Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File:                     1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier:          +5t/tTiNy1geKOoIuQeHL2hUNwPl8/osbb6D1mTETgg=
Subject key identifier:   A2:49:77:D1:20:1F:9E:A5:D3:37:4C:0D:37:C5:F1:F5:91:A6:F7:6D
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer:       /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial:       01974967FAB8804DD944FD5F162D1EFB4FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 08:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:40 +0000
Files and hashes:         1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: Mk8Nc9rJCRCNLsWxXJUerU3WEFeRSGvTH5p8KYee+zY=)
                          2: jYHVHa_z-zz0JtB1DIQ1TtprFQY.roa (hash: 5f5RDqgvWFs/JJIC0o4g6y4OSZQd4pIoTEeBtxoIxSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:fa:b8:80:4d:d9:44:fd:5f:16:2d:1e:fb:4f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
        Validity
            Not Before: Jun  7 08:00:40 2025 GMT
            Not After : Jun  8 08:00:40 2025 GMT
        Subject: CN=a24977d1201f9ea5d3374c0d37c5f1f591a6f76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:b3:54:b8:0b:d6:34:0b:9b:df:28:fb:6c:
                    b4:24:f8:99:08:95:71:a5:cd:57:d9:e8:30:a7:3a:
                    99:b1:d4:c7:8e:33:f1:48:ef:72:6a:42:c1:c9:de:
                    8a:f5:4f:e3:46:f0:06:c4:61:a3:4d:53:04:87:6b:
                    64:24:c8:f6:18:8f:20:90:6c:0c:7b:11:81:ee:b6:
                    6c:1d:64:a2:70:03:b8:7e:1e:a2:4b:bc:ae:38:80:
                    13:00:f6:e6:cd:bc:45:f5:73:08:48:67:15:f7:df:
                    d6:c9:28:9b:48:c5:7e:12:6f:a9:2d:48:28:20:49:
                    29:9a:f8:d4:56:60:3b:69:7f:ad:8b:30:ec:0f:2f:
                    36:3a:ff:c1:6d:bb:0e:a2:aa:9f:34:80:0b:9c:74:
                    00:c5:12:f9:87:cc:09:55:71:25:04:e3:fc:da:a3:
                    fd:b6:be:1b:65:fd:75:f4:78:36:54:73:63:49:bd:
                    69:93:64:e0:90:1b:e0:20:d0:5c:53:3d:32:2b:44:
                    d6:85:8e:23:bc:11:b4:fe:ed:ba:b5:67:56:64:16:
                    e2:d1:1c:5e:cd:5a:60:d3:60:92:f7:da:34:0c:24:
                    64:cb:c7:18:b6:bf:a1:01:9b:7d:5a:b7:ee:2f:04:
                    fd:05:38:53:bd:9a:94:50:de:ce:6d:de:90:0d:13:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:49:77:D1:20:1F:9E:A5:D3:37:4C:0D:37:C5:F1:F5:91:A6:F7:6D
            X509v3 Authority Key Identifier:
                keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:34:c0:89:14:b6:58:bf:85:d1:73:83:c4:ad:f2:d4:a1:5e:
         4e:2d:a7:8d:8f:9d:18:59:8d:df:54:6d:ac:85:a5:21:b2:d6:
         32:ea:15:b1:a7:71:c7:a8:ba:8e:aa:02:77:1e:b0:e0:21:57:
         4e:fa:68:b8:24:06:6d:26:05:03:25:6a:b6:9f:35:86:c0:21:
         67:38:46:fd:f3:60:48:65:65:98:d5:4c:1a:31:92:b6:22:99:
         6f:ec:82:9a:0b:e5:ca:b9:76:e5:85:2f:86:d3:57:9e:49:0a:
         8c:81:4e:1c:ae:df:7e:2d:e2:2a:cd:c8:a7:a5:64:a4:5e:b3:
         91:06:3d:b6:5a:d7:bd:a2:51:f2:be:ed:08:01:df:e5:3a:70:
         94:2e:e1:2f:60:58:f5:1f:a3:e0:c7:b1:1c:56:17:54:c1:fa:
         1c:38:4f:0e:cf:9d:c8:d4:2e:6c:28:ef:5b:d4:be:f9:fa:8a:
         cd:07:49:55:ff:b8:ef:6d:d4:ac:60:02:70:60:0c:d5:f4:c6:
         94:96:3a:dc:4d:03:10:96:12:c1:0f:c7:42:62:2d:36:cd:8c:
         87:0b:d4:d9:7e:61:33:53:cc:9b:2e:c1:f0:3b:d2:d5:08:f1:
         8d:97:b2:2d:4a:f8:3c:19:56:81:ae:51:11:8e:42:b5:72:4b:
         10:d9:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:03:12 2025 by rpki-client