Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          OsCaqYu+djHopPZ71EGZuDQZD7gjecq5ghWpBOmPnVk=
Subject key identifier:   4B:C7:80:62:EE:D3:91:E8:B3:34:4F:7F:E0:65:FC:7D:B4:9F:84:8B
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       0197470BCF9A7EC6A4B65C22BDCEDCEF09DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          157F
Signing time:             Fri 06 Jun 2025 21:00:45 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:45 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:45 +0000
Files and hashes:         1: 0SF7pOBg_ur6TuAnhKZvtMcmyMw.roa (hash: 5nIyMEgIsmgFGVdTMcAMulKSrVsz482NfoizOY2OUOA=)
                          2: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: ZFQmIspoVASiKUrcfNcmyjk5Yhjvcb+xLpHDBIijywY=)
                          3: cvkG_y1cL0YAHfjQA7tH3oSS1BM.roa (hash: kvaRsBfAFxeZA6gu+TEc8LHfkCny56mAcc6wJSjFdsU=)
                          4: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (hash: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=)
                          5: it7IHvJCQfR1gZTQymCzS9Ta2cI.roa (hash: /axHPc2cp+I2aoPIZLPk+zOh5Faet3AVlxLqRnIEWb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:cf:9a:7e:c6:a4:b6:5c:22:bd:ce:dc:ef:09:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: Jun  6 21:00:45 2025 GMT
            Not After : Jun  7 21:00:45 2025 GMT
        Subject: CN=4bc78062eed391e8b3344f7fe065fc7db49f848b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:c9:92:e5:a4:ad:f4:8a:38:27:8f:1d:cd:
                    77:ca:47:f5:66:d4:8d:4f:b7:1f:61:d6:88:86:5b:
                    fe:e6:53:7a:32:0c:6f:19:fa:88:76:0c:04:9a:f8:
                    4e:a7:de:77:2f:d0:a8:ea:9d:7e:82:dc:77:b9:df:
                    78:b1:73:7b:08:a9:61:69:47:ef:ef:31:eb:97:93:
                    2c:a5:44:a4:3a:bf:41:6b:49:dd:6e:c6:9c:24:5b:
                    2d:44:85:99:e0:40:29:cc:60:5b:b7:61:3c:88:47:
                    9f:a3:45:bd:f0:5d:01:f2:95:ac:11:c7:ec:69:d6:
                    e1:ca:08:88:98:85:49:ba:7a:57:91:ab:ee:7d:86:
                    bb:24:91:83:55:98:53:00:c5:3d:3b:05:50:40:63:
                    45:ff:96:89:39:fd:d4:e1:bb:d3:29:3d:79:58:1d:
                    3e:f7:f1:8d:b7:3f:1b:76:5f:1a:2c:31:cc:79:87:
                    1d:83:be:75:b3:d9:00:52:95:3d:34:df:7b:4a:a5:
                    2e:66:cd:73:73:05:53:45:1a:55:45:86:cf:55:83:
                    c9:1f:62:0e:ca:bb:3f:be:7a:05:78:80:e8:92:5c:
                    1a:d7:a7:4a:53:4d:37:c6:68:59:f3:8a:1d:fa:99:
                    3f:8f:47:ea:c6:b1:05:8d:77:1d:a2:23:15:08:b0:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C7:80:62:EE:D3:91:E8:B3:34:4F:7F:E0:65:FC:7D:B4:9F:84:8B
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:75:80:df:18:54:dd:15:76:b6:9b:d6:19:1b:8b:78:67:22:
         ef:b3:09:a0:40:a4:aa:6d:6a:f7:37:12:98:89:ca:ad:e5:1f:
         a9:25:99:c5:5d:fd:6b:c2:fb:f1:ec:e7:f7:e9:66:50:0e:3a:
         46:cf:d2:d8:f8:57:7c:e6:53:00:ef:1c:42:d1:5c:14:fa:c3:
         c7:5d:e5:02:73:32:8b:99:93:5e:44:20:0a:85:65:8b:16:4e:
         8b:4d:3f:3c:19:8f:d6:0e:fc:68:e5:68:df:b4:2d:fd:08:1c:
         57:7f:6e:f7:90:84:59:be:43:f8:90:f5:70:0f:8e:92:55:35:
         58:c6:c9:f3:39:be:ce:6c:09:94:ed:9e:2f:3c:37:cf:f0:c6:
         ce:6b:6b:4d:d5:64:6e:4e:4c:8b:85:06:f0:ae:4e:1c:f3:df:
         ec:19:e2:4c:ea:7a:e0:af:e5:6e:7c:1e:d0:14:ed:f7:ba:57:
         e4:0f:ab:08:1c:aa:dd:ba:e8:e5:6d:b6:ca:45:2e:ce:34:e9:
         7a:fd:19:b3:ac:90:42:19:59:dd:c5:d0:77:5a:95:c3:79:84:
         94:4b:64:c6:fe:89:7a:5a:8b:27:43:06:cb:f0:fb:a1:f4:48:
         45:67:99:6f:1e:9a:84:ac:92:c0:34:90:bb:dc:4e:bf:03:4d:
         98:df:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:02:58 2025 by rpki-client