Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          TG8b3dxH7MjeFkrjikutlHLnSLpJ6xTE8+WlUkFXfrQ=
Subject key identifier:   52:99:B8:68:21:CC:A7:7F:10:09:A6:4A:9A:0F:40:6D:1E:4B:2F:55
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       01974855430BF53617195FB5B55D18C81F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 03:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:36 +0000
Files and hashes:         1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: ivLvYgty5uHLdydI8066Eo41lXaebIQVnfeG2PjCIio=)
                          3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:43:0b:f5:36:17:19:5f:b5:b5:5d:18:c8:1f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: Jun  7 03:00:36 2025 GMT
            Not After : Jun  8 03:00:36 2025 GMT
        Subject: CN=5299b86821cca77f1009a64a9a0f406d1e4b2f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:b5:04:81:5c:5b:22:2b:72:fd:3d:d5:96:
                    42:7c:f8:c6:2f:0a:0b:73:ca:ef:dc:1f:94:d3:d3:
                    cd:15:72:c5:80:32:aa:f2:27:6a:33:a1:be:bd:40:
                    46:ee:25:09:cb:be:6f:04:60:5a:9d:e4:89:92:6f:
                    d4:6e:4e:03:20:07:e4:1c:0b:7b:57:ee:c4:13:29:
                    81:be:83:da:5c:30:99:35:e7:61:50:1c:68:f5:43:
                    eb:d6:36:69:ff:c3:dc:f0:11:66:04:65:23:51:8c:
                    fc:2e:87:4f:10:5d:a2:d5:68:69:52:3d:76:13:03:
                    2c:f9:77:19:bf:37:d2:30:c0:d9:e1:a3:a8:b0:6d:
                    87:67:8b:c2:e5:c0:e9:52:ac:e4:15:07:dc:0a:77:
                    f4:c2:44:30:c8:60:88:68:74:f3:6e:d4:7b:3e:cf:
                    de:5e:80:dd:e2:73:72:01:33:84:8d:4c:fb:b4:d1:
                    f1:4f:4e:90:07:3a:10:4a:a2:9a:37:1e:00:b5:cf:
                    6e:d5:e7:57:52:55:98:dc:a4:a9:fb:07:21:80:43:
                    11:6b:c6:c7:c2:75:5f:51:ac:df:73:f0:f2:68:b4:
                    b3:f6:d3:99:86:45:b2:ab:0c:16:54:02:83:53:f7:
                    4e:86:8a:29:59:46:06:b9:df:a2:21:0e:88:1d:15:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:99:B8:68:21:CC:A7:7F:10:09:A6:4A:9A:0F:40:6D:1E:4B:2F:55
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cc:74:29:b7:fa:31:fa:e7:dc:24:f7:a7:1f:21:1b:5f:eb:
         b9:95:8e:57:2e:b6:f0:47:ea:74:c7:73:f5:01:c6:46:c1:f8:
         70:ab:27:0a:45:55:47:b8:49:a0:5f:f8:95:37:1c:b7:04:f1:
         2b:b9:62:fa:10:dc:3a:80:90:a4:b1:c6:3e:3c:ce:57:fc:76:
         cf:4d:96:1c:16:fe:1e:25:70:5a:12:38:c4:14:e9:9f:37:f4:
         8b:b2:1e:4c:31:2c:80:f8:c4:be:02:38:f8:49:ab:9c:48:c6:
         e5:55:82:ca:31:7a:d4:ae:78:bb:60:83:ef:9b:c4:6b:69:1a:
         84:ae:f4:18:fd:b0:f2:99:35:df:42:a0:e7:29:22:bb:12:1a:
         1b:6b:c4:5f:8a:a2:08:68:75:ed:bb:12:e2:e6:1f:a8:f5:10:
         53:1b:bd:a8:50:09:95:0d:17:91:21:25:4c:da:38:75:1d:cb:
         db:ad:9e:2f:f4:4c:c4:e6:8d:82:6e:a0:cd:c9:c5:f0:ac:2b:
         ed:a4:fe:12:29:d2:82:ad:7d:6e:97:4a:6c:0b:51:e8:9d:a3:
         da:29:02:bd:21:ff:de:12:08:ef:b1:1d:8b:dd:de:99:66:40:
         73:cb:00:95:c4:06:c6:9a:de:c5:39:b4:17:f8:6a:de:a0:8d:
         e0:03:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:34:17 2025 by rpki-client