Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
File:                     IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft (raw, json)
Hash identifier:          jhhZxvMn1sQ18QYJC62yEsPuNtxaArF0YUANzwgUtBI=
Subject key identifier:   9B:E9:20:5F:9D:5B:45:61:15:A8:43:BC:A5:F8:68:20:A6:4A:F5:58
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Certificate issuer:       /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial:       0197752E306BD5F0C231236812DDA6F2C394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
Manifest number:          159F
Signing time:             Sun 15 Jun 2025 20:00:50 +0000
Manifest this update:     Sun 15 Jun 2025 20:00:50 +0000
Manifest next update:     Mon 16 Jun 2025 20:00:50 +0000
Files and hashes:         1: GJD8bfj7CDyDTZI2kUpgDK-LxFE.roa (hash: PT10MFBUB5fp5Yrzzf9K0jem6hIintZDoPzR+wZ8gys=)
                          2: IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl (hash: +XSah+Hg1daAHdwXpZLz65GcF2fgTh4cmUmywsIO/QA=)
                          3: V7WmFU14m96odb0vJ_cBmWZw2cs.roa (hash: g1WGH66JpNY1RGeN31ErEvWouzTCVBle7InxeJwxaqk=)
                          4: n-WWUpjJ7MYMStLhmDALvV4BwNw.roa (hash: mz0mPhV6HwUBsMpmeR/WiaLr/mHYJW7gp7wvEAXMlhc=)
                          5: uNRCg8RCGt-29v-27BZf_7lsI44.roa (hash: m/0/iSBb82vllm7VEgSPbCCwHT8ih3iEdCYjt2pJKGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:2e:30:6b:d5:f0:c2:31:23:68:12:dd:a6:f2:c3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
        Validity
            Not Before: Jun 15 20:00:50 2025 GMT
            Not After : Jun 16 20:00:50 2025 GMT
        Subject: CN=9be9205f9d5b456115a843bca5f86820a64af558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:32:74:f4:32:2d:53:ec:54:91:62:2c:e4:d8:
                    aa:d8:c7:f2:49:4b:43:27:43:08:ac:37:30:c8:43:
                    f9:d2:bb:4f:2c:ce:e7:9f:94:fd:12:bb:67:4b:cf:
                    07:da:f9:b4:80:ca:72:ab:b6:79:c4:c9:49:cc:03:
                    f4:ba:6e:57:8a:04:7d:0c:b0:de:77:6a:63:5a:7c:
                    79:b6:e9:26:31:19:8d:c7:f6:c9:58:a6:3f:68:fa:
                    11:c9:95:86:57:66:c4:05:da:f7:a4:2f:dd:65:85:
                    3d:5f:98:fc:7c:a4:86:5a:33:2f:10:19:6c:de:47:
                    63:df:48:ff:57:cc:f9:28:b9:7c:bc:cb:12:05:80:
                    43:43:f1:3e:e4:42:73:9a:09:0d:e6:cc:c2:e9:78:
                    6b:4d:5b:d7:f6:cb:42:2a:fd:5c:3f:c7:72:13:af:
                    ec:09:d8:b1:6d:fb:e7:21:4f:d3:00:76:f5:35:5b:
                    d0:54:8d:80:d2:ae:9c:97:51:2f:2f:be:a0:78:be:
                    9c:1a:29:38:24:44:89:54:96:14:8f:31:f1:5d:a9:
                    7b:c6:7f:03:53:be:f8:1c:f3:0f:4c:d1:38:30:70:
                    01:92:e1:04:d8:72:64:66:65:9a:29:c4:c6:2a:44:
                    f0:5f:f6:5c:06:e2:63:28:77:0c:c1:ff:e1:d1:3c:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:20:5F:9D:5B:45:61:15:A8:43:BC:A5:F8:68:20:A6:4A:F5:58
            X509v3 Authority Key Identifier:
                keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:cf:46:3c:ed:e4:dd:93:1a:14:1f:7e:79:7e:a8:5a:2c:
         16:9b:27:c9:16:c7:d6:b9:8d:c5:e9:96:04:d2:70:a9:83:05:
         c3:c5:a3:8a:be:bd:a5:f2:24:1a:83:5f:2b:26:30:43:52:2f:
         3d:0b:c2:ad:ee:25:d5:c0:a3:d4:17:47:bc:08:ba:03:95:be:
         42:12:fc:e5:7e:bd:5a:dd:e9:fd:d7:d6:59:11:95:b4:e6:f3:
         de:67:16:fc:74:03:ed:94:2f:05:fd:44:4f:97:aa:28:76:61:
         0c:25:18:22:50:89:ae:8d:7a:75:b6:1f:17:12:4f:d2:60:37:
         2e:ce:f9:85:e3:1c:32:01:3e:a4:d0:65:ca:4e:e8:f9:45:0a:
         c7:94:da:67:d1:8e:c5:6d:63:03:99:e3:8f:b9:b0:d1:69:d9:
         50:29:4e:67:aa:4a:ca:46:27:ee:b4:92:b2:5f:bf:5c:cc:82:
         e2:fd:31:50:e2:09:d8:c8:22:ad:b7:9d:b9:37:0e:56:74:7d:
         00:c4:09:0d:22:5f:f5:84:bd:98:78:ed:13:df:dc:71:4c:da:
         29:bc:62:bd:bc:de:8a:c5:1d:ea:d8:bb:29:85:e4:96:33:5d:
         1d:98:59:3a:85:c8:8e:d9:f4:bb:82:ee:73:50:35:da:24:40:
         20:cb:76:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:31:53 2025 by rpki-client