Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File:                     dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier:          718mQHCFRGz1aOSdpkrJlq8BuefVBa0h/T0DQWfJMiY=
Subject key identifier:   AD:E4:BA:F9:BC:71:FA:7B:1B:96:B6:45:75:78:29:E2:DD:DB:F8:97
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer:       /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial:       01976C98DBAE5479CD615BCD946A8766CFE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 04:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:46 +0000
Files and hashes:         1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: 8rhigW0lE1JG+riKihcSaQIAFxdS35AHLqVk9xKm8uY=)
                          2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:db:ae:54:79:cd:61:5b:cd:94:6a:87:66:cf:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
        Validity
            Not Before: Jun 14 04:00:46 2025 GMT
            Not After : Jun 15 04:00:46 2025 GMT
        Subject: CN=ade4baf9bc71fa7b1b96b645757829e2dddbf897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:3a:ed:3c:6b:29:f7:d5:c7:a6:c6:5b:e2:
                    30:46:a3:76:ff:75:57:16:69:6c:5a:4d:b0:52:c9:
                    05:57:1a:1e:cb:04:6a:c3:cc:46:ba:f4:3e:24:2f:
                    12:2a:5f:36:07:a7:a0:3b:ab:d6:69:90:7d:f7:a8:
                    15:2c:de:25:ea:fb:cf:ea:30:d5:04:fd:4b:f1:b2:
                    41:28:11:c0:4f:76:af:c2:34:b4:2a:8a:b4:3e:98:
                    05:ee:81:98:a7:96:33:af:5b:a9:ee:1a:bd:b1:75:
                    d0:d4:81:b0:76:b1:68:cc:62:5e:87:df:bf:df:5e:
                    c9:9f:e4:34:62:56:71:c1:60:86:6c:b4:21:51:aa:
                    e3:75:f6:ff:7b:89:c6:59:77:2d:b3:cf:0a:59:64:
                    7b:75:b2:db:6b:cc:2c:b1:51:cf:6e:ef:3c:3e:6a:
                    85:f3:9b:ae:17:13:c2:c4:70:69:29:bc:c8:eb:55:
                    5d:75:f1:70:92:1f:72:48:c7:c9:24:a3:2c:df:24:
                    19:a4:34:8e:65:9c:83:8d:4b:2b:a4:09:8e:94:3e:
                    2c:1b:66:4d:0e:ac:5d:1d:29:6d:7e:ae:31:b4:ca:
                    b3:a8:5e:2b:7b:7c:e4:42:8c:eb:ca:8a:93:95:d5:
                    63:de:db:fe:e5:95:b1:6e:25:e8:d4:87:11:26:83:
                    cb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E4:BA:F9:BC:71:FA:7B:1B:96:B6:45:75:78:29:E2:DD:DB:F8:97
            X509v3 Authority Key Identifier:
                keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:0c:af:2b:32:56:25:41:3b:08:37:b7:c6:9b:c0:47:15:
         07:30:e5:92:fb:50:f1:33:62:ff:69:3c:b9:77:ff:1f:32:30:
         58:c5:ca:16:e0:0e:4f:7e:36:1b:e8:18:4a:c1:e6:35:76:1a:
         9a:a1:4c:95:64:58:35:f0:c0:bf:b4:1c:7d:20:3a:d3:f3:62:
         70:24:d9:2d:22:0f:54:d1:44:a0:9c:05:97:dc:9c:40:65:00:
         ee:e7:f8:82:c6:13:58:42:b1:a6:a6:7a:2b:7e:08:1c:1f:42:
         2f:a6:47:d1:ea:5e:d8:14:c4:a3:96:ec:98:2a:c9:fa:25:22:
         bc:83:77:d6:1d:05:14:05:3e:a7:2b:46:fe:79:ed:4a:c8:89:
         c7:3e:44:41:1f:5c:6a:a0:c1:c6:9c:ca:4c:4b:24:6a:34:03:
         32:a7:7e:94:32:83:45:de:31:1b:e6:9e:04:43:57:4d:39:33:
         ce:1f:a4:88:6e:34:5a:d0:e6:52:39:59:22:ef:79:aa:47:84:
         17:c9:95:83:5d:99:0c:1b:ac:34:70:eb:bf:53:70:9b:14:b6:
         83:f9:6d:fa:8c:49:c6:3b:f9:f3:8e:90:c4:c5:f5:4b:8a:16:
         17:22:af:9a:8c:3f:d6:00:85:e7:08:63:47:96:d8:a9:1c:99:
         a5:1e:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:43 2025 by rpki-client