Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
File:                     bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json)
Hash identifier:          43ySOc2oISicE88g6N1tWdFP96lBNasnIAmH9Zk22GY=
Subject key identifier:   DE:BF:0F:22:D3:49:41:DA:23:12:08:93:F1:9F:58:F2:29:68:D4:22
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Certificate issuer:       /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial:       01974D0E1BB107DA543E8B0EDF6CDADDCC78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 01:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:59 +0000
Files and hashes:         1: TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa (hash: 7eGYzt0fIboqSotZXLbGSLMqFgnc7lNxn1f/rJYyeyA=)
                          2: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: PXYqZWy0f+p0NjrW+ba/Ltdhiv2MLF1LdNAnpLOVpK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:1b:b1:07:da:54:3e:8b:0e:df:6c:da:dd:cc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
        Validity
            Not Before: Jun  8 01:00:59 2025 GMT
            Not After : Jun  9 01:00:59 2025 GMT
        Subject: CN=debf0f22d34941da23120893f19f58f22968d422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7e:09:d8:e7:cc:30:9a:43:77:e7:27:0b:58:
                    19:35:79:12:7f:2c:26:bf:0e:1c:c9:7c:3c:78:a4:
                    58:43:8d:d1:16:4b:bb:95:47:34:70:d9:02:2e:3c:
                    42:31:f0:94:ce:dc:f9:29:a7:6b:83:57:56:a2:79:
                    d6:03:d7:97:58:06:d6:fa:c5:08:0b:df:35:86:60:
                    c4:be:aa:0d:1d:af:db:e6:40:f3:6d:41:e5:15:97:
                    8d:95:c4:99:97:11:a5:28:0b:d4:03:b9:4d:4a:2d:
                    49:a4:4b:77:e9:a3:4e:3d:79:75:cb:e9:68:14:ea:
                    07:c5:4c:89:28:91:69:9e:70:dc:00:67:ee:95:ea:
                    17:f0:88:40:3e:3b:70:cb:b4:53:70:4a:d7:4c:ef:
                    21:8c:b6:25:bb:d0:e4:e7:d7:83:a2:57:38:e3:af:
                    28:39:e6:fc:a8:45:f3:81:64:80:ad:2a:11:36:7b:
                    85:22:82:da:5b:f0:e8:33:31:f9:3c:b7:93:dd:2a:
                    44:36:ea:bd:cd:b5:38:f2:e5:a4:d5:59:9e:5e:1f:
                    62:9c:ea:ce:0c:3d:bf:82:5a:55:9e:08:30:2d:c3:
                    d6:86:b7:f1:66:2a:55:19:18:6c:92:7a:0e:40:c3:
                    15:68:05:28:a7:8a:0d:74:30:ba:96:f1:02:96:4c:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BF:0F:22:D3:49:41:DA:23:12:08:93:F1:9F:58:F2:29:68:D4:22
            X509v3 Authority Key Identifier:
                keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:00:a1:6a:6d:e2:aa:27:39:35:f2:4a:0f:48:6e:07:8e:
         13:80:45:dd:0e:ba:11:1e:99:20:c8:43:14:40:6f:7d:cf:84:
         18:bf:9a:10:c1:80:1e:d4:b2:6e:e0:e6:7d:02:59:63:44:dc:
         8c:f4:43:6b:77:10:62:41:60:1c:c9:66:29:f4:ef:0a:20:45:
         39:73:ed:ab:28:2d:c0:b9:fc:53:58:2d:72:dc:d1:b7:39:bc:
         c9:fb:22:68:de:ff:32:c4:f5:eb:d2:91:e0:6d:13:7a:d2:36:
         0f:08:8d:3c:11:ef:de:3a:87:25:84:b0:72:9a:aa:1e:85:01:
         08:b9:8d:33:be:27:48:f9:d1:52:37:a5:d4:96:e3:bc:36:c5:
         8c:c7:b8:30:28:12:9d:f1:74:47:09:99:a0:53:dc:56:49:83:
         6a:21:c6:47:a7:74:45:7e:79:ce:4b:b7:ee:45:4e:e8:57:1f:
         06:5e:56:b4:39:8d:82:77:ad:32:a8:7d:bc:50:97:e5:44:ec:
         38:ab:6a:13:ab:53:d7:e8:e4:dd:89:1d:85:e8:9a:ca:e7:72:
         d5:1a:87:1f:44:75:43:23:44:62:1f:a2:45:26:40:13:01:5f:
         ff:5c:82:0a:7e:04:bb:99:1c:28:7d:9b:a7:29:24:34:96:7a:
         5d:a8:01:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:55 2025 by rpki-client