Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File:                     9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier:          C385f/+d47UNrJjNFB/wxDzx0Dx60ZgHHr3gSvnDhfA=
Subject key identifier:   30:BF:13:E8:7E:12:AA:0F:2C:FD:15:D4:D7:40:2A:87:6A:A2:2B:4B
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer:       /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial:       019746D48A5D0B464D612D46435DE98D8217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number:          157C
Signing time:             Fri 06 Jun 2025 20:00:23 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:23 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:23 +0000
Files and hashes:         1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: ii+Xr5gdofFGebqL20/qVNMAH1DMyezYWbHCkc8vsaw=)
                          2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:8a:5d:0b:46:4d:61:2d:46:43:5d:e9:8d:82:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
        Validity
            Not Before: Jun  6 20:00:23 2025 GMT
            Not After : Jun  7 20:00:23 2025 GMT
        Subject: CN=30bf13e87e12aa0f2cfd15d4d7402a876aa22b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:34:a1:50:6a:88:20:19:80:9d:fd:00:7b:
                    5b:52:32:31:79:8b:e6:4e:26:10:c0:77:8a:c9:e6:
                    cd:17:ed:e6:69:46:33:be:c7:e5:37:8b:8f:31:97:
                    55:19:3d:2d:b6:75:63:74:1e:47:ae:d0:74:84:79:
                    bc:15:e0:c4:99:32:48:d9:9b:24:fc:a3:9e:c4:b9:
                    b8:68:e1:b7:a4:c7:fe:96:b6:b2:d8:9b:f5:3e:7f:
                    30:d6:62:22:35:37:5f:28:2e:3a:a7:35:e5:bd:78:
                    55:31:1f:d8:12:bd:c9:f9:2e:f1:8e:80:ae:90:7a:
                    7c:54:5a:8f:96:cb:f9:70:e7:89:4d:8b:c3:fc:2a:
                    75:49:93:bd:12:09:2a:fd:93:e7:38:c0:4d:4f:5d:
                    c8:f4:7b:a1:44:06:a1:c0:1b:68:da:41:09:ba:5c:
                    64:a4:40:14:08:7e:4d:de:46:97:0b:6d:0e:32:6e:
                    87:72:9e:31:f3:b0:8f:c2:a6:d1:d7:7b:ba:49:26:
                    28:9e:04:77:20:69:ad:42:c4:00:8d:aa:8c:92:43:
                    7e:75:bc:96:68:e9:ab:cc:2e:38:14:b1:95:dd:5d:
                    c5:65:45:19:ea:4b:11:03:d9:52:4f:ab:40:2f:c8:
                    bd:96:ae:2d:5a:b3:fb:fe:51:3f:05:09:5c:76:27:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BF:13:E8:7E:12:AA:0F:2C:FD:15:D4:D7:40:2A:87:6A:A2:2B:4B
            X509v3 Authority Key Identifier:
                keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:51:76:88:a2:78:89:19:5e:58:ec:a5:57:0a:35:e1:67:
         33:96:46:9a:1e:bb:d1:54:be:48:0e:9e:84:e5:43:48:2c:86:
         58:44:18:21:2c:ae:2d:73:09:63:ba:12:57:83:82:be:3c:44:
         90:13:f8:bb:05:08:50:e0:8f:d7:31:b5:18:6b:e5:34:2b:60:
         e3:26:e2:da:09:14:f5:81:b4:85:22:b2:64:ec:d4:28:cd:42:
         59:2a:78:f4:28:01:a3:c6:8c:e8:d4:00:79:ed:58:07:5f:3f:
         20:21:13:22:54:20:eb:8f:7e:b6:0d:6c:06:9b:62:5a:bc:85:
         ef:46:6b:71:7f:92:40:0e:96:b6:4b:48:b2:9d:e3:c8:b1:6b:
         4f:c8:53:a2:04:2a:06:b9:1e:23:ae:27:29:52:db:a4:4a:47:
         1f:b6:5b:d6:1b:48:70:59:da:4b:4a:85:ce:2c:88:a0:eb:04:
         b8:37:e6:ef:3a:72:f2:c6:39:ae:ad:83:a9:bb:63:44:01:4e:
         d6:4d:70:d2:a3:65:a4:fb:05:6d:52:c0:d9:e6:71:ad:56:50:
         93:d7:2e:dc:85:c0:c5:e2:4e:96:f0:20:e2:83:f8:5a:4d:6c:
         c6:5e:b8:ee:50:0a:5b:44:4c:7d:66:c7:12:c7:55:36:22:3f:
         78:44:7d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:37 2025 by rpki-client