Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
File:                     d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft (raw, json)
Hash identifier:          W7M6gKfQ2T3WKwo7c/3JaJq26cKzDn3/wBtYzveEFgk=
Subject key identifier:   38:CA:42:CA:EA:68:21:E3:58:38:7D:09:42:CD:B7:2D:B2:D1:6E:EB
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Certificate issuer:       /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial:       019741E548F873935B69A113558F917F2883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
Manifest number:          0EE2
Signing time:             Thu 05 Jun 2025 21:00:34 +0000
Manifest this update:     Thu 05 Jun 2025 21:00:34 +0000
Manifest next update:     Fri 06 Jun 2025 21:00:34 +0000
Files and hashes:         1: 1-CTcDUEdN5WfEm_rs3o0JHhk5XU.roa (hash: lk5WrQW7f4eLUx+kxUxuWVLfFLTkEmxU4/4R6+50tjM=)
                          2: QsI91EQU0FfuQWtPM8GSqH3JUGY.roa (hash: E3wsAexKJr8HQY5TnjV1zhmCkOPgMph7WKoFlQ4Vnzc=)
                          3: d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl (hash: mJ3SaGdJw58tC7DSqyBurP9NxVQZVT0mZ6LSjxzu3Y4=)
                          4: g7sPwfEyrg2GU6nX9GnEZI5ry6U.roa (hash: gvrZns7JDU/MxjbK6KJTEHNI6mOo43rYah4+1PHu7cs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:41:e5:48:f8:73:93:5b:69:a1:13:55:8f:91:7f:28:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
        Validity
            Not Before: Jun  5 21:00:34 2025 GMT
            Not After : Jun  6 21:00:34 2025 GMT
        Subject: CN=38ca42caea6821e358387d0942cdb72db2d16eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:c3:f1:c4:3f:14:4e:f6:4a:38:e7:9d:2e:
                    4a:52:ec:8d:e2:46:21:91:6c:ce:a3:cc:d3:32:bc:
                    bc:a4:65:2c:af:72:98:00:34:8c:f8:0b:f1:2d:c1:
                    6c:4f:73:42:89:3f:c1:40:a9:80:60:3e:b5:22:17:
                    12:2a:e4:ac:cd:34:1b:75:08:82:94:09:9b:57:6d:
                    cd:cb:3e:c5:d1:b4:85:c3:cd:73:75:53:64:a3:3d:
                    e5:7b:e3:c1:8f:12:7c:33:de:0d:0f:2a:19:7d:b1:
                    c0:f2:de:71:27:6f:99:07:c9:84:21:b9:e8:1b:ac:
                    02:19:5d:25:99:1c:5f:5a:97:17:ec:d6:cf:50:85:
                    4f:4a:be:38:ce:28:b7:2a:c2:8f:52:a4:10:ac:82:
                    74:b5:2c:88:f2:9a:6a:9c:3a:dc:39:8e:b5:6a:42:
                    dd:d0:7e:5f:fe:46:34:a9:8e:e8:43:db:54:f6:8c:
                    b9:e5:31:d4:f4:3e:95:b5:7f:bb:13:7c:f7:fc:e4:
                    7e:23:8e:8b:e4:c1:0c:50:9e:84:da:47:15:41:05:
                    a8:cf:da:f2:48:63:21:1c:54:c8:ed:b4:d2:cd:bc:
                    99:ef:31:fe:3d:da:8c:27:9f:99:0b:1d:01:f0:0b:
                    2c:f0:d6:d3:b6:08:94:31:6d:0e:74:54:d6:1e:48:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CA:42:CA:EA:68:21:E3:58:38:7D:09:42:CD:B7:2D:B2:D1:6E:EB
            X509v3 Authority Key Identifier:
                keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:68:71:0c:ab:73:9d:96:34:cf:7e:aa:8f:8c:b7:c4:92:a5:
         22:3e:8a:94:32:a7:1f:62:23:df:a0:ef:30:c3:27:c1:9b:74:
         6b:e8:3e:df:0a:4f:78:88:e4:61:76:91:bd:dd:9b:12:7e:1a:
         2e:44:86:7c:23:c0:21:b3:39:c2:e4:77:b6:a3:3f:4e:e8:5a:
         cc:0a:07:25:02:58:6e:7b:39:ee:10:d0:92:2d:b6:85:1c:5a:
         9d:50:6d:d9:30:c9:34:af:3a:4c:ff:79:5f:7b:97:53:66:f9:
         e7:71:db:97:69:c0:48:f1:3f:2f:9b:cd:a4:f2:41:fb:a0:40:
         9d:dd:17:d4:d0:d5:61:e9:0c:d8:aa:c7:26:0a:01:6e:b1:e3:
         cf:b4:1a:9a:1e:c4:70:fd:df:9a:0b:2c:f7:e5:a4:ce:86:80:
         2d:1f:ab:0d:22:0a:a6:25:c0:74:e2:fa:08:fd:cc:10:96:68:
         95:0d:73:2e:80:89:ff:22:ba:e2:b8:b9:19:05:1a:6b:ab:0f:
         b2:b1:4d:49:93:59:0b:17:da:a3:9c:48:85:2f:20:94:96:c1:
         81:13:47:19:1d:ed:e6:cf:f0:5e:dd:9e:b9:a4:08:96:c3:eb:
         06:02:12:16:28:21:cc:90:b5:bc:b1:19:28:d8:49:dd:44:58:
         0a:40:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:18:09 2025 by rpki-client