Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
File:                     dVebPdiwkr6Q2p90gOp2HpzSZIY.mft (raw, json)
Hash identifier:          pAgd0g6JWTMObRGLenKBgzEVHULSudhV/7nQC5YbrJk=
Subject key identifier:   21:39:5A:E2:71:CB:28:0B:BB:21:9D:73:2A:DA:19:8D:95:71:83:6C
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Certificate issuer:       /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial:       01976A057BA90F20241C04BA85DF6540C6D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
Manifest number:          158F
Signing time:             Fri 13 Jun 2025 16:00:33 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:33 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:33 +0000
Files and hashes:         1: _q_4z0J5i384UaXDQJYWs6HPoTM.roa (hash: b9Q87HIqk0+LBterNnXAl95RMpu5d8FMkhgmGh/3VlI=)
                          2: dVebPdiwkr6Q2p90gOp2HpzSZIY.crl (hash: JlbsxULpY96831Qw37fU9g5EVqD75ZVhefLFrbUmXKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:7b:a9:0f:20:24:1c:04:ba:85:df:65:40:c6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
        Validity
            Not Before: Jun 13 16:00:33 2025 GMT
            Not After : Jun 14 16:00:33 2025 GMT
        Subject: CN=21395ae271cb280bbb219d732ada198d9571836c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:09:3a:a5:a7:ae:fd:c5:7e:c7:d6:90:44:
                    8e:96:60:a7:72:4c:67:fa:a5:50:2d:70:d1:3b:eb:
                    32:43:da:cc:f6:04:8a:87:4f:ef:3f:38:af:c5:59:
                    3c:8a:8f:d0:78:85:f2:f9:07:ed:bb:f9:23:1d:7d:
                    a4:85:e9:fd:77:51:bb:42:e7:80:3a:15:6e:5e:59:
                    76:3e:ee:23:5b:ec:c1:34:d8:0b:f6:d7:14:06:2b:
                    e8:f3:4c:71:0d:10:79:50:2e:bf:92:14:fa:00:63:
                    5d:b1:21:ab:21:15:be:4b:86:4a:b7:8c:f5:fc:3f:
                    df:85:3c:5d:1b:17:29:2d:b0:58:fa:6d:44:6c:0e:
                    f2:c6:86:42:05:ae:8b:24:30:c7:50:bd:fc:40:14:
                    ba:33:c6:52:30:1a:58:51:9b:31:9c:6a:49:f9:c5:
                    3b:ae:a7:7f:ed:eb:59:22:0c:83:a1:63:c7:ef:ae:
                    b5:b5:03:6c:a4:65:97:e3:97:f7:29:b5:c5:f8:25:
                    a2:75:8b:e9:4b:01:07:81:a8:9d:6b:4f:11:26:f5:
                    bb:43:97:78:65:02:7d:e7:49:29:e2:27:e4:40:3d:
                    28:a5:89:8a:20:4e:0a:92:9e:b9:8d:26:4e:a7:7b:
                    32:46:66:91:9a:e1:bc:8f:8f:02:d2:cd:2a:2d:ed:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:39:5A:E2:71:CB:28:0B:BB:21:9D:73:2A:DA:19:8D:95:71:83:6C
            X509v3 Authority Key Identifier:
                keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2f:80:8a:da:9c:6c:c2:30:0c:0f:e4:7d:a0:b9:23:58:1d:
         5c:d2:df:91:75:8e:3c:da:76:22:81:f7:d2:d6:8f:02:4b:6e:
         4a:41:b9:d6:9a:4b:55:08:9c:6d:f6:4c:bb:29:5a:74:4a:4a:
         93:47:74:a0:91:c8:49:7a:2d:65:96:06:bb:3d:32:61:64:c3:
         22:b8:c7:98:9d:40:f7:d7:cb:32:b8:80:0c:70:eb:d3:54:86:
         32:78:f1:d0:79:94:de:03:a5:26:68:7c:ee:dc:7d:da:4b:86:
         ed:89:1a:4d:f9:74:1d:50:ae:e3:dd:11:d1:64:d7:df:be:3f:
         2f:98:73:db:81:87:af:ea:4c:5d:39:b7:03:6b:62:33:76:7d:
         82:43:91:f8:93:c5:8a:64:bf:50:d1:88:9d:79:ac:12:6a:7d:
         4b:c7:e3:a2:30:3a:18:61:b9:2a:4c:70:4c:0c:3a:ca:cd:cd:
         8c:91:a3:7c:3a:e4:f9:f8:c3:9f:c9:31:9b:71:f8:7c:d4:a5:
         49:ed:db:30:bc:ec:67:c9:58:be:1c:be:4a:13:a1:04:0e:ec:
         2d:3f:0f:bf:d8:ec:74:d3:fd:5c:3b:cb:b0:e0:53:57:e8:c0:
         21:f5:63:ae:2a:41:0a:76:1c:43:06:66:03:e3:51:43:21:a3:
         9a:d1:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:25:37 2025 by rpki-client