Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File:                     7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier:          xxPkL8M7UnvBUZcqNVqrUmx16Hy3iiBpUv5eGvoGtFQ=
Subject key identifier:   8E:10:05:F1:89:41:48:A0:31:60:B0:67:7B:08:1E:63:C3:5E:3C:A7
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer:       /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial:       0197485586CC843161A9D380DD4DB9956EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 03:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:54 +0000
Files and hashes:         1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
                          2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
                          3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: U2rGlo+Cod39GSnQS4OJAasJqngH5b/x/f2bJiWainY=)
                          4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
                          5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
                          6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
                          7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
                          8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:86:cc:84:31:61:a9:d3:80:dd:4d:b9:95:6e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
        Validity
            Not Before: Jun  7 03:00:54 2025 GMT
            Not After : Jun  8 03:00:54 2025 GMT
        Subject: CN=8e1005f1894148a03160b0677b081e63c35e3ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:06:37:d0:1e:67:c0:8e:a0:58:63:eb:f8:
                    e4:0c:c7:14:f0:c7:f3:00:0e:b0:07:fb:d5:9a:70:
                    68:6e:19:da:f3:51:1d:e6:a3:40:c5:aa:c2:65:d6:
                    ba:be:6f:5f:50:46:b0:13:9c:ef:e0:7c:ee:ed:47:
                    b8:39:ae:3c:a1:26:4a:98:c6:50:98:3f:5e:6e:ee:
                    88:68:60:b6:d5:b4:f2:c2:e6:50:9d:34:96:bc:ba:
                    be:c6:99:1e:62:41:1b:b6:00:f1:49:1d:4a:2c:f8:
                    a2:da:dc:12:f8:0e:57:d0:0d:e4:79:fb:bd:df:88:
                    c1:26:79:c4:f5:e2:ad:8d:fd:3c:92:b7:ba:ae:c2:
                    b6:76:64:73:cf:51:78:0b:7c:31:2a:64:6d:5e:6c:
                    62:17:33:92:e2:7d:c2:36:ad:1d:f2:b0:e2:65:20:
                    29:b8:44:19:8a:30:96:e7:ab:cf:3f:e3:f3:99:05:
                    7a:46:ef:19:76:92:e3:d7:6e:f4:94:85:9a:23:c6:
                    25:76:70:4b:6d:0e:26:7d:71:a0:bf:63:bb:7e:14:
                    7e:00:63:aa:d6:b9:12:2c:89:1e:40:22:52:83:d2:
                    aa:fc:73:1e:ba:8c:08:00:74:d9:94:04:20:8d:8f:
                    33:b7:6d:1b:81:98:c6:e2:91:84:8a:cb:d4:f5:62:
                    58:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:10:05:F1:89:41:48:A0:31:60:B0:67:7B:08:1E:63:C3:5E:3C:A7
            X509v3 Authority Key Identifier:
                keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:60:0c:84:01:9d:1f:86:95:07:de:e8:44:0d:ca:ea:9a:0c:
         7b:91:6f:87:53:66:13:86:9c:d0:79:d2:d6:a9:36:3a:96:f6:
         05:51:ab:e6:93:8f:a9:9c:bf:53:2a:80:ef:02:98:83:31:59:
         c0:43:64:40:8c:0d:1c:5e:40:44:7b:a8:d2:9a:2c:fb:9c:10:
         ad:81:e0:a1:6c:3c:ec:ec:d5:40:60:63:5b:6a:e5:a6:02:04:
         83:34:5f:2d:76:51:85:fb:89:73:fc:89:9a:c8:8c:94:bc:dd:
         e5:8b:1a:e7:13:25:be:fc:1b:38:6e:37:29:cc:9d:13:a9:35:
         49:bf:ab:35:9d:fb:63:da:d3:ee:5d:b9:45:cd:ae:4e:ba:ce:
         f6:74:98:8e:37:6c:d2:3c:31:e1:74:bc:21:8e:d5:73:da:9d:
         10:a8:40:d6:d2:bc:52:d7:a4:ec:c9:86:08:d2:1c:31:05:70:
         de:7e:9f:21:de:f7:f1:b7:d2:7c:0d:bf:3e:95:6b:dd:08:f6:
         7b:60:2b:88:29:8c:e2:c1:a0:66:a2:92:3e:17:cf:24:24:37:
         27:58:fd:d3:1e:37:53:ea:66:55:ec:97:a2:df:42:b9:7b:be:
         e4:f4:50:72:1a:61:66:b2:58:4a:05:04:49:d0:e9:b2:64:c4:
         04:12:cd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:37 2025 by rpki-client