Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File:                     g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier:          /Lta/GhJkNr3a9qf6SJrtgR8rrQBIpXjcOGCoT7uaOg=
Subject key identifier:   7F:39:21:3A:08:B8:15:73:0B:58:CD:72:44:F4:3E:AB:FF:29:BB:ED
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer:       /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial:       01976D744ECADA616A623730F28BA336526B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 08:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:28 +0000
Files and hashes:         1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
                          2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: QtvsfN9fB+bAnfXqWahP6Cvy492iIHWoSs4LuodUe8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:4e:ca:da:61:6a:62:37:30:f2:8b:a3:36:52:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
        Validity
            Not Before: Jun 14 08:00:28 2025 GMT
            Not After : Jun 15 08:00:28 2025 GMT
        Subject: CN=7f39213a08b815730b58cd7244f43eabff29bbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:d9:6c:11:10:8d:2a:28:54:5a:fd:c0:6a:
                    01:97:c8:2c:75:87:94:73:b2:bc:2d:8c:41:88:a0:
                    ac:ad:29:f7:93:33:63:8c:e9:77:ce:d5:10:5b:64:
                    77:d9:16:ce:d6:86:c6:b1:5b:23:fc:37:af:88:5f:
                    0a:80:fe:e5:cd:ed:2c:6c:a1:13:08:83:ed:a2:12:
                    a4:a8:fb:2e:5b:72:2f:a4:be:b2:1e:2b:0b:89:fa:
                    7d:73:21:54:9a:a0:96:ff:7a:d0:d1:bc:2f:4e:b0:
                    b2:d1:41:ed:5e:24:a6:b0:09:c5:2e:73:9f:b9:7d:
                    ea:01:6a:ca:3a:d1:00:7c:04:64:0f:c0:76:48:1b:
                    9f:46:fc:0a:9d:f1:2a:ec:ce:c5:45:b0:08:ab:7c:
                    a2:2e:ef:75:34:e4:fa:25:35:c1:b6:7d:de:22:9d:
                    75:c8:1a:a0:32:2d:1a:31:5c:12:aa:a7:02:f2:f7:
                    e9:21:42:88:62:17:f8:14:e5:6c:c2:81:8e:b9:ac:
                    66:51:2b:1e:0f:00:6d:96:35:69:2d:85:4a:99:3c:
                    e3:5e:55:a3:2e:93:be:ac:10:16:66:c1:76:b5:b3:
                    72:c8:b1:a2:85:e7:eb:f1:c1:a2:56:99:2a:47:7c:
                    77:d9:66:2b:a3:82:fd:23:d6:a9:d9:f7:3c:83:c4:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:39:21:3A:08:B8:15:73:0B:58:CD:72:44:F4:3E:AB:FF:29:BB:ED
            X509v3 Authority Key Identifier:
                keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:be:16:00:1a:79:a5:ff:9a:ff:32:29:8d:5d:c9:57:7e:4d:
         32:c8:ed:2b:fd:03:33:d9:54:a1:2d:15:cc:d5:72:e8:51:9f:
         cb:0b:21:73:b8:5c:01:5f:c4:f0:e7:4e:3f:5c:ff:46:d2:b4:
         fa:bd:81:5d:06:d5:ab:d1:99:b7:1c:16:68:38:23:93:33:eb:
         17:a6:6e:31:be:ea:7b:9e:27:1f:ef:d2:1f:76:f6:72:af:41:
         d6:c9:c0:e8:5e:0b:16:95:86:fe:fb:15:c8:30:b7:9e:eb:40:
         4b:65:80:3a:21:e5:ba:b6:63:9c:49:7a:9b:37:2c:4d:3d:50:
         cb:1a:72:04:33:fc:3e:48:56:b7:ef:3f:9b:70:16:4e:69:03:
         f0:7a:27:78:4e:e1:c9:7d:ee:61:97:4e:25:eb:fb:98:ca:da:
         cf:25:54:cf:eb:3b:49:c2:37:9f:c4:e7:5a:f7:90:6e:78:a2:
         5a:68:b3:84:48:3b:e7:e4:50:ee:cd:96:da:ee:80:fc:05:ca:
         a1:c1:c4:e0:0d:ab:fc:e8:d0:f7:67:6e:1c:47:6f:37:21:a3:
         d1:7e:0b:4c:fc:9d:4a:06:75:46:bd:47:cd:20:80:9b:bc:65:
         07:58:98:40:31:59:3e:65:38:83:94:df:f1:05:96:4c:64:f5:
         58:40:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:08:18 2025 by rpki-client