Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
File:                     1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json)
Hash identifier:          dKo98B0a1cicawrJeyKmCb4JowUaYwpgYRDq4l1TIyE=
Subject key identifier:   29:B8:24:30:51:7C:58:E9:1F:9C:18:5D:FE:0B:2E:1E:0C:83:66:18
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Certificate issuer:       /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial:       019761DE578B8C2E6DF68A26940767775A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
Manifest number:          158B
Signing time:             Thu 12 Jun 2025 02:00:50 +0000
Manifest this update:     Thu 12 Jun 2025 02:00:50 +0000
Manifest next update:     Fri 13 Jun 2025 02:00:50 +0000
Files and hashes:         1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: 431sIXYBMnYz+DXQaKGY2qiae1vh0P/GggfI3vPVLVg=)
                          2: pnLsiL6edNAl7saH4pXx8QzVPbg.roa (hash: 8OC0V00+GEMst/Tun4ncEnTTBHaJJRqRf9fvQjD99nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:de:57:8b:8c:2e:6d:f6:8a:26:94:07:67:77:5a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
        Validity
            Not Before: Jun 12 02:00:50 2025 GMT
            Not After : Jun 13 02:00:50 2025 GMT
        Subject: CN=29b82430517c58e91f9c185dfe0b2e1e0c836618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ee:30:ba:ab:e4:63:f8:90:3c:d0:83:f5:fb:
                    f0:3c:f8:bc:e4:90:a1:70:40:2d:79:cf:96:97:b0:
                    12:63:b7:32:6a:37:fc:0a:de:fc:6e:ac:77:75:62:
                    24:1e:f3:31:e9:23:3f:b0:0e:6c:29:c0:b0:b4:47:
                    f6:64:84:69:05:c1:15:e6:ab:d6:06:40:1c:e9:0a:
                    7b:30:70:47:3e:fb:99:bc:0e:d3:5f:8f:db:ad:6a:
                    7a:fa:b6:e8:c6:5c:cc:3d:8e:b2:14:4a:d1:4c:e4:
                    62:8e:38:ee:f6:8e:5d:35:cb:c2:18:7e:0f:be:bf:
                    22:20:82:cb:70:91:00:a0:f7:55:4c:91:a9:7f:ba:
                    f4:eb:52:9c:0f:e8:a1:71:7f:ae:a8:ec:29:d1:63:
                    43:a2:dd:8a:fb:4a:20:69:8d:55:ed:4c:be:2c:82:
                    9e:c4:0d:06:8e:a5:01:fb:e8:65:3f:84:15:eb:2c:
                    27:e1:d4:6e:f7:13:df:4b:42:55:94:c9:7e:3b:0e:
                    6d:14:bf:dd:a0:bd:ed:b1:a7:57:50:2c:11:e8:cc:
                    c7:b9:26:33:ff:ee:33:c0:9f:12:65:3b:c1:09:31:
                    36:93:ba:28:e1:7f:cc:fa:c5:24:70:8e:9c:b2:78:
                    53:07:01:d4:bd:de:c9:3e:21:1a:d3:68:c8:1c:fe:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B8:24:30:51:7C:58:E9:1F:9C:18:5D:FE:0B:2E:1E:0C:83:66:18
            X509v3 Authority Key Identifier:
                keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ab:1c:ca:c2:2a:20:00:7d:b1:8e:43:ca:fc:39:b3:46:a6:
         99:f0:ff:82:f9:65:9a:99:a2:86:b7:ba:78:cb:c1:7b:09:0e:
         fe:51:27:46:a9:86:50:8d:85:63:15:b6:0c:75:24:5c:d5:81:
         dd:34:70:bc:3d:c5:7d:e7:04:53:75:01:b3:df:8b:b9:6c:9b:
         77:5a:32:7c:ac:3b:09:48:ef:6d:b6:67:52:f4:ce:f6:05:02:
         54:3e:f9:3d:0d:05:41:2d:f0:ae:ca:c2:14:5d:ad:93:4e:01:
         ce:de:fa:c9:79:38:5b:53:e4:d5:2e:f7:4d:b7:f3:7e:a0:9d:
         07:e7:65:a2:ee:c6:a4:fb:75:7a:6c:f7:c4:74:be:71:d6:d0:
         2f:ab:5c:f6:0e:cd:ba:00:6b:86:9e:be:05:75:e2:6f:c9:f9:
         48:ed:a1:09:1c:b0:4c:50:70:56:d2:a3:0b:f0:27:27:4f:92:
         e4:98:c6:1f:94:80:fb:ea:7f:26:e0:78:5a:f6:24:c8:96:a2:
         95:09:db:e8:e2:62:59:a8:5c:5b:4c:11:fe:60:0b:cb:9b:11:
         aa:f1:22:01:d9:ee:49:0e:f1:6c:4f:1b:2d:9b:2d:e9:f1:be:
         39:52:7c:9a:7f:a7:f8:da:0f:60:1e:64:36:57:e5:5a:2b:67:
         ca:f2:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:35:09 2025 by rpki-client