Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File:                     VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier:          XG5sI2Fs1txZtoa84fXV0Y5KQ3+AIq2u6WJBEkMbl4o=
Subject key identifier:   01:3C:CA:91:5C:3E:88:81:3A:3C:A8:28:1E:94:01:37:EB:B1:AC:7C
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer:       /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial:       01973D9AA134A36A48BE1A06EE4DBFBAAC24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number:          157E
Signing time:             Thu 05 Jun 2025 01:00:33 +0000
Manifest this update:     Thu 05 Jun 2025 01:00:33 +0000
Manifest next update:     Fri 06 Jun 2025 01:00:33 +0000
Files and hashes:         1: 0cSnkMJkJHeFaYdY1KT0ScO6smc.roa (hash: Gcz0UPXLhZmjDb4FihMibqoJMQnP847xcHc8Qvl5GWc=)
                          2: 10H4MUNhSSva047O9EEp6SPRBJE.roa (hash: JmvtAf/+biHEI+go7XB/O90LiW31KmrT39neQ8bWDTc=)
                          3: 78KScp2LVWw2hOVmr_h_Gkcv34A.roa (hash: Ptq/z1pA4OnP8t08S5vn7Az3pzr/nZN/5vkEHzVtW1s=)
                          4: GhEBs7fMOUU2KjePNnbULHKRHoA.roa (hash: Dow24ARSNfhxgpUv5NrsgvZFPFxhNN0Fkn5hgDvl4wg=)
                          5: H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa (hash: 4orcq82HkX9/XUoOT4IA7nH/E15MI2gX+xqdM0ifFYg=)
                          6: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: cRvQ2pU7OKlCK5yXwpfMPCJZ0E96OgL7s7vVfYfME/I=)
                          7: tkuxtWzbusmwWQub2z4rjkdwXdc.roa (hash: JTVZbUmozTnvdMYKVuksSNIaPHfDAOZ4PEG/FbAO7wg=)
                          8: wPqYVNKJADvVgGucnETD7HuiSvs.roa (hash: 0eyTJy9gG8F8Xex/RtpsLoJCxS1EJ4y1hxoKVvkvOZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 01:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3d:9a:a1:34:a3:6a:48:be:1a:06:ee:4d:bf:ba:ac:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
        Validity
            Not Before: Jun  5 01:00:33 2025 GMT
            Not After : Jun  6 01:00:33 2025 GMT
        Subject: CN=013cca915c3e88813a3ca8281e940137ebb1ac7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2d:d5:80:48:c0:c3:3c:37:d7:f3:72:d2:2a:
                    1d:fe:78:8f:72:ca:37:ac:95:e4:16:32:0d:af:a5:
                    14:de:73:18:73:6a:39:ed:ae:9e:ac:47:34:1c:03:
                    60:7a:64:67:ae:a5:63:7b:bf:c2:5a:63:7f:b1:df:
                    9e:0d:9c:b9:15:b7:96:d6:b7:82:5a:92:38:2e:e3:
                    d9:3b:8b:5c:06:76:36:9a:12:b9:9b:97:b5:2c:ff:
                    03:c5:21:c2:45:4e:a5:f0:9f:51:9d:1e:8f:7a:61:
                    a3:82:d0:27:e5:89:4d:a7:d4:d9:37:61:5d:3e:92:
                    4c:b6:02:3f:e9:a4:e5:99:9a:e0:40:59:d5:ab:58:
                    df:dc:eb:fe:f9:aa:d9:6d:f1:46:60:be:dd:7f:00:
                    8d:78:d6:fa:a2:74:af:83:72:9e:7f:5c:39:bb:0c:
                    05:12:75:4f:3b:44:58:20:05:67:de:d0:31:78:7b:
                    de:ea:67:61:ec:23:46:9f:42:2d:f1:61:9f:6c:18:
                    d3:31:11:c8:ce:02:ec:d6:92:4e:24:be:2a:d7:8c:
                    89:e9:3d:a3:34:ea:5f:88:f3:2d:8a:cb:de:a5:37:
                    d0:96:3a:d4:7d:7a:21:5c:48:3b:0f:f6:31:45:70:
                    e5:27:13:a6:24:22:ec:68:94:e3:66:81:dd:f8:91:
                    74:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3C:CA:91:5C:3E:88:81:3A:3C:A8:28:1E:94:01:37:EB:B1:AC:7C
            X509v3 Authority Key Identifier:
                keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6b:0c:80:74:d4:f6:b3:4e:58:0d:09:34:aa:cc:f5:3d:fb:
         5e:6b:db:89:ed:c1:91:ff:d8:87:fb:50:48:b6:be:35:5b:03:
         d7:0a:ab:85:5e:94:46:a5:49:f5:10:2e:e8:fa:d2:58:d8:b8:
         09:95:b3:a7:46:7b:0c:75:97:ff:14:a4:cf:ae:69:16:d3:11:
         ff:43:08:16:6f:77:13:de:2f:fd:0b:92:ea:f7:29:24:e4:b4:
         45:74:92:2b:4d:96:f9:06:40:63:0e:6d:6a:07:ef:cd:63:c1:
         60:7c:0a:cd:53:1a:dd:8b:be:4a:37:7f:53:f2:f2:ef:34:58:
         98:cd:37:e5:b5:2d:e4:98:11:64:f7:2d:e4:1f:98:36:8e:80:
         34:00:55:1f:85:c4:59:8f:98:fe:80:c9:37:7e:60:fc:5e:6d:
         b1:4b:d7:44:5d:8c:01:41:43:5c:12:c2:86:a0:72:b4:7f:a6:
         30:3e:cd:c5:38:d0:f5:db:12:f3:d1:69:24:07:6c:c5:f6:99:
         58:b3:40:0b:f9:c0:7c:5b:7e:73:1a:41:a5:a5:7a:35:25:91:
         bf:37:f1:2b:37:27:69:d5:f9:43:9c:b0:3a:fe:f5:db:51:b9:
         1a:d4:08:93:3a:a7:16:e6:9c:0f:1b:3d:2d:49:ac:4d:03:cf:
         e9:c8:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 06:56:22 2025 by rpki-client