Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File:                     eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier:          HsB7Ad0a8W/hFEVjxjJlEtU4nxWz1PhZ0WJuq1heDRA=
Subject key identifier:   BE:90:EC:4A:78:20:5A:76:86:A3:B1:C2:2E:85:92:D3:2D:AA:BF:19
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer:       /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial:       01974BC47A3C01CB297BDDBA181712812486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 19:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:56 +0000
Files and hashes:         1: 5zhQ3B9hLH2ZPYsiKLmy8Rojvg0.roa (hash: KI1hydbtzIhfdYk8QexN8+EHwEo9bPdSN9gLtHnLO94=)
                          2: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: +3hmicsfEUue3gQjdkJ+88KV/0Ube9VTGJSKgbdoJMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:7a:3c:01:cb:29:7b:dd:ba:18:17:12:81:24:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
        Validity
            Not Before: Jun  7 19:00:56 2025 GMT
            Not After : Jun  8 19:00:56 2025 GMT
        Subject: CN=be90ec4a78205a7686a3b1c22e8592d32daabf19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:93:28:9d:bb:72:c5:f0:3d:40:6e:d0:cf:
                    e3:f3:69:56:c0:97:e9:2d:4f:f9:40:b0:3b:98:f2:
                    03:e5:9a:4f:72:3e:48:83:bb:40:d3:9d:f8:60:17:
                    98:89:00:80:00:57:d1:3c:36:3d:c7:9a:24:57:65:
                    c7:03:07:56:e9:cb:8b:da:be:d9:39:83:59:86:da:
                    f8:2b:d5:fe:43:fe:68:bf:89:8e:0b:b0:5d:44:b4:
                    31:3f:91:7b:dd:e6:aa:c0:ec:37:9b:08:7d:30:56:
                    ce:9c:3e:2f:b7:ca:23:1c:29:65:5e:99:70:1c:4a:
                    86:5a:70:99:3e:ad:35:c2:15:48:19:db:9d:e5:5c:
                    f6:7b:46:33:ca:1a:2c:60:fe:3d:10:8f:6b:f1:75:
                    ea:6d:e8:2c:6a:06:29:88:88:75:ff:ab:d2:e6:a3:
                    5a:5a:1b:6b:6a:a6:fb:57:22:c3:d3:cf:90:7a:eb:
                    9d:61:c5:32:73:07:1d:ae:bd:29:3c:2e:e3:13:db:
                    38:f7:d3:95:75:11:fc:a7:e1:bd:76:5c:51:96:19:
                    13:9e:96:1d:18:63:22:87:ec:14:fc:44:62:2f:a4:
                    18:9d:c8:35:31:a9:26:c8:f9:aa:6b:18:2e:a2:fe:
                    74:84:32:3d:68:af:a6:2e:a4:b1:7e:80:27:1d:27:
                    fe:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:90:EC:4A:78:20:5A:76:86:A3:B1:C2:2E:85:92:D3:2D:AA:BF:19
            X509v3 Authority Key Identifier:
                keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:64:51:37:d6:f7:50:fc:26:32:dc:75:b6:36:95:d2:51:85:
         ad:dc:bc:f4:39:2c:d3:fd:15:b4:e6:15:8a:b0:8b:9c:e7:55:
         c8:b0:f1:b2:e7:7b:e1:ab:1b:58:7d:37:cf:d8:f3:c2:df:8a:
         5e:30:76:77:7c:98:31:93:7e:0f:e1:5c:a6:0b:61:6b:d1:bf:
         22:a9:58:ba:0a:2f:0e:f7:c5:54:d5:4f:de:76:f9:a2:d6:65:
         03:ca:18:e1:2f:18:47:48:ff:5d:b2:cf:c4:82:86:90:47:14:
         0b:b1:82:aa:a6:1d:20:be:c9:4f:05:bd:0f:43:0d:a5:6d:12:
         e7:23:63:32:99:39:0b:6e:c2:88:3b:9f:1c:9a:ce:87:a2:23:
         6c:03:95:f8:17:1a:55:f0:e6:eb:a3:7e:16:c7:85:dc:96:98:
         48:07:4c:4a:3b:da:f5:ff:e2:de:86:b0:7a:89:71:75:77:4c:
         b9:e1:db:84:c3:1b:9c:e4:18:4d:ea:23:ab:f5:37:13:cf:6e:
         9c:1b:2d:37:b1:f0:a0:cd:bf:be:1d:ef:d9:43:e8:36:1d:f9:
         e2:fe:d9:be:f0:2e:82:9d:2e:93:77:1d:08:8b:ea:4f:0a:e3:
         25:f5:25:ae:f3:9a:d3:64:ce:c7:00:5f:4b:3c:c9:63:3a:bd:
         9f:99:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:38:39 2025 by rpki-client