Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
File:                     L74q18xpqV46gHH7M9-a96N5kos.mft (raw, json)
Hash identifier:          rl02tLBg4WoPVOzy2qbLKB5L2gjaijTeRH2pEkxhEfs=
Subject key identifier:   89:20:B3:95:6F:78:63:F9:B8:DF:DC:65:60:99:73:93:27:F7:07:32
Authority key identifier: 2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B
Certificate issuer:       /CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
Certificate serial:       01974AE8F678A39126619231519CE5817E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
Manifest number:          151F
Signing time:             Sat 07 Jun 2025 15:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:10 +0000
Files and hashes:         1: IDDlMwm9-5ZOz6KG-dVFSUnj-U8.roa (hash: 1Nd8bcLLvnAmE61D+G0tQnrMjss8Eoxbsm1iIYgXgB4=)
                          2: L74q18xpqV46gHH7M9-a96N5kos.crl (hash: zZNOKCa6xY94OpIPiBuP3qauoGpwm7zOkrRazlqIZmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:f6:78:a3:91:26:61:92:31:51:9c:e5:81:7e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b
        Validity
            Not Before: Jun  7 15:01:10 2025 GMT
            Not After : Jun  8 15:01:10 2025 GMT
        Subject: CN=8920b3956f7863f9b8dfdc656099739327f70732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:92:9e:d6:6b:08:e7:24:55:7b:f5:04:d5:
                    f8:8c:b8:e1:ac:17:89:97:d1:46:9b:e5:5c:bb:88:
                    41:14:32:eb:0b:a9:06:4c:a7:42:45:4e:25:97:0d:
                    19:17:3d:9d:08:8a:e2:6f:c3:9a:7b:c7:0f:92:e4:
                    6c:1b:73:9b:57:38:a5:97:9f:b3:a2:61:86:19:8d:
                    e2:db:21:1f:19:68:58:3d:1a:99:92:2f:c1:6a:b4:
                    bb:3d:ef:8c:2b:07:1b:ba:01:b2:d2:95:4b:ba:17:
                    ca:e5:b1:8b:67:02:d3:8f:cf:eb:6c:71:73:cf:7a:
                    cb:e6:36:30:cd:6f:66:e5:2d:d9:87:86:1f:7b:2e:
                    4b:85:d5:de:62:9b:0c:a8:fd:61:d7:ff:6e:7d:84:
                    e3:cf:27:f4:fa:a0:02:f7:3a:ed:60:5f:47:be:97:
                    53:54:ce:09:3b:95:c1:08:69:be:35:ab:07:8a:aa:
                    85:a2:9c:54:8e:93:d5:b9:6b:3b:73:2c:d6:68:11:
                    93:06:b2:d9:30:04:3f:62:fc:54:18:e1:ca:63:5c:
                    39:12:f4:ff:59:c5:83:4d:73:41:80:7b:4f:1d:ae:
                    ed:49:ae:2e:24:1f:14:38:69:42:95:b6:8e:1f:ab:
                    f8:55:19:80:5d:85:a6:f8:a9:b5:91:5f:92:39:ea:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:20:B3:95:6F:78:63:F9:B8:DF:DC:65:60:99:73:93:27:F7:07:32
            X509v3 Authority Key Identifier:
                keyid:2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:eb:33:4f:e1:8a:be:96:16:8f:5c:58:b8:8e:17:af:8b:68:
         7c:4c:19:75:44:14:72:45:32:74:74:ec:25:6e:26:12:0a:b6:
         ce:64:c5:e8:ad:61:d3:7e:7c:01:b9:85:06:49:59:83:9b:4a:
         e6:39:53:99:ed:c4:f2:dd:c3:a3:f5:be:95:11:07:9a:b0:9c:
         60:85:2f:4e:64:3f:9b:31:c2:19:8b:79:b5:f7:d8:35:e7:f1:
         5d:81:08:31:a8:fd:d2:2b:00:a4:fa:3f:d3:e8:91:9f:1f:70:
         c3:5c:d3:59:9f:ff:a8:7d:49:92:c9:cd:12:09:de:9b:fb:3b:
         49:54:1f:41:98:b1:1a:13:61:6f:58:f6:d1:95:d5:43:6b:d0:
         97:0e:4d:f7:cc:4f:5e:24:9c:a9:d9:64:ae:70:84:18:c5:c9:
         02:2b:44:a7:0c:c4:cd:ca:78:34:d0:69:bc:da:95:a7:59:07:
         8f:2b:f5:23:90:53:9f:2b:42:c4:4c:a7:eb:48:f6:c0:93:6f:
         e5:e9:9f:03:87:53:e9:83:96:5e:70:41:c4:bb:90:38:e8:f8:
         d3:9b:96:14:6d:d7:ea:6e:8a:70:27:dd:d2:2b:31:67:9e:0f:
         1e:63:4c:a2:23:b6:e6:02:f0:b7:84:a0:5a:a9:c9:1c:72:79:
         cb:6c:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:48 2025 by rpki-client