Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File:                     azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier:          1vxM0pQ7aNpOnVUtb8TK9n4iyPVF69Fr2eZ25jbUC2I=
Subject key identifier:   00:A2:44:B9:EA:01:73:B3:45:F2:EB:FA:4A:96:8F:52:8D:0D:87:5C
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer:       /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial:       01973EE4D6090FDD67E8B5EF395C3448FF13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number:          157D
Signing time:             Thu 05 Jun 2025 07:01:13 +0000
Manifest this update:     Thu 05 Jun 2025 07:01:13 +0000
Manifest next update:     Fri 06 Jun 2025 07:01:13 +0000
Files and hashes:         1: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (hash: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=)
                          2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: A99VqNUqAjXcxwg6NrrEXm2xR5DjdNzOWaiZLGT6D50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3e:e4:d6:09:0f:dd:67:e8:b5:ef:39:5c:34:48:ff:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
        Validity
            Not Before: Jun  5 07:01:13 2025 GMT
            Not After : Jun  6 07:01:13 2025 GMT
        Subject: CN=00a244b9ea0173b345f2ebfa4a968f528d0d875c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:f3:5d:48:6e:45:ff:5d:e9:4b:fb:c3:2b:
                    96:ba:4d:4b:00:08:f7:5c:f2:da:79:77:93:4e:c5:
                    dc:1f:bd:98:76:37:40:04:76:e7:0c:66:e9:1d:a4:
                    96:44:08:62:f4:63:c8:70:37:3f:93:d4:9d:3e:99:
                    b3:08:be:5e:1f:21:72:6e:cd:d9:b4:09:9b:a2:2c:
                    52:dd:62:1b:6c:2c:32:75:ca:05:2c:f6:3b:ce:36:
                    a2:88:a1:ab:c4:d4:64:aa:ce:3b:15:08:16:97:fd:
                    bf:e2:6a:96:d8:35:64:21:a3:6c:b4:56:37:9d:00:
                    2a:f8:0a:1a:c4:30:cc:aa:de:f5:68:cf:c9:d3:01:
                    76:41:68:ce:ee:73:52:d5:77:09:f8:f5:b3:52:e6:
                    92:ea:58:5b:01:b0:69:c1:e9:e7:c8:9b:d2:84:67:
                    79:33:25:36:4f:c7:c5:ba:d1:8e:1f:5b:fb:5b:bd:
                    88:d3:ab:e0:8d:93:f5:7a:c9:0b:40:7a:6a:9e:20:
                    02:c5:f6:d3:15:21:d6:3f:a3:d1:75:24:bc:74:d6:
                    02:f6:60:d6:1d:f6:ec:07:b5:a0:3e:be:fe:68:5b:
                    55:d4:e5:2d:0c:5e:6f:95:f6:63:c3:36:70:74:3b:
                    ff:a0:14:b7:33:7e:f2:cd:f9:01:f3:ae:c8:0c:3f:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A2:44:B9:EA:01:73:B3:45:F2:EB:FA:4A:96:8F:52:8D:0D:87:5C
            X509v3 Authority Key Identifier:
                keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:bb:7e:af:6e:ae:9d:38:85:53:4c:e8:9e:77:3d:ef:66:3b:
         d7:7b:ef:ad:74:9f:b3:03:87:69:fa:86:8e:ea:91:99:54:d4:
         eb:ff:4e:07:3f:ef:eb:65:9f:00:93:9a:2e:4f:f1:aa:3c:af:
         de:f6:82:8f:5d:c3:d2:19:c0:0a:e1:ea:c4:4f:9e:55:fb:20:
         a2:7e:25:5c:07:41:d5:14:23:9a:cb:0d:ee:81:a3:03:05:61:
         f9:bb:4d:b4:dc:3b:48:43:db:21:2a:b3:6d:7f:5a:b4:19:7a:
         d8:e3:41:f4:ab:4a:b0:92:31:9e:03:49:0f:ed:7a:94:97:c4:
         ed:2a:b3:3c:a7:85:2a:87:0b:79:ca:c6:3e:64:4e:23:b7:f0:
         2a:c7:44:f6:0b:29:35:c0:7c:b9:72:55:fa:89:44:6a:de:a6:
         25:14:dc:c7:0c:8d:f5:2c:4b:33:a4:d3:05:84:48:37:39:0f:
         a7:3d:07:70:ce:50:92:13:16:8e:03:86:67:bb:1d:03:6b:68:
         4b:a4:db:ff:8b:11:78:3e:30:31:e9:3f:35:a1:72:25:f5:e1:
         32:03:32:8b:33:db:7a:7d:b3:03:01:10:bb:d3:ad:8f:d4:57:
         d8:38:d2:d6:67:d3:32:2d:15:ce:cc:95:71:f9:08:c7:41:d6:
         da:fc:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:19:58 2025 by rpki-client