Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
File:                     rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json)
Hash identifier:          J5StkLLvF7j67qByjnrpzhwX0Y+ogkQyhfEirie3DG8=
Subject key identifier:   B5:79:91:59:6D:8F:F4:3B:9D:3B:18:CA:51:29:96:9C:08:33:C1:2E
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Certificate issuer:       /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial:       0197500F0864EF38C37FF5AC4F70BC36D1B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
Manifest number:          01F6
Signing time:             Sun 08 Jun 2025 15:00:51 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:51 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:51 +0000
Files and hashes:         1: C4fkDspID27_2W7uJ0bDWTiMbsI.roa (hash: IPmvbCiP1dYquC+xxAe/aHEwDNf0L9S57sM644oyMl8=)
                          2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: 3aRajByWn3y39El+FHNL8SbbyS5cVU3LZGS2WqBlKj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0f:08:64:ef:38:c3:7f:f5:ac:4f:70:bc:36:d1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
        Validity
            Not Before: Jun  8 15:00:51 2025 GMT
            Not After : Jun  9 15:00:51 2025 GMT
        Subject: CN=b57991596d8ff43b9d3b18ca5129969c0833c12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:4e:52:61:a0:64:f9:3d:79:de:d7:5c:6e:
                    c9:3d:67:c3:e2:04:28:9c:ff:ec:f9:36:0f:5c:30:
                    56:fe:2e:28:cf:94:e5:90:cc:0f:0c:e9:e2:66:44:
                    6f:36:21:cc:9f:de:fb:86:70:fc:89:13:e6:7c:d4:
                    90:cd:59:02:02:8f:99:ab:58:72:e6:7f:e7:df:e9:
                    b1:25:e3:5e:69:f3:be:8f:6b:d3:a3:8f:b7:2b:2a:
                    2d:12:04:b2:3e:59:f4:94:dc:05:ea:47:9e:3a:ce:
                    82:d2:ba:0c:6e:cc:67:9d:4a:63:13:95:1c:7b:b0:
                    1b:80:c4:b1:a6:41:c6:26:18:cd:f3:16:0f:f9:00:
                    b9:28:c3:15:7b:8b:d6:15:87:ab:39:5c:6d:eb:da:
                    e2:fd:f3:de:c1:3e:cf:14:cb:73:96:3b:84:3f:46:
                    a6:a8:48:fe:02:19:77:83:4a:8f:c8:4c:d1:24:83:
                    f7:ee:b2:50:07:3f:fc:18:cc:32:59:2e:d7:28:52:
                    81:dc:62:d2:d9:d6:58:f7:97:47:0b:29:f0:58:23:
                    45:7a:7a:d2:f6:b9:db:4f:cd:ab:b4:b6:f8:f9:15:
                    fc:c7:02:1b:36:95:34:bc:dd:f6:f5:8e:49:34:88:
                    83:30:87:eb:b8:18:fc:a9:4c:99:a2:4e:94:1d:d8:
                    b7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:79:91:59:6D:8F:F4:3B:9D:3B:18:CA:51:29:96:9C:08:33:C1:2E
            X509v3 Authority Key Identifier:
                keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:08:44:aa:8e:48:99:12:a4:8a:9c:82:65:99:a6:7a:70:68:
         42:80:84:ab:11:31:98:b0:67:ab:8e:b7:5d:0f:e3:9b:74:1d:
         c5:ef:ac:e7:dd:f6:6d:96:11:d2:0f:76:fb:cd:2a:66:5b:1f:
         b9:72:1d:50:be:d2:79:1a:d6:b3:3b:8e:38:89:51:45:56:df:
         89:ce:7c:c8:1a:bb:97:eb:38:fd:90:dc:e1:7d:b6:13:5c:63:
         cb:d5:d8:b3:7b:0d:ee:90:49:cd:7e:1f:be:fb:ae:fa:15:da:
         05:61:c1:88:d4:fa:b5:40:d1:5d:48:a6:b2:9b:d7:ab:42:b4:
         e9:48:93:47:b7:37:b4:c1:ec:1b:64:f1:c9:1c:15:c3:8c:bd:
         f3:67:fb:ce:9d:1b:c6:76:3c:c3:28:4c:7e:06:56:a7:e5:79:
         57:61:3c:18:68:27:d9:a8:bb:6b:86:77:b5:1d:2d:96:2c:dc:
         0a:27:79:1a:40:c7:82:76:88:b4:94:12:24:2c:bc:f5:62:2b:
         36:27:50:1b:d9:74:6b:e3:42:9b:5f:d5:0c:73:a4:8e:e1:31:
         19:6b:80:87:62:60:0d:0a:3f:59:06:87:bb:66:78:c9:5f:a9:
         8f:5a:ee:91:4f:23:c4:6a:86:88:c1:49:6e:b2:61:90:77:2f:
         b3:d1:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:24 2025 by rpki-client