:30:
         43:dc:dd:d9:f3:9a:61:b3:88:c1:70:f2:5a:b8:1c:e0:84:f7:
         68:3d:5b:d8:3f:06:98:38:e9:66:60:cc:f9:01:ab:f4:9d:99:
         7f:09:c7:a9:22:39:7e:d2:a1:4d:c2:c3:29:05:03:83:2f:25:
         4a:42:a8:66:7e:85:fc:d0:67:cc:b9:38:4c:49:b0:91:53:1b:
         4d:df:ae:80:62:97:ff:b9:1d:75:ca:16:9b:28:66:ac:6e:86:
         9d:36:35:a0:58:2d:30:c1:a5:a7:2e:c9:75:f1:ab:d5:04:12:
         a5:9a:c8:dc:a7:24:8c:b9:77:62:07:ea:56:c8:4d:8a:bd:39:
         53:59:96:ff:01:27:6a:10:82:04:43:83:b2:04:c2:ed:67:05:
         e0:b5:fc:04:e1:72:82:f6:a0:03:bb:56:0f:02:12:fa:99:68:
         dd:75:e9:03:c8:7e:34:f2:89:a3:3b:cc:6c:17:0d:e6:ee:03:
         d3:e5:88:98:8a:e6:05:02:17:bb:38:c4:c4:53:0b:d3:88:cb:
         51:13:91:41:5e:78:de:07:19:20:1d:1d:ca:06:0a:01:cf:d3:
         84:7d:ab:71:27:a0:38:5f:ba:49:3a:6e:71:5c:66:cc:03:5b:
         7d:52:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:36:16 2025 by rpki-client