Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File:                     PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier:          kBvLzCLCaD27ZBnDITcPpCbj2tcaM3mywJkvYofrpng=
Subject key identifier:   19:F7:B8:3C:5A:FF:5D:A1:85:D8:E9:DB:B8:65:CA:0C:2E:25:01:9E
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer:       /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial:       01974967ADBE067726377DFF26189E975097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 08:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:20 +0000
Files and hashes:         1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=)
                          2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: BuX9st+fZkZ/amwo/zCCdhYn8g2rHpWeyk/uzCbbW9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:ad:be:06:77:26:37:7d:ff:26:18:9e:97:50:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
        Validity
            Not Before: Jun  7 08:00:20 2025 GMT
            Not After : Jun  8 08:00:20 2025 GMT
        Subject: CN=19f7b83c5aff5da185d8e9dbb865ca0c2e25019e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:da:eb:8c:80:75:9b:6f:ba:f6:fa:e0:3f:3a:
                    6a:cf:b4:bc:0c:1a:c8:bf:0b:69:25:c9:cf:48:c8:
                    57:59:c6:3a:84:01:f5:f8:5f:96:dc:24:05:ca:bd:
                    4e:42:65:e8:7e:b2:0b:da:bb:63:81:e1:41:66:7e:
                    e0:7e:8e:c7:4c:ea:52:95:af:20:c1:a0:7a:5c:01:
                    a7:c3:d7:42:b4:6f:b3:23:18:8a:91:89:ff:04:10:
                    3c:c9:93:3e:b0:e9:51:76:06:05:53:8d:bb:47:60:
                    6e:5c:62:8d:0f:f9:94:13:dd:0a:2f:eb:31:0d:3f:
                    d4:9b:85:05:f8:06:5b:ab:27:a9:37:7a:b5:2c:f2:
                    5b:0d:02:ff:b5:e0:a4:fe:c0:02:42:96:4a:5b:24:
                    e3:cf:2f:07:31:6f:52:b2:ca:5c:9f:f4:cc:59:ab:
                    96:11:ef:0c:0a:42:19:6f:be:6e:c2:19:cc:dd:59:
                    0b:f3:65:0f:36:bc:1a:56:d6:9b:74:c7:e4:81:57:
                    90:99:07:a4:55:f4:9d:12:45:a1:82:c5:be:b9:04:
                    51:66:ab:e7:c9:88:e8:1e:95:1f:26:54:95:cc:01:
                    11:bb:b5:fa:44:52:f4:63:bc:ba:a8:92:79:97:4f:
                    08:04:b4:dc:8e:b3:ee:25:87:32:71:c0:1a:10:e5:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:B8:3C:5A:FF:5D:A1:85:D8:E9:DB:B8:65:CA:0C:2E:25:01:9E
            X509v3 Authority Key Identifier:
                keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:32:93:4e:09:d1:09:b0:8e:d9:e4:6a:8b:84:87:3d:66:df:
         1d:82:3f:d6:27:85:d5:b8:39:ff:8e:dd:03:14:18:01:81:ee:
         49:3c:0e:f3:88:7b:47:1b:f8:1a:46:a9:2c:15:52:7e:fa:cf:
         72:c1:00:1f:73:bf:34:f1:5b:6e:ef:e8:81:1a:5c:85:6f:31:
         6e:67:d2:d0:19:64:51:42:df:bc:00:c2:50:37:f4:c2:42:bf:
         f2:34:3b:50:07:39:bd:3e:ca:09:97:4b:78:eb:0f:7f:6f:0b:
         53:1d:9f:d5:e5:5c:bc:61:1b:82:31:6b:3c:96:62:70:04:6a:
         18:12:4d:b8:97:40:a4:6e:b6:b8:b7:f5:17:4c:72:c4:1c:64:
         df:34:7f:bd:a7:c2:2d:3c:e4:bb:47:05:94:a4:9e:de:62:c6:
         4a:61:e0:f0:25:0e:11:d9:2d:23:29:bb:40:cf:fb:9c:e5:c8:
         e8:a9:ba:78:ba:2c:b1:bf:19:e9:9b:f2:a8:a5:37:1e:6d:ac:
         6e:33:a2:ce:08:64:d5:3d:1e:ae:88:ba:86:be:9f:0b:19:b9:
         60:87:bf:b2:3b:b3:ca:0f:3c:1b:1a:a4:c3:70:71:4f:07:3f:
         c5:c5:be:f9:1d:c6:fa:d9:31:ce:48:aa:65:b9:f3:ba:bc:cf:
         ff:f0:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:04:38 2025 by rpki-client