Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File:                     8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier:          TwG6txvVymFPP9Pj16n/r6vrTMFsoGhD3l7VW4zn70Y=
Subject key identifier:   D7:88:51:1A:E8:CA:E9:94:EF:13:F0:BA:AD:F8:B2:9C:DB:77:42:41
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer:       /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial:       01974D7C26B3A619125462813B9487B6C066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 03:01:11 +0000
Manifest this update:     Sun 08 Jun 2025 03:01:11 +0000
Manifest next update:     Mon 09 Jun 2025 03:01:11 +0000
Files and hashes:         1: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: 1M6Ew5WP5jOBZO6RsmAWrXxaXGXvgceTFRbtyrja58M=)
                          2: pul6fCeEfRfqHUtKh0hXtHyFW6M.roa (hash: SMvKtJGuPxG36wkNr1bAgb49/+mZbdqtVopoxHFUHtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7c:26:b3:a6:19:12:54:62:81:3b:94:87:b6:c0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
        Validity
            Not Before: Jun  8 03:01:11 2025 GMT
            Not After : Jun  9 03:01:11 2025 GMT
        Subject: CN=d788511ae8cae994ef13f0baadf8b29cdb774241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:1b:da:be:06:ff:eb:9a:80:71:91:31:af:
                    5f:2a:07:fb:a5:ef:76:22:9a:97:6d:b6:60:34:7f:
                    a1:29:98:af:87:cb:f0:0d:ab:6c:a8:dd:2b:02:8d:
                    c5:f4:ca:58:7d:54:ae:73:50:7f:4e:0f:a8:b6:52:
                    60:b8:d4:39:47:3d:a3:18:3a:70:5f:f1:0c:20:0f:
                    27:25:2b:20:85:2f:85:b1:72:d7:9f:2a:e4:33:c4:
                    cc:99:a1:3f:02:95:7e:1b:3d:a8:1a:00:0d:64:b2:
                    ef:8f:fa:cd:70:a2:57:c0:54:63:45:79:50:da:d7:
                    eb:95:f9:1d:33:59:3c:80:7f:18:b8:bf:c8:e2:6b:
                    f0:2c:2c:54:73:e7:ae:61:f6:8a:f0:22:b1:26:f5:
                    16:71:85:85:db:72:ed:cb:d0:d8:47:59:30:77:ba:
                    c1:ae:ec:02:cd:75:96:2e:3f:13:b4:6b:ac:9b:81:
                    04:83:e1:72:33:2b:7f:55:e9:b7:30:f6:4e:45:4d:
                    6c:b3:7f:ec:48:95:9c:07:ac:6d:b0:e9:20:a8:24:
                    71:68:8d:7c:35:db:c9:73:98:b1:40:11:94:df:fd:
                    b8:40:fb:eb:09:65:3e:06:14:8c:31:21:e9:3c:28:
                    8f:08:58:c7:84:5b:80:e2:e5:2e:f5:38:0f:66:d0:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:88:51:1A:E8:CA:E9:94:EF:13:F0:BA:AD:F8:B2:9C:DB:77:42:41
            X509v3 Authority Key Identifier:
                keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:62:25:b7:e6:3c:85:d4:5a:34:d7:db:2e:d5:c1:a2:24:47:
         a3:19:ab:b4:00:86:e2:16:2e:c1:ff:54:a3:6c:ff:13:46:31:
         18:15:60:bc:dd:32:2d:58:61:48:02:5b:e7:bd:61:19:d4:9c:
         96:fd:b3:be:9c:c8:9f:fc:59:ff:f9:13:ea:c5:27:bd:11:82:
         67:43:e5:8f:8f:a9:5a:ff:02:9b:bd:e5:fe:25:1f:77:61:a7:
         e9:24:f1:39:a6:b8:0d:77:bf:02:80:f4:3b:aa:8c:ec:a7:42:
         74:82:2c:ea:68:0d:96:26:29:e0:2a:ab:cf:47:52:27:8a:15:
         ee:51:92:b0:7f:14:17:0b:43:eb:a3:e7:d6:b7:30:da:10:fa:
         5c:ae:e3:6f:2b:79:8c:6f:54:a1:fb:a1:ca:1e:6a:7f:27:88:
         25:70:52:ca:f6:d2:22:1a:29:f7:7b:2b:69:7e:8d:3d:65:cf:
         23:57:6b:4f:7c:36:2f:d8:6b:5b:04:c3:96:17:a7:1a:a6:f3:
         4d:8e:33:71:3e:df:2b:6d:ac:89:b3:8c:5a:58:a3:0a:e0:48:
         71:2c:71:a0:d6:60:06:cd:b2:c8:fa:cb:4c:cd:d3:19:87:db:
         77:b9:2c:16:09:76:e5:2f:36:8e:4b:f7:cd:df:65:33:c7:7d:
         2f:31:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:50:44 2025 by rpki-client