Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File:                     EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier:          GoH+SzQtAu3W/QdH/lqKr8am5WOFWVhAHJa4USo2Toc=
Subject key identifier:   26:CC:5C:D9:AA:58:9D:BD:6A:E7:6E:12:F5:4E:2B:24:44:A0:D2:0F
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer:       /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial:       01976C61CED78FF325548F678B2B5FBBC91D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 03:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:38 +0000
Files and hashes:         1: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: 7KpHb+LepNvTpdpRy8xs7ulHm5z/T0DJyP1++VXsQCg=)
                          2: NmHfVOAq428sUSSIRO7nZKCwlXg.roa (hash: 7cV2xNe1q0M48rtVit0uJemlcGCJGSiYbHDZVWgEp6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:ce:d7:8f:f3:25:54:8f:67:8b:2b:5f:bb:c9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
        Validity
            Not Before: Jun 14 03:00:38 2025 GMT
            Not After : Jun 15 03:00:38 2025 GMT
        Subject: CN=26cc5cd9aa589dbd6ae76e12f54e2b2444a0d20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d2:fe:f9:06:d9:2c:d3:3a:ca:08:c6:dc:d0:
                    5e:95:b0:7c:0f:d2:c3:48:e4:16:7c:a2:7f:2a:fb:
                    a0:c8:70:45:1e:e5:a3:7e:af:aa:f2:c5:64:3d:0b:
                    80:34:66:e0:ff:d2:2c:ed:ff:ef:96:e9:f3:b2:a4:
                    e0:78:79:a3:5a:f7:fe:2c:49:0d:c1:3b:a5:a3:cf:
                    d6:35:90:3f:26:5c:b6:ba:a3:9e:0d:96:fb:d3:2f:
                    5d:7f:e6:60:e9:2d:75:ca:c1:71:8d:f2:81:66:50:
                    04:2a:0e:64:89:31:a6:ae:ae:98:34:c5:54:15:1c:
                    68:1e:ab:d3:86:a6:b5:47:5d:21:d3:9c:cd:a1:86:
                    02:c9:c3:67:07:f4:19:89:aa:05:1e:38:ad:a3:9e:
                    24:d5:47:86:fa:41:25:3d:db:2a:da:3c:51:20:a1:
                    87:74:7c:cb:01:e1:2c:b7:da:fc:72:f0:53:c4:68:
                    d7:b3:44:f1:8e:1e:84:7d:eb:3c:66:bd:80:0c:a7:
                    64:65:34:20:35:6e:1d:6a:f6:e6:df:d1:ee:33:65:
                    ad:c7:26:14:37:08:7a:58:d3:58:06:e6:1e:8e:5a:
                    a7:87:3d:f6:15:c2:16:b5:0b:a8:03:47:ff:6d:2e:
                    7d:94:99:10:bb:e0:d9:36:a4:b1:93:f9:ac:a2:91:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CC:5C:D9:AA:58:9D:BD:6A:E7:6E:12:F5:4E:2B:24:44:A0:D2:0F
            X509v3 Authority Key Identifier:
                keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1e:b6:1a:b9:d5:f3:8c:a9:34:be:c7:87:be:6a:60:3e:8d:
         f3:c0:e5:17:5a:c2:e6:7a:75:82:7d:10:f3:07:10:a0:35:00:
         bd:90:36:8f:31:45:eb:1c:22:53:ce:dd:8e:fc:04:2c:55:f5:
         f8:cf:c3:dd:60:10:d5:af:07:e4:f9:9f:2d:bd:a1:03:1a:39:
         6a:60:b5:9f:c7:9c:29:83:74:e6:77:7f:cf:2c:99:62:c2:c6:
         b1:2c:62:3b:42:88:38:69:a4:28:f6:e3:6b:66:91:fa:bb:89:
         19:0b:f1:0f:4e:bd:07:1b:8c:00:90:13:e2:44:1f:d3:47:36:
         dd:cf:22:a9:a2:43:85:8f:5e:e2:71:ed:93:89:90:26:16:e4:
         c2:05:20:00:e2:76:1e:c2:e2:9c:f9:bd:15:f0:55:07:89:1c:
         3b:3a:e9:b7:75:24:4c:30:3c:c4:70:c9:67:2b:0e:0d:b5:df:
         77:33:a0:fe:71:a1:8a:f4:88:9c:0a:30:90:7f:01:2e:af:bf:
         17:18:10:d9:98:58:e5:36:57:d4:ee:83:4d:8c:57:b4:1a:cd:
         ff:15:a3:e6:c8:71:7e:ec:dd:a9:0c:ef:bc:53:de:7f:08:85:
         f6:40:ef:79:ef:9f:cc:0f:57:5d:0f:ef:39:d1:36:49:1d:27:
         e3:ba:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:31 2025 by rpki-client