Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File:                     vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier:          Z53aIC5NaePbLS9lfowldxeo2bKfNbKf4dZEPdw2utc=
Subject key identifier:   7B:26:8E:C7:BA:EC:E3:A7:06:77:04:A7:8A:E1:47:2E:CB:7B:58:C1
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer:       /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial:       0197499F6D1D0114CEE8E52EA773FD552F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number:          0EAB
Signing time:             Sat 07 Jun 2025 09:01:14 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:14 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:14 +0000
Files and hashes:         1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=)
                          2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=)
                          3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: FDcYvFHA9KhjyaBo1VGqPE7L19N3CykPUu1AivP2Bi8=)
                          4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:6d:1d:01:14:ce:e8:e5:2e:a7:73:fd:55:2f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
        Validity
            Not Before: Jun  7 09:01:14 2025 GMT
            Not After : Jun  8 09:01:14 2025 GMT
        Subject: CN=7b268ec7baece3a7067704a78ae1472ecb7b58c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:52:b3:ed:33:f0:75:2e:ea:b5:04:68:d6:
                    ea:4b:18:31:b9:64:b0:98:cc:14:b0:58:89:f0:6d:
                    4e:c1:24:19:39:66:72:5d:6d:70:dc:dc:18:13:8d:
                    fd:90:94:74:63:d9:3a:21:d1:1b:b5:d8:d9:13:79:
                    8f:d6:b2:46:7b:e0:28:8a:56:71:79:6e:09:d1:33:
                    31:38:bd:1f:02:31:b1:1d:1f:6a:19:fe:00:75:d6:
                    00:fe:4f:f4:6a:c3:c1:54:cd:72:5a:cb:56:19:54:
                    43:3e:ef:a8:1d:2b:e7:91:09:f2:62:4a:a4:1e:27:
                    56:9b:57:71:fc:5f:f6:73:1b:ad:90:7a:d0:60:13:
                    77:d6:7a:28:0e:ce:f7:3f:cc:05:48:c7:e5:8f:ac:
                    cf:fc:6a:4d:fe:ad:8d:b7:f1:0a:2f:cd:fa:1e:f0:
                    fd:cc:3b:47:b4:b8:1f:2a:2f:79:45:7d:c2:99:c2:
                    5f:c1:d8:cf:29:3f:ee:05:8a:f1:50:41:1f:14:27:
                    1b:37:0d:00:91:10:ef:79:fb:5a:df:8a:19:9c:16:
                    d1:d7:c5:d3:17:23:29:81:26:68:66:ee:28:94:56:
                    6a:c2:61:35:19:81:09:d0:91:40:bf:db:31:b6:f3:
                    2f:51:26:e6:bb:9f:86:ea:55:60:48:71:37:9c:18:
                    48:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:26:8E:C7:BA:EC:E3:A7:06:77:04:A7:8A:E1:47:2E:CB:7B:58:C1
            X509v3 Authority Key Identifier:
                keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:21:7c:1c:5c:63:fd:5c:8f:50:f7:f9:61:d8:a6:da:2d:
         2a:af:1f:3e:2f:84:7c:e8:3c:81:1e:45:23:62:d2:cf:db:97:
         fb:71:ea:b5:79:bb:02:0d:99:76:be:f6:23:4f:a0:a0:6f:15:
         c9:e1:13:76:9c:85:21:45:ef:7c:25:9c:d0:0f:4a:12:b6:d2:
         38:55:f0:c5:00:56:9c:a7:8e:ca:61:9a:06:c7:9a:b9:56:6e:
         13:d7:31:8a:69:10:09:3f:96:4c:cc:7a:05:8e:57:21:ec:c2:
         e3:57:d9:1e:17:f5:0c:69:8a:09:6d:bd:d0:f2:19:cb:7e:3c:
         a1:7b:da:19:ac:5f:3b:e2:14:9c:72:33:e5:42:19:5d:f9:c4:
         dc:d7:ed:6f:68:30:b1:82:35:4a:e2:3a:75:e4:d8:db:0b:78:
         ec:c5:8e:ab:47:db:64:05:13:00:59:35:dd:67:ff:b4:ba:e2:
         56:5a:b8:63:49:a0:fa:43:8e:95:f2:3f:7a:76:d4:42:f2:1c:
         05:48:08:cf:12:96:94:63:59:4c:a4:71:17:22:03:11:9e:a3:
         80:2d:98:ec:c0:58:00:4c:79:9f:ff:14:b2:ba:fe:c8:49:48:
         08:fa:49:57:81:27:46:a1:e4:74:1b:4d:88:0e:82:1c:2c:0e:
         fb:7e:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:07 2025 by rpki-client