Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
File:                     sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json)
Hash identifier:          hzNACdXxvw2X2E4Ic1celVCJk3a1epexKTk5JSbHWfA=
Subject key identifier:   0F:1A:ED:38:71:17:10:45:62:82:AA:1B:76:36:5B:30:03:06:5A:53
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Certificate issuer:       /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial:       01976EBDF847ABCC36F91134C86D4B363720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 14:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:32 +0000
Files and hashes:         1: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (hash: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=)
                          2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: jgXYFPwWk3FHnEO8DOBBL14PEGYuNzn8wNEREt4pbOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:bd:f8:47:ab:cc:36:f9:11:34:c8:6d:4b:36:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
        Validity
            Not Before: Jun 14 14:00:32 2025 GMT
            Not After : Jun 15 14:00:32 2025 GMT
        Subject: CN=0f1aed38711710456282aa1b76365b3003065a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1e:13:7a:4b:ae:c5:5e:f0:f3:54:50:c5:f6:
                    d4:0e:47:29:3b:61:d4:3f:70:cf:20:fe:52:d1:96:
                    ca:c6:d4:28:72:86:1a:59:74:b2:81:02:ff:61:23:
                    52:15:7a:7b:b9:fb:a4:80:b8:92:55:b7:86:61:14:
                    fa:46:d4:9a:aa:f8:1f:90:a1:4d:5f:0d:ca:22:a1:
                    15:8c:9b:68:07:6f:dc:78:80:58:b6:8f:1a:d6:2d:
                    5f:2e:6c:d2:aa:92:69:81:04:16:3e:0e:88:16:9a:
                    65:e2:5a:2f:fa:c8:fc:b7:aa:d9:af:72:81:41:10:
                    c7:a5:9f:fe:76:7a:d0:ee:5c:5f:fa:23:b6:82:7d:
                    ac:1d:77:23:d4:54:6d:6b:2a:ae:28:8e:bf:ef:63:
                    ff:7b:ca:e0:2a:33:a2:a0:27:f8:8f:f3:f5:3d:5a:
                    f8:40:b7:1d:aa:5b:c2:95:0d:d2:29:65:54:5c:57:
                    46:66:1b:0b:d2:5d:39:16:a4:6d:a0:2c:da:18:3b:
                    cf:90:e1:53:cf:90:7c:fd:04:e6:1f:d7:0d:08:71:
                    00:18:74:26:33:af:9e:2d:f6:7d:ae:00:be:ff:27:
                    d3:52:6a:fc:25:86:3f:c7:ac:18:02:6f:55:62:c5:
                    d2:22:ab:74:0b:b2:a7:23:19:5d:3a:94:2f:2b:c5:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1A:ED:38:71:17:10:45:62:82:AA:1B:76:36:5B:30:03:06:5A:53
            X509v3 Authority Key Identifier:
                keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c9:27:7f:69:42:62:a5:4a:35:a1:aa:e4:ef:c9:ab:8a:e2:
         15:79:20:bb:1c:3c:5a:40:48:89:6f:f1:0e:10:bd:10:17:28:
         82:9e:fa:25:12:ae:0f:99:18:c0:40:43:43:d8:e4:c6:89:0b:
         15:86:80:bd:a3:40:a7:1e:37:4f:ea:6b:1d:6a:3d:30:63:f1:
         f2:80:2f:b0:7a:da:54:90:30:7d:18:5c:96:ed:ff:cd:69:4f:
         ab:7c:9e:e0:54:a3:92:43:94:1d:d3:6a:d6:77:0e:c3:c0:e8:
         b9:9d:07:39:b1:e7:c5:95:03:67:3d:29:cf:27:57:c6:3b:54:
         dc:eb:df:48:0f:ab:f8:0a:75:6f:d5:f9:e0:a1:c0:49:cf:74:
         7a:d7:59:f1:f0:23:d1:0e:ed:55:9a:4c:e7:04:45:7b:20:76:
         12:4d:5b:cf:51:62:e9:d6:e7:f2:67:60:65:b5:23:8a:57:5e:
         24:ef:fb:17:eb:cc:7b:3a:4e:d8:bf:2c:0f:38:73:87:53:9a:
         fe:ba:f6:83:e6:3d:38:43:f2:d2:2c:ae:1c:07:1e:09:2d:db:
         59:34:9a:23:a6:84:c9:49:73:ce:c5:19:cc:a7:4d:ea:f5:89:
         48:90:80:09:7a:ea:89:5b:3d:1b:ab:1e:8c:ae:ac:f4:11:18:
         ba:f6:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:14:57 2025 by rpki-client