Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
File:                     rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json)
Hash identifier:          4j74UDOB4Sp6Pew7k+7ZiS93WHIEP1i0iL4VF0au+c4=
Subject key identifier:   D4:A8:D0:7F:54:C2:3D:0B:E6:40:95:DA:80:0B:B5:05:B4:CE:D7:D7
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Certificate issuer:       /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial:       019748F9D0D1AE5519E14E956B70FC10417E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 06:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:20 +0000
Files and hashes:         1: FbMzdZ6d131ZqxxEpoI_GtnkvJI.roa (hash: 7d7wChwbMGPeRXkmkbPscoua0cT1OAJDT7heJW95UEI=)
                          2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: tSmW389/8tCYt8GPDFwnnGPUE0JwaiBUBhGYisFsohw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:d0:d1:ae:55:19:e1:4e:95:6b:70:fc:10:41:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
        Validity
            Not Before: Jun  7 06:00:20 2025 GMT
            Not After : Jun  8 06:00:20 2025 GMT
        Subject: CN=d4a8d07f54c23d0be64095da800bb505b4ced7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3b:7d:43:7b:05:d3:46:e3:d2:a0:dc:28:d0:
                    4c:f8:9a:2f:d2:2a:ea:0a:ee:f3:29:06:7c:84:39:
                    00:da:84:8b:7f:38:93:a5:d9:ef:7e:92:6e:ea:f0:
                    d6:7f:37:4f:f9:18:30:7a:90:43:45:83:d5:1b:52:
                    e3:c0:0d:e5:5e:5a:88:53:e4:25:95:32:65:8f:3a:
                    81:85:a6:a7:4c:3c:e4:a7:2e:71:f4:75:0e:8a:ae:
                    1c:00:15:3f:f4:c4:81:37:f8:55:f0:25:6d:9b:5b:
                    9a:cf:b2:35:17:e9:57:8f:71:41:7a:1a:bc:4a:85:
                    ee:db:9d:fe:3d:2f:78:99:ad:9f:ba:23:d0:3a:58:
                    5d:9a:25:cd:3a:98:73:2a:2f:31:43:3b:4b:5d:0b:
                    88:33:2d:a1:13:be:41:06:73:70:e9:0b:c6:1a:6c:
                    06:e9:52:5a:d6:95:8e:29:01:50:f0:d0:3b:83:c0:
                    7f:4e:f8:02:bd:9b:37:f5:ba:93:02:d0:2d:d1:25:
                    23:5c:ba:7a:51:12:e4:f2:21:6a:27:88:cf:1e:5b:
                    26:a6:e0:ea:65:19:7f:f4:2c:47:6b:74:3e:cd:18:
                    28:ab:9f:d1:83:68:9d:bc:3e:e4:b2:a3:bb:f0:21:
                    13:90:26:e3:96:91:b9:ce:01:95:0c:b8:05:0a:49:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A8:D0:7F:54:C2:3D:0B:E6:40:95:DA:80:0B:B5:05:B4:CE:D7:D7
            X509v3 Authority Key Identifier:
                keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:cb:00:62:52:32:66:f9:cb:0f:15:d6:12:dc:bb:64:bf:26:
         2f:ab:c3:09:bf:86:69:5e:81:8a:f6:1a:4c:ae:90:64:29:81:
         e2:6d:f2:c7:59:1e:7a:54:e2:1b:d7:e2:13:c1:ea:04:0c:f3:
         53:fd:d7:d4:ea:77:c4:0d:ec:9b:5c:f8:4a:c0:62:41:e8:c2:
         08:34:e8:34:1b:3e:4d:db:5b:0f:e4:70:89:01:5f:05:d5:4c:
         c1:07:2a:e9:67:01:df:ca:e8:76:b1:18:8a:83:1c:ed:00:00:
         40:a2:ad:3d:97:70:f2:de:55:ba:37:a4:3d:10:ef:ed:9d:e1:
         6b:0b:fd:13:59:d8:2a:1e:3d:ff:14:9c:6d:e3:76:71:10:f3:
         01:0c:98:dc:d3:0f:b9:73:cf:8e:59:54:57:90:49:af:cc:4a:
         9e:24:6c:d5:ce:5b:b7:5a:ba:d3:11:22:88:72:3e:1c:e5:3e:
         3d:65:26:3e:68:86:c8:c5:f5:b2:1b:8e:ee:3a:03:98:ce:e8:
         cf:bb:4f:1a:1e:09:85:eb:43:da:d7:95:94:51:8f:99:6b:73:
         95:da:57:22:b7:03:9b:ad:54:80:fa:bf:9e:37:73:9f:5a:b3:
         18:e8:6e:d5:40:79:60:37:82:c6:e1:6e:4a:d1:4a:28:51:d4:
         dc:e9:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:02 2025 by rpki-client