Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File:                     9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier:          o/jpoVXjYcdZqZf1xaVah9RdfzdOQVRx8qx6LKF2vn4=
Subject key identifier:   97:23:F8:AF:02:EC:94:CE:21:76:6F:3E:F0:9D:90:8B:3E:F0:2B:C9
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer:       /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial:       01974D44F3C1B69BA459DA12F0C7BBFF761B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number:          157B
Signing time:             Sun 08 Jun 2025 02:00:53 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:53 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:53 +0000
Files and hashes:         1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: 2bbokPxoeXXgzv4Y2lRhdx+qAL1sivPy/jcQzd6Zerk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:f3:c1:b6:9b:a4:59:da:12:f0:c7:bb:ff:76:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
        Validity
            Not Before: Jun  8 02:00:53 2025 GMT
            Not After : Jun  9 02:00:53 2025 GMT
        Subject: CN=9723f8af02ec94ce21766f3ef09d908b3ef02bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:74:49:44:9f:65:62:79:b0:d4:de:ca:d3:
                    cb:62:c8:22:04:c2:04:eb:32:11:6d:e1:b1:06:e7:
                    02:da:01:db:6d:fc:70:30:d1:a2:d2:63:3a:d1:36:
                    ec:c1:14:83:89:0e:26:1b:0d:f6:80:64:86:75:2b:
                    58:27:00:11:58:d7:b0:8d:38:53:4e:71:f8:bc:b9:
                    47:04:34:e7:4e:69:b5:a1:3c:bd:fd:86:fb:58:e0:
                    d2:55:cf:d7:24:97:83:c2:e8:3a:ad:03:80:83:9b:
                    62:28:23:70:e0:e4:a5:c1:b7:d3:ba:72:9b:eb:e2:
                    3f:97:bd:03:d4:40:8d:57:a0:8e:86:6e:11:50:7d:
                    f2:62:00:f9:74:98:70:f3:7e:71:d3:11:4a:56:70:
                    ed:42:a3:89:07:f6:bd:18:e6:21:a0:a2:06:fb:81:
                    b3:6a:e8:c8:51:bc:b6:02:12:5b:fc:1f:c3:c1:5d:
                    4c:69:1d:62:a7:13:a7:b7:d1:a4:14:34:38:7b:87:
                    ab:7d:75:be:3c:37:1d:11:1e:b4:c2:6f:e8:91:ae:
                    9e:26:c4:c4:c8:30:b5:77:5c:ef:d8:f6:8e:d3:a2:
                    85:d2:1e:ad:0e:4f:8c:47:5c:c8:e1:ce:0d:44:5c:
                    1c:b2:16:c5:0f:a6:a4:e6:37:f9:95:78:73:53:45:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:F8:AF:02:EC:94:CE:21:76:6F:3E:F0:9D:90:8B:3E:F0:2B:C9
            X509v3 Authority Key Identifier:
                keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b5:1a:9f:f1:1f:1c:39:23:b1:5e:1a:91:6a:df:12:8e:9a:
         5f:60:fe:45:bd:28:f4:c0:a7:50:13:fe:87:40:d0:9c:79:66:
         80:a8:2e:d7:1f:5d:a5:fe:19:d0:36:d0:c3:78:44:58:56:4f:
         e8:68:27:0b:35:d8:ce:ac:0e:f4:ea:71:a0:ad:e0:b8:ed:9f:
         ad:00:b4:ef:69:d7:6b:db:f6:27:df:fb:b5:11:8f:bd:af:1f:
         75:ef:6d:40:89:d8:65:02:18:f4:85:da:cd:da:2f:aa:f3:d6:
         72:d9:47:2b:72:4c:39:9c:c8:52:3c:4b:14:87:24:c3:27:70:
         7e:e3:83:36:18:74:6e:a8:30:5e:57:8a:99:cd:07:62:3b:fb:
         c2:66:75:a3:8e:f8:4f:ab:d2:2f:f8:6f:f5:90:23:6f:f8:3c:
         f5:72:a8:c0:9a:36:18:c2:f6:dc:4f:b6:e3:2d:35:23:1e:68:
         10:56:dd:2f:c3:de:08:99:6e:ba:77:02:fe:c0:a4:65:e2:af:
         ae:09:ab:74:1e:bf:c5:1a:4c:df:ed:16:70:54:86:0a:8b:7d:
         d7:89:ee:7c:a9:53:3e:a7:24:c7:f9:2f:aa:3b:d0:c9:bb:78:
         ef:a4:ee:93:2a:34:c6:ee:30:5a:aa:94:0c:06:f2:23:76:5d:
         0f:f4:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:34:37 2025 by rpki-client