Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File:                     0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier:          +vo2Sh5yewrNzKvAyCDpO7+BUgQ5Q1RpwMd4b6gysr8=
Subject key identifier:   C2:3B:81:D8:39:8D:3C:61:06:7A:B5:1F:D1:11:A5:74:CF:83:17:D4
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer:       /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial:       019761392E90D20EAD30DDA111835128F23F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number:          158A
Signing time:             Wed 11 Jun 2025 23:00:26 +0000
Manifest this update:     Wed 11 Jun 2025 23:00:26 +0000
Manifest next update:     Thu 12 Jun 2025 23:00:26 +0000
Files and hashes:         1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: 5qucKYp7a7BHeh0iivPhruhcXJS/8vulVyXloEk8ObU=)
                          2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
                          3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:39:2e:90:d2:0e:ad:30:dd:a1:11:83:51:28:f2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
        Validity
            Not Before: Jun 11 23:00:26 2025 GMT
            Not After : Jun 12 23:00:26 2025 GMT
        Subject: CN=c23b81d8398d3c61067ab51fd111a574cf8317d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:cc:56:df:0d:f6:32:be:50:bb:3f:39:63:
                    36:46:a2:37:a8:b0:a6:70:27:ee:c7:15:7e:ab:17:
                    68:5c:d3:e8:ca:d4:8e:a0:5a:51:be:a3:43:32:f2:
                    0a:25:93:8c:0a:0c:61:3f:af:59:f2:10:1f:6a:fb:
                    57:25:d7:09:d3:c4:ba:74:0a:d5:fe:a8:30:a8:29:
                    3e:6d:f3:52:85:2f:e3:f2:de:2d:9b:6e:63:59:31:
                    31:66:e9:a3:95:5b:6e:99:97:bf:56:84:72:cf:5c:
                    96:ab:b7:85:6b:75:24:e8:10:f4:45:2b:13:1b:1e:
                    e1:f8:90:fb:95:90:b6:2d:b3:12:ac:7c:69:55:aa:
                    0e:be:8f:c5:da:e2:11:06:8b:06:78:74:fc:45:74:
                    39:8f:94:41:17:76:fc:56:49:c7:92:00:e2:a8:b4:
                    eb:0d:69:b6:b1:d7:b8:3f:b4:59:d1:9d:37:10:41:
                    3d:5b:09:a2:da:74:b7:93:26:7b:b7:d0:81:7b:33:
                    6e:b8:ae:8c:d9:af:a1:a3:9c:f1:06:b4:7c:d5:d6:
                    17:8b:7a:ce:c9:63:55:6e:06:91:c7:43:f1:ae:ba:
                    49:5e:f0:52:a1:ba:71:c8:aa:8c:df:98:7a:d5:14:
                    13:9e:d8:ac:50:92:b5:aa:de:5f:0a:04:1d:02:ce:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3B:81:D8:39:8D:3C:61:06:7A:B5:1F:D1:11:A5:74:CF:83:17:D4
            X509v3 Authority Key Identifier:
                keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fd:ec:af:19:a7:d0:01:a8:7a:65:3d:21:1c:e5:fd:d3:d0:
         11:e5:83:38:f6:22:0e:0f:a8:3c:fd:f3:60:bd:a2:ea:e0:f7:
         f6:f9:95:39:fd:0b:7f:43:38:7f:05:bd:4b:fe:be:7b:24:06:
         ca:8e:48:a3:a1:06:e6:23:e6:9c:ea:b9:8b:a8:5b:1a:d3:8b:
         6e:63:aa:82:9f:c8:03:96:94:8a:73:a4:8e:64:ef:63:b6:16:
         bd:34:2f:a6:81:7f:5d:53:45:25:d4:ef:47:d9:51:9b:10:da:
         9c:f1:d0:a2:e1:78:ab:87:83:59:26:c1:aa:12:5d:3f:c8:80:
         90:73:9a:a1:a5:4c:69:33:1f:6c:a9:ed:ab:fa:92:e7:4b:3c:
         d0:43:d4:40:60:06:c4:44:e8:d3:29:a8:9e:c0:76:da:57:a5:
         76:c3:96:62:3b:fc:d8:62:eb:0f:90:86:75:2b:cf:18:b3:e6:
         24:6a:1f:6d:0d:85:9f:54:28:4e:dd:dc:2a:cb:c5:30:1f:3f:
         dc:f6:25:3a:ba:28:2d:95:f3:a9:b6:8c:aa:ce:49:b4:a0:3d:
         b7:3a:76:38:25:a6:c8:d2:67:2a:3a:d0:13:66:a3:42:6f:40:
         02:43:45:60:4d:68:4c:59:3e:e4:78:a3:36:31:a7:42:2c:a0:
         52:60:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:13:45 2025 by rpki-client