Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File:                     S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier:          QJ4og+e3RyLBOktLf1VuWkI/vu2wGKMs9yMlOwy/gbc=
Subject key identifier:   79:3B:60:1F:A1:3C:7F:7B:F5:B1:3C:7D:F5:A4:59:4D:37:44:D9:A6
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer:       /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial:       01974A0CF0E646CCA7154E81080B128DAC6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number:          145C
Signing time:             Sat 07 Jun 2025 11:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:51 +0000
Files and hashes:         1: 8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa (hash: nQrHTPYYHsaKcsU7K7NBUNZKUwu8kquBvMwb0t9InZk=)
                          2: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: pxUppvI25eIJXYAcngZG21YUieAEYZcFcx+q6sCfhAs=)
                          3: rP00SjYOc7kI37LHeR0akx0WLbw.roa (hash: HwxnGSpBCBewjdHMOMeKuWHUwmAgwVnpqM4EW67Q304=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:f0:e6:46:cc:a7:15:4e:81:08:0b:12:8d:ac:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
        Validity
            Not Before: Jun  7 11:00:51 2025 GMT
            Not After : Jun  8 11:00:51 2025 GMT
        Subject: CN=793b601fa13c7f7bf5b13c7df5a4594d3744d9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:d9:0c:07:85:43:4a:fa:d5:d1:d7:0b:ae:
                    5c:7c:f4:74:43:5f:1f:16:4d:0f:a8:04:3d:79:a3:
                    b3:11:ea:f2:0f:e2:eb:07:82:d5:d4:10:72:5b:4d:
                    6a:d5:d3:b8:b1:55:94:6e:de:96:95:3b:a3:c9:78:
                    b0:96:40:4e:8b:1c:57:7d:22:fc:2e:56:22:7a:8a:
                    96:79:ab:39:38:62:0a:30:c6:ea:03:31:b4:df:ab:
                    5c:d1:ef:01:ba:43:1b:4e:0c:3b:23:c9:04:20:5b:
                    c1:85:09:8f:8e:95:54:f6:de:fc:e6:0d:6e:c4:cd:
                    86:c9:a6:02:9f:61:31:e7:92:7e:15:c7:b8:a0:8a:
                    49:b6:d6:f2:0f:16:05:15:dd:ed:b6:40:fb:2e:5a:
                    6e:92:b2:16:0d:7c:40:3a:5d:66:d8:ad:17:d7:45:
                    1a:a7:bd:51:b4:91:46:11:79:53:be:0f:4b:a3:5a:
                    b2:b9:02:da:9c:3f:00:b8:b3:4e:dd:0d:52:a5:bd:
                    45:fd:28:b0:1b:4e:7c:3c:a6:44:26:b6:1f:d8:c2:
                    b7:21:3e:92:b0:4d:ce:a8:1c:ae:c5:6e:3f:c6:53:
                    a6:3a:47:05:8a:1e:71:a5:fd:a7:c7:99:c6:5a:ac:
                    d5:2c:5d:86:ef:28:0d:e5:04:96:c2:49:16:58:06:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3B:60:1F:A1:3C:7F:7B:F5:B1:3C:7D:F5:A4:59:4D:37:44:D9:A6
            X509v3 Authority Key Identifier:
                keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:69:e1:bb:ac:19:e9:03:4b:12:50:10:84:9c:9d:a7:ab:73:
         bb:e4:45:1b:47:51:39:5a:85:01:99:1d:ae:ed:7d:9c:e4:61:
         ba:de:67:94:96:fe:28:9c:17:f3:42:43:62:cf:a8:e6:90:f0:
         c0:6c:c4:cd:03:cb:ea:9b:2d:56:94:c8:e3:f7:a3:8a:6f:57:
         c2:98:b4:bb:4c:37:0f:c7:a5:2d:61:10:24:f0:86:4b:c9:fc:
         7e:94:68:b7:14:d0:5c:17:d2:31:3b:15:80:37:8a:3b:00:f4:
         ab:ae:0b:cb:df:b9:9f:25:4c:42:ee:00:67:12:a8:0a:19:28:
         1a:4c:c4:49:b4:f5:5a:4f:bd:b9:8d:ae:16:ba:f6:db:49:75:
         0c:d8:6f:bd:cc:e1:69:92:30:72:42:69:8f:94:2e:2f:e4:c1:
         78:3b:3c:39:83:07:ac:41:d8:06:0f:d7:a3:85:2e:83:3f:d1:
         16:a9:93:79:53:fe:05:f7:75:15:e1:7b:37:8a:d1:df:1c:0c:
         a6:ac:23:3a:11:b2:b4:5d:0f:7c:03:95:79:7d:23:66:77:50:
         a5:4a:e9:6c:ca:2e:c9:e9:4b:28:e2:ae:7d:54:7c:2f:64:c0:
         d7:78:d3:8e:a7:57:ba:0c:d6:00:37:e7:f1:54:6f:a3:31:15:
         b7:bf:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:07 2025 by rpki-client