Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File:                     0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier:          hZNRXvkEZbNr6dq6y6sEKXXedMW91AhWKHLEbPTNQ30=
Subject key identifier:   54:FD:0E:70:8E:8D:0B:12:DE:65:11:09:3A:AD:D0:C0:41:E7:DF:71
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer:       /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial:       01974B1F37C88B9FE9A77A131D5D84D6BCDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 16:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:26 +0000
Files and hashes:         1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: 17YxRDxKIDW28vAKqwtP5V3T/yxbZnArYsWxLFuTAI4=)
                          2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=)
                          3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=)
                          4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:37:c8:8b:9f:e9:a7:7a:13:1d:5d:84:d6:bc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
        Validity
            Not Before: Jun  7 16:00:26 2025 GMT
            Not After : Jun  8 16:00:26 2025 GMT
        Subject: CN=54fd0e708e8d0b12de6511093aadd0c041e7df71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:0b:0b:d5:ad:35:24:b1:1c:10:92:31:6c:
                    06:28:91:fb:da:2e:42:e6:13:e3:28:37:ee:fe:9f:
                    50:16:96:25:fa:a7:a3:f0:a9:18:a3:57:90:51:61:
                    99:bf:78:88:71:00:23:ac:15:de:c9:63:e3:43:0d:
                    96:a1:ce:42:f8:7b:26:b1:a2:42:f9:b4:91:01:cc:
                    37:0b:d2:4b:0b:9a:16:d1:e4:57:f7:7b:96:c9:58:
                    a0:ea:c5:d7:da:81:c0:65:4f:56:54:cd:fd:d4:24:
                    ee:4b:1d:18:e3:e1:91:89:5d:a3:5d:e9:99:94:3e:
                    04:d7:1f:e4:cd:b9:d7:16:6b:f5:8f:3e:96:e3:e7:
                    93:66:c9:58:91:c7:87:c9:fb:75:05:0f:4a:2f:dc:
                    39:77:94:fe:6f:d2:50:0a:eb:e6:00:d5:83:91:c9:
                    b1:90:ce:fe:87:43:48:3f:e8:f5:93:89:6c:dd:9d:
                    49:67:cb:ab:16:33:71:b6:10:0f:d5:6d:41:32:d9:
                    9f:fd:33:e1:d6:ba:26:76:f8:95:45:a1:39:02:11:
                    31:4b:e9:53:97:a3:64:78:1e:dc:a7:3e:33:fd:c8:
                    63:a9:44:4f:57:8c:d4:22:1b:1a:9a:e2:7b:16:45:
                    1c:f0:d4:be:f1:bd:33:ac:bc:40:6e:b7:ae:3a:d3:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FD:0E:70:8E:8D:0B:12:DE:65:11:09:3A:AD:D0:C0:41:E7:DF:71
            X509v3 Authority Key Identifier:
                keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:84:e0:1d:1d:c6:42:5d:05:7e:23:41:6d:fa:c9:35:1c:31:
         39:55:0d:ed:85:e5:73:45:d1:93:f2:28:47:0e:0b:03:73:06:
         00:ef:c4:84:0c:45:6f:75:cb:8f:48:cf:f0:3f:1b:fd:b5:0f:
         03:69:71:7c:ff:ce:64:8f:36:dc:29:53:ef:17:5d:d0:c2:45:
         b4:60:0c:75:80:76:9d:c1:1e:b5:ee:31:cb:89:14:36:2a:44:
         e0:b5:c1:c0:2e:12:31:8b:6d:d9:b8:41:1a:57:9b:31:a0:87:
         ec:89:e6:98:fb:86:30:a1:7c:5d:33:52:a0:01:d2:1f:51:d1:
         03:b2:de:83:9a:2e:50:28:12:d0:50:ec:62:0e:de:99:34:eb:
         1b:a2:6a:00:d9:35:a4:08:1b:63:b1:e9:d8:f3:80:be:59:d1:
         78:60:77:e3:1d:1c:2c:44:ba:70:7d:1b:67:f3:24:39:47:a5:
         21:51:a1:33:b4:bb:0d:05:a3:86:ea:66:02:6e:12:60:58:e6:
         93:be:27:0d:54:ca:81:86:21:07:9e:fa:f0:4f:7f:7b:e4:f6:
         d9:42:eb:c3:2e:9b:c0:ec:1a:a0:fe:e6:5b:d8:ed:c9:15:0a:
         ac:98:b5:f7:8f:89:6f:36:c3:fb:17:71:60:d4:65:4d:a9:5b:
         57:c5:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:25:09 2025 by rpki-client