Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File:                     zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier:          uUdx7yRG9X7bl+Yq5vQ9bSmzYNBY8nKl6FDdXGubTV8=
Subject key identifier:   59:0F:09:AC:4B:55:41:3C:68:A2:53:DB:39:FC:28:9C:57:AB:92:A1
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer:       /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial:       019748554A854DBD1C4DD72A718618837649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 03:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:38 +0000
Files and hashes:         1: Y9gCH4thucbTjT0xARnAurkdlt0.roa (hash: yAFowKPItllcTMSoNXQVDZSzSIBjFl8626mwMV3sNgo=)
                          2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: 4NtFGJ3pnz6LkP9sbRBgzigOGEUCx9J3d0Cd5YIc/O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:4a:85:4d:bd:1c:4d:d7:2a:71:86:18:83:76:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
        Validity
            Not Before: Jun  7 03:00:38 2025 GMT
            Not After : Jun  8 03:00:38 2025 GMT
        Subject: CN=590f09ac4b55413c68a253db39fc289c57ab92a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:80:0d:dd:86:e5:31:94:37:79:7c:19:83:
                    cb:cc:72:20:bc:dd:5b:36:b5:5f:b8:2f:ae:c1:ff:
                    78:68:ac:49:f7:c3:cd:07:11:4f:e2:7d:df:81:7b:
                    a9:8a:1c:68:16:c7:e0:78:53:66:96:5f:8d:46:59:
                    58:62:f0:07:a2:ad:2e:c7:69:63:9b:cc:a8:8f:67:
                    38:de:97:8e:8c:bf:4c:88:04:5a:94:3f:fd:4b:4d:
                    c4:fb:03:93:17:d9:e7:dd:64:6e:d1:69:93:8a:34:
                    76:65:10:4d:00:86:25:37:60:c8:c2:22:52:81:4e:
                    b8:16:04:93:dd:fc:2a:2e:bb:57:4f:0a:fa:39:e5:
                    75:62:80:09:30:9e:4f:c8:f8:be:40:b5:88:c4:87:
                    84:ba:56:df:e2:d8:8f:5f:1b:e6:fc:3c:9c:db:80:
                    1b:77:84:ef:d2:9c:78:5d:0d:33:25:d0:1f:ec:31:
                    10:83:de:f5:83:ac:fa:6b:51:4c:73:3d:ba:d2:25:
                    51:54:d8:bd:bb:45:12:05:82:b6:8b:3a:6d:f6:0e:
                    46:4f:62:0c:4b:e7:23:29:e4:93:cf:db:b0:47:54:
                    a8:4c:94:e2:2b:12:ee:b0:41:75:84:5c:a4:26:d1:
                    39:9b:23:26:01:cb:b3:be:0f:2a:39:8c:0c:39:d7:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0F:09:AC:4B:55:41:3C:68:A2:53:DB:39:FC:28:9C:57:AB:92:A1
            X509v3 Authority Key Identifier:
                keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b3:eb:5a:f7:83:a2:8a:43:f6:24:e0:9b:84:71:84:48:8e:
         79:f4:0a:f5:3b:1b:33:86:2c:e1:b6:a7:20:20:77:e3:ec:eb:
         ac:ce:b9:3c:6a:e9:5c:d2:ac:25:0a:bb:81:72:6a:55:21:f0:
         89:4d:a5:82:8b:d0:fb:c4:fd:7b:c3:c4:56:e1:7f:e8:8a:0a:
         b2:71:e9:94:a1:5f:f2:0e:00:43:94:6b:2e:b1:0a:c8:e2:d7:
         d3:3e:a5:c1:f0:d1:9f:07:7b:0b:5e:c9:14:16:84:c4:c0:e3:
         10:81:c7:25:0e:d9:29:65:26:2e:42:c3:7b:5e:11:f0:74:8a:
         34:1d:53:51:84:04:91:60:eb:6a:9a:89:8a:70:a3:ca:d1:63:
         9f:55:44:ee:66:e9:b6:4b:59:43:07:28:54:0e:9d:05:f7:12:
         a3:20:89:f7:3e:78:99:ba:af:40:f3:ba:72:64:19:7f:50:94:
         9a:1d:61:8c:fe:5f:e4:3e:a2:35:6e:ff:d9:e2:ef:8f:a7:40:
         da:f7:4a:00:c1:56:4d:5f:41:4c:cd:c1:86:c7:8b:84:9e:b2:
         ed:43:c7:92:3d:9c:57:d6:b0:8b:e9:e5:8d:4a:f5:80:83:6e:
         79:aa:1d:75:18:6f:ac:a1:a7:85:77:95:21:5b:bc:24:20:1c:
         eb:c6:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:30:38 2025 by rpki-client