Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          Ge7QI19Vr4jbFHS06teN4qVUN7ymMk//3b4jr/A6L10=
Subject key identifier:   73:DD:97:05:62:32:2C:A2:10:79:93:CD:E4:81:49:B2:18:0D:8F:CB
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       01974AB1AA0A032425DA1F1C654260835650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          0325
Signing time:             Sat 07 Jun 2025 14:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:46 +0000
Files and hashes:         1: 7hX2kvhGcEho9Z4B5I203SOFDKo.roa (hash: uOYoTi2rqcHbtIlClUvG5lUVdT7AvqTcY4AmaxczRf4=)
                          2: CDhfXiWmp-7DWGHRLkI1RXpNMUw.roa (hash: BdyrC92HV6fMOkqwdnwWMjP4WPGwGQmddKXw8S//IY4=)
                          3: QSxkF4rOw8CaQhbY1bgweRS2k84.roa (hash: /gVGhfkCO75vlxeNpsZvkhIuMR2YzpuGJXm7VvwUGkk=)
                          4: SmAcFee67aQLcPrKmiXZ94F0DAo.roa (hash: 0ymC9JbQOKLWpT417ofA+sK82ehW8sAqv3tq2DxYn+c=)
                          5: YK_aUPQtgAjjUBJq7WhDbslbCWM.roa (hash: +IG0CxEpiZEOb47k2itsdETT9izTBhlEAMyJ/fS5uh4=)
                          6: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: 6qRa1oI1r/0bcLrAapLC937KtunJoIkXx1DwLzml6Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:aa:0a:03:24:25:da:1f:1c:65:42:60:83:56:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Jun  7 14:00:46 2025 GMT
            Not After : Jun  8 14:00:46 2025 GMT
        Subject: CN=73dd970562322ca2107993cde48149b2180d8fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ef:cc:62:26:e9:af:58:60:a4:95:02:92:21:
                    8d:30:2b:3f:23:18:4d:ea:2c:8c:56:7d:4e:14:fc:
                    43:be:f3:61:f4:48:dc:b6:28:52:8a:ec:79:0f:45:
                    28:7f:ba:29:ec:5c:9c:51:4c:d4:57:9c:3a:ed:5c:
                    86:6b:e3:f3:e8:3f:fc:34:d7:25:98:f5:f3:a0:b8:
                    da:8e:02:0b:7e:ff:c5:28:6a:94:2e:14:2f:e4:ab:
                    82:e2:02:cf:4e:7b:80:eb:94:6b:7a:96:c7:e8:9b:
                    cd:36:e9:0a:0d:ae:bc:8e:ea:05:59:b0:d5:17:ca:
                    95:63:ab:6c:9a:37:80:96:91:62:c3:d3:c6:ff:df:
                    2e:17:64:20:60:1e:ac:e6:40:87:bc:09:f4:8c:65:
                    b6:d4:31:b9:78:e4:fe:1a:8b:96:6c:d1:b3:57:e9:
                    7f:fb:97:8a:6c:9b:a5:25:cc:46:d9:64:46:89:ab:
                    1f:31:8b:a0:2b:4c:2a:31:30:18:f2:8a:a0:21:f5:
                    74:64:eb:1c:05:ea:d2:11:20:0f:72:3e:29:e3:05:
                    a5:a2:0f:b0:22:7f:ae:40:e8:43:08:9f:7a:5c:2d:
                    c0:1c:f9:29:d3:60:e5:d7:0e:4f:3b:9f:2c:cb:41:
                    7d:6a:53:c3:d8:f8:10:7b:63:b7:38:3e:6a:2b:6b:
                    3f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DD:97:05:62:32:2C:A2:10:79:93:CD:E4:81:49:B2:18:0D:8F:CB
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:58:9d:dc:ad:9f:e4:6f:2e:b8:e4:22:36:a2:e4:c1:b1:82:
         4e:b7:67:35:43:41:ae:8b:ef:de:17:0e:f3:8d:1a:93:c8:ca:
         11:4a:a1:84:ec:6d:76:8a:bb:f6:8f:76:01:db:22:a1:93:82:
         01:5a:e9:84:fd:7b:3a:b4:4a:b1:9c:76:60:2c:5f:ff:dc:73:
         a9:da:86:ec:06:1b:a5:67:bd:19:66:7b:83:aa:42:1d:68:f9:
         fd:4a:68:31:46:76:ca:1b:58:9d:c8:12:61:f0:68:61:f5:73:
         2a:b8:60:4d:48:8a:75:a7:6b:66:21:3f:e3:6b:dc:35:81:5a:
         d1:ed:1e:df:c9:29:6d:8c:85:96:ee:d8:21:1d:fc:09:15:a2:
         54:f5:a0:d0:3a:79:43:01:e1:09:b1:7b:fa:ae:e6:6f:78:48:
         5b:b3:7c:7c:05:7c:05:39:f4:17:be:58:a9:51:81:60:f4:50:
         92:3c:a2:0e:b3:6f:04:fe:e9:59:76:96:03:c5:bc:36:e4:36:
         bd:9f:a8:cc:80:35:80:73:d2:b4:4f:ad:e1:b2:b1:9f:8f:6b:
         9b:d8:19:5f:88:b6:21:ac:42:5d:d3:ef:5f:8d:2f:3d:b6:fa:
         30:72:2d:4e:7d:f0:b4:b2:84:a7:07:b3:2d:96:b3:25:65:8e:
         37:6c:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:30:37 2025 by rpki-client