Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File:                     ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier:          f9P9pI2t+epzP9aDtHBqdmaO/2BNPeVQe7hbJJVNUo8=
Subject key identifier:   0D:98:16:40:23:F8:40:B4:85:F9:5C:23:79:1E:0C:6F:1C:85:CC:0E
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer:       /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial:       01974AB14E36631FA71657DE6FADD1567D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 14:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:23 +0000
Files and hashes:         1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=)
                          2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: y+npap6aAWz04ijeOIfdTYNvE04cU/SOeDiZScfGr3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:4e:36:63:1f:a7:16:57:de:6f:ad:d1:56:7d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
        Validity
            Not Before: Jun  7 14:00:23 2025 GMT
            Not After : Jun  8 14:00:23 2025 GMT
        Subject: CN=0d98164023f840b485f95c23791e0c6f1c85cc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:8b:1e:2c:20:d7:d4:e7:c8:85:3d:8e:a9:
                    6f:81:26:50:f4:ec:c3:b4:1e:15:ca:7c:38:6b:22:
                    3e:43:de:81:c3:d9:0c:44:05:2d:c3:e4:03:c3:d9:
                    1f:26:ad:4a:7d:17:0e:29:30:89:59:78:a8:ca:ae:
                    38:59:24:8b:63:ef:ef:6d:37:8e:39:6f:8a:93:31:
                    d5:e3:c3:84:eb:df:65:44:6d:57:9a:23:c8:fd:b2:
                    b1:c7:8a:01:4f:7c:ed:4c:01:fd:14:fd:8e:fb:e8:
                    d5:c4:bd:17:c6:25:19:b4:a9:92:2a:bf:2f:87:d9:
                    07:53:80:4f:78:a3:0a:28:86:e4:6c:d2:ce:b4:b6:
                    74:ad:9a:5b:58:26:b4:07:42:b2:d8:6a:98:46:93:
                    e8:fc:12:c6:aa:fe:5c:7e:2d:1e:03:12:cb:67:5a:
                    57:0d:6a:0b:ae:fd:c7:4f:23:df:47:f0:76:7c:2b:
                    08:37:fd:8a:52:48:69:3f:a0:c5:65:cd:9d:c4:34:
                    21:60:db:3e:48:4b:ec:34:e8:f6:e3:5f:b3:fb:55:
                    48:1a:a6:01:20:e5:45:36:f7:8d:3c:d6:1a:ea:0b:
                    63:61:4c:86:87:40:03:8e:72:4e:1e:d4:cf:65:d6:
                    4b:4d:ba:0b:c7:02:70:08:37:db:08:3b:68:ed:eb:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:98:16:40:23:F8:40:B4:85:F9:5C:23:79:1E:0C:6F:1C:85:CC:0E
            X509v3 Authority Key Identifier:
                keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9a:09:60:bf:dd:bb:9b:4b:b5:c8:3b:5f:b6:b2:1b:ec:a1:
         9e:68:c3:6c:a9:b7:a7:52:e8:d3:22:96:73:f1:e1:f2:0a:b4:
         2d:03:89:94:72:dc:d7:34:ba:5a:48:5c:3c:95:40:09:23:21:
         67:c2:21:8f:02:dc:62:df:4b:b0:0b:aa:69:b3:0a:9a:8d:d4:
         0e:6b:5e:40:83:8c:16:0f:30:bf:c3:3a:81:4d:c1:54:ed:f4:
         82:f5:b9:cc:fe:ff:e0:ba:1f:be:d7:e0:7f:ae:e6:b9:9c:b8:
         5c:2d:5f:22:5c:2a:22:18:1a:8f:c0:cc:df:81:c6:67:30:96:
         39:f9:5d:74:41:5f:74:38:88:07:5e:3d:74:05:37:db:2b:6d:
         6b:73:41:57:60:f1:69:21:e7:82:21:6b:c5:75:b0:f7:16:2d:
         20:10:e5:23:e0:71:12:fe:ac:dd:6a:8e:06:1f:43:08:3b:2f:
         88:3e:1e:62:df:00:31:4c:e4:c6:25:a4:e5:40:3e:f2:5d:da:
         cc:f6:93:e0:7c:24:7d:5a:53:52:64:5d:6e:4d:8e:67:cc:0f:
         60:26:37:ea:f0:ba:f5:57:7f:8c:50:55:25:fd:69:cd:ef:a9:
         fa:88:7a:86:5c:52:30:23:a1:9e:ee:77:cc:0b:26:6c:9c:f5:
         e2:e9:c0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:40:10 2025 by rpki-client