Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File:                     cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier:          Z6y3hLGjEysJjlGy9GJPS0/6l5k7u3KDyUF61iOtMcI=
Subject key identifier:   6D:57:22:20:76:65:16:D1:EC:67:BC:2C:F2:85:91:EE:30:0E:FA:86
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer:       /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial:       019746D4D69E1B52997F7059DCF614598CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number:          157E
Signing time:             Fri 06 Jun 2025 20:00:42 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:42 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:42 +0000
Files and hashes:         1: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: eEd5fWAhqhTT4SLg0QzBH3z/fsEh7/eNLt23pTpTpEk=)
                          2: fXIhT7Ydqm5HytjfeB-NmrbrFRI.roa (hash: EsiKR1dMs1SsEJue6V9U6b9V/XFN9Zx4S62/KpEzEqg=)
                          3: kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa (hash: T6hfblwKGrCK3Ap3pOGRw0serguSainDEw/sPRZW+uI=)
                          4: mprfUYWLFFvcoporgivp8S18oz0.roa (hash: uZGl5TRJLtjM+YCzDi4j+2EG/6oM3QIc/9AdR4GUda8=)
                          5: nqfgPZyBGUMJjXZ82ONF8M_wX2o.roa (hash: cAq2+4Plhv+25M/XxaCNm4UA7TT+v8QHyzJDH25TDn4=)
                          6: zShwLkkDPGWGSwVW1WaNYQqy4QY.roa (hash: cc7GaLAsHY9PJBKnUzOfoPoWS1viq2gLzvzxAmdtn+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:d6:9e:1b:52:99:7f:70:59:dc:f6:14:59:8c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
        Validity
            Not Before: Jun  6 20:00:42 2025 GMT
            Not After : Jun  7 20:00:42 2025 GMT
        Subject: CN=6d572220766516d1ec67bc2cf28591ee300efa86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:84:17:27:4c:22:ac:e5:16:7d:20:7d:9a:bf:
                    c6:52:d4:78:1a:c8:39:d1:99:be:6a:18:2b:bf:45:
                    d6:b4:02:31:b7:61:73:c8:ba:75:d5:92:4c:cf:a4:
                    a2:aa:7d:a7:79:5a:e8:46:88:c6:cb:ff:6f:82:c5:
                    40:75:0c:51:c7:96:39:df:ec:d1:93:7f:8a:51:13:
                    7c:ee:fe:39:f5:01:5b:35:4e:22:07:d3:d2:4d:0f:
                    32:dc:46:77:03:99:c9:11:91:b1:61:a1:d1:15:64:
                    5c:9e:52:8c:e5:16:32:b2:a1:b5:f9:5b:47:55:8f:
                    ac:46:fb:06:92:90:55:3d:26:bf:06:9b:af:10:08:
                    aa:f0:5c:39:dc:a7:bf:f3:d3:8a:64:21:1b:92:a0:
                    b8:6f:6b:8e:0d:be:02:71:5f:29:92:97:6b:43:4f:
                    54:6b:99:9f:40:94:ff:94:0d:e5:14:f9:34:e8:5d:
                    40:be:46:ca:c3:34:41:50:b9:50:1c:8a:35:db:c5:
                    a9:24:fd:88:88:eb:b0:fc:48:92:28:f8:84:1f:8c:
                    41:64:a8:82:ed:0e:1c:3d:e9:8d:ab:6b:95:c8:89:
                    44:77:a2:3f:df:65:c5:0e:88:76:7f:3b:07:58:10:
                    aa:86:d0:2d:c1:ce:3b:11:31:09:b2:c7:e3:8a:bf:
                    b4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:57:22:20:76:65:16:D1:EC:67:BC:2C:F2:85:91:EE:30:0E:FA:86
            X509v3 Authority Key Identifier:
                keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:48:3a:e6:bf:11:b9:d9:73:6d:4b:96:6a:f2:bb:6c:05:81:
         11:e2:f9:36:97:67:0c:d0:a8:b0:7d:47:2c:a8:cf:0e:85:8b:
         9d:d9:70:c0:c7:81:9e:7b:3d:dd:64:73:1c:d0:b0:52:29:f1:
         ac:7e:9c:d3:c8:e7:30:bf:b5:4b:f1:a9:d6:92:76:9f:f7:36:
         6a:51:b2:42:27:d6:54:b5:7f:16:3c:e2:6e:c5:0f:4c:2d:c8:
         00:02:db:5a:5b:7e:e6:64:05:b2:a9:29:20:47:f6:3c:ea:bb:
         da:b8:2e:eb:81:3b:56:84:aa:e4:7c:5f:5d:c2:72:fb:54:2d:
         c6:93:db:0c:f5:af:b7:0c:4a:48:0c:7f:40:8e:af:b9:80:3f:
         a1:49:d2:5c:9b:14:18:86:60:99:aa:53:58:37:f5:79:9e:65:
         5f:16:1f:ef:c5:65:a0:80:78:bd:03:60:bb:d7:4d:b4:ed:f1:
         7e:5a:7b:1a:a5:bd:1f:01:67:84:11:b3:07:a2:35:5c:e5:75:
         4e:be:20:f6:7f:f2:59:ff:38:cb:0b:48:45:86:58:d3:e2:08:
         92:a2:1b:1f:79:21:c5:a2:49:a4:79:30:4d:15:6c:77:94:2b:
         9f:d6:4c:0b:e2:bd:8b:e9:64:55:bd:83:1d:80:c5:18:c7:d1:
         e7:12:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:08 2025 by rpki-client