Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
File:                     vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft (raw, json)
Hash identifier:          3aNXQnVVeHS02msuF4Co+pkEwBpXY9CIKJ/4pvPoQ7M=
Subject key identifier:   E8:A1:4E:DC:9A:AA:D0:60:F2:20:AD:34:00:35:6C:5D:ED:48:62:FD
Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Certificate issuer:       /CN=bd82e60d072e5185435a900e323f463806d433c9
Certificate serial:       01974CD75592CC6B63391343DB87888905B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 00:01:09 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:09 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:09 +0000
Files and hashes:         1: vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl (hash: X+/X5GQYVju7Afb8S+aetRR6QZUlv4GHdZuMoUV6AGk=)
                          2: zHFsSZojvy_X7uL-vPL2okM6zhI.roa (hash: n8rylT6z4CcEms6K9HKeeDe6KPQo1phvGPnzqc1vlUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:55:92:cc:6b:63:39:13:43:db:87:88:89:05:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9
        Validity
            Not Before: Jun  8 00:01:09 2025 GMT
            Not After : Jun  9 00:01:09 2025 GMT
        Subject: CN=e8a14edc9aaad060f220ad3400356c5ded4862fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:17:b4:55:54:35:73:d2:24:61:ab:ab:30:b9:
                    34:6c:5e:ce:5a:fb:45:7d:f6:5e:35:d9:15:a2:df:
                    bb:11:18:73:18:61:7c:b0:5c:ff:7a:76:a0:9f:48:
                    4d:2e:ad:f0:27:84:ab:2e:3e:24:ca:38:07:87:6a:
                    02:9c:25:53:be:42:88:0d:dc:ab:f0:de:5c:61:10:
                    f2:c5:fc:25:03:9b:b8:18:09:5b:0d:b6:dd:ef:9b:
                    46:36:22:1a:7f:4f:dd:c5:4f:ff:0d:58:46:51:e3:
                    fb:fe:52:9d:73:48:5c:45:f7:4c:ea:47:dd:7f:1b:
                    c5:c7:65:3d:0f:1c:5f:69:a1:df:c8:f1:65:06:7f:
                    f4:82:a1:fa:c4:ba:19:27:c0:f0:fc:d2:42:a9:40:
                    a2:e0:9d:bf:20:b4:a3:bf:31:1d:bd:3b:f1:61:f0:
                    cc:4e:c6:ba:11:a7:58:83:0d:cb:72:f5:ec:33:5e:
                    6d:3a:48:9e:ad:6e:de:60:ca:e8:a2:06:e9:c6:bd:
                    b3:b3:71:c3:19:c3:f2:d8:79:16:31:5d:99:c8:89:
                    8d:0c:32:c1:2b:c4:2e:e6:a1:f6:6f:db:44:ce:94:
                    9a:04:f9:00:3d:87:4f:f6:22:96:42:8b:d0:00:e5:
                    65:c4:8d:f1:b8:d5:88:1b:1f:40:30:09:ad:8d:fe:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A1:4E:DC:9A:AA:D0:60:F2:20:AD:34:00:35:6C:5D:ED:48:62:FD
            X509v3 Authority Key Identifier:
                keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:73:9a:09:77:e7:0e:52:69:57:80:2c:ce:f7:6d:da:9f:27:
         43:ad:04:29:81:ce:ee:03:34:1e:5a:f8:56:77:a4:bc:1a:c1:
         48:58:ce:b2:09:76:15:fb:3b:72:82:34:22:41:3a:3c:6a:09:
         56:f6:2c:21:f1:1f:4f:e2:be:fc:3b:75:d4:f0:80:b6:84:da:
         16:7c:a6:f7:46:81:fb:05:98:89:9e:b6:d2:6c:3d:84:b8:42:
         26:48:cd:5c:b0:97:ec:60:ab:de:5a:9a:1c:8f:1d:32:1d:80:
         b6:a9:67:64:6b:4f:66:a2:20:44:6b:ca:a1:45:fb:60:d3:a5:
         cf:2c:db:ef:73:24:c1:bb:b7:09:a4:24:7d:9f:79:07:a7:93:
         ec:b0:a8:9e:e9:8b:68:12:be:83:4d:ba:d5:ca:06:21:7f:7f:
         a5:29:e4:7f:7f:b8:85:ae:a2:cd:97:a5:5c:b1:29:62:32:78:
         7e:41:00:cf:65:24:1a:30:62:37:6d:16:ab:00:c9:65:bf:73:
         6f:86:89:b1:4c:88:a4:24:c6:95:fe:fe:e6:f6:24:01:6a:05:
         90:33:5f:8a:67:5c:ef:7e:1d:ec:8b:6b:9c:b9:05:9b:4b:ad:
         1e:7d:52:ba:7c:83:f9:6b:00:f2:de:ec:98:40:95:cc:98:0a:
         27:2c:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:38:46 2025 by rpki-client