Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File:                     1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier:          KzYLOZdHpyP9VSvjNuyhbytgcCEDxk7UhLLbiBitjLs=
Subject key identifier:   0A:BF:A7:29:AD:D3:5D:88:9E:5D:F5:F8:BA:FF:21:B5:36:39:0B:55
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer:       /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial:       01976D7439CD20F4FC9CEF7F20BD5236DF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 08:00:22 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:22 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:22 +0000
Files and hashes:         1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: SmDhnUtQfQJ3hzCUr1groiM1oowxIvkY6qvAaUjZTQo=)
                          2: Rvoozr9-AEirIvl3H78yEjywI3M.roa (hash: C8PH+7JgTNI/2g3gAC+RhVDcD73858pmRmw+QrCbn9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:39:cd:20:f4:fc:9c:ef:7f:20:bd:52:36:df:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
        Validity
            Not Before: Jun 14 08:00:22 2025 GMT
            Not After : Jun 15 08:00:22 2025 GMT
        Subject: CN=0abfa729add35d889e5df5f8baff21b536390b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4f:5b:d1:e3:9e:12:a7:cd:b0:c4:05:a6:0d:
                    6e:72:98:ab:59:4b:fb:d4:9a:9e:d7:e6:23:cf:28:
                    03:bb:9f:e1:c0:12:09:20:01:5a:d9:5c:f9:22:24:
                    dd:fa:31:9e:ff:8d:13:41:bc:89:55:d2:e0:66:03:
                    6d:e7:25:6f:21:19:ea:04:4b:b9:1a:71:4a:4f:1e:
                    5d:34:51:77:f3:8d:d4:04:71:9f:33:0d:37:75:a5:
                    b1:45:ad:27:74:e1:fd:07:e1:e7:a9:46:aa:b2:43:
                    2a:08:17:51:a7:fd:65:24:5f:f1:c9:9b:15:64:5e:
                    eb:98:f1:89:f4:e9:b2:4f:c7:d1:56:fc:4c:c9:42:
                    96:a8:cc:5c:65:d8:89:0c:46:19:8d:0f:50:2e:d9:
                    4b:c8:0d:83:21:d2:1d:f2:37:d3:e0:14:c7:ad:ad:
                    28:a5:de:17:78:ed:4f:26:a9:db:b6:91:9e:39:f7:
                    65:af:1d:b7:b2:ce:50:ae:98:81:e3:9f:1f:80:b8:
                    77:96:97:96:93:c7:86:fc:51:b1:22:97:79:e2:13:
                    2a:bc:36:7d:d6:9f:e8:ab:fa:72:1e:f7:99:58:8e:
                    65:0a:95:49:8b:1d:a0:51:ae:23:74:f0:36:0c:54:
                    9b:f7:2a:8d:9f:66:d7:69:79:11:97:30:43:c7:d1:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BF:A7:29:AD:D3:5D:88:9E:5D:F5:F8:BA:FF:21:B5:36:39:0B:55
            X509v3 Authority Key Identifier:
                keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:48:26:6c:bd:bf:86:60:10:ee:dc:3d:ae:0a:74:ac:84:4a:
         ba:ae:d4:c8:1b:17:16:d1:5b:91:56:d6:ae:c8:84:f8:a7:c4:
         23:7c:2d:3a:cf:c7:0b:ea:5f:b9:20:73:6a:7a:d0:be:83:3f:
         45:61:e1:0e:4f:95:37:bb:c3:fc:34:87:67:60:89:db:49:19:
         c4:ac:43:be:5c:16:55:22:46:a1:3d:65:2b:43:47:37:b6:7a:
         d4:8a:6a:20:4d:b4:0a:e5:70:7a:fa:1b:66:9e:28:1b:a5:c5:
         23:e8:d3:53:90:36:a7:58:cc:80:8c:6b:2c:5d:b2:f3:09:b1:
         5c:31:38:ce:69:e9:3a:fe:cc:b6:0e:e8:9b:49:5d:0f:11:92:
         7c:03:1f:f9:90:03:bc:82:14:f1:ee:a1:cc:7b:94:9e:cf:94:
         6a:38:5c:64:c8:6a:a3:b2:2a:05:ec:cf:52:92:ff:bf:87:94:
         b9:7d:26:9c:08:76:88:93:08:4b:ee:0d:5b:c6:a3:70:1e:0f:
         c4:ac:f8:65:12:82:e0:bf:74:18:f0:cc:a1:c6:51:7a:45:90:
         a0:3b:ed:bf:8e:70:44:ee:14:fb:dd:4f:26:56:d7:b9:4e:89:
         2e:1d:21:a0:04:3c:d4:06:c0:aa:25:aa:13:dc:cf:ef:ce:81:
         55:80:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:14:42 2025 by rpki-client