Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
File:                     V0AEDht6Uy3SrsIuk6YisuGzve8.mft (raw, json)
Hash identifier:          G24191yZKRDy4ElPlE+eepE/ZXsilnjxuj2tVAqHW4o=
Subject key identifier:   0A:B3:ED:41:EC:BD:B1:FC:51:D5:5D:3B:77:6E:64:2E:80:B8:B4:81
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Certificate issuer:       /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial:       019785B451FB042ED4CD9237B398D2E6E6D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
Manifest number:          152D
Signing time:             Thu 19 Jun 2025 01:01:16 +0000
Manifest this update:     Thu 19 Jun 2025 01:01:16 +0000
Manifest next update:     Fri 20 Jun 2025 01:01:16 +0000
Files and hashes:         1: V0AEDht6Uy3SrsIuk6YisuGzve8.crl (hash: ErInD/eJq6Jscd4P7eR7A4Ly5ohI1AUhUtF+Y/S6yMU=)
                          2: wjijn454ptb7YjSwbgYustwNzJI.roa (hash: q85TNLC9Fv889V7DCE+ssvZg83i29aUc5JCe0NjjzpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:85:b4:51:fb:04:2e:d4:cd:92:37:b3:98:d2:e6:e6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
        Validity
            Not Before: Jun 19 01:01:16 2025 GMT
            Not After : Jun 20 01:01:16 2025 GMT
        Subject: CN=0ab3ed41ecbdb1fc51d55d3b776e642e80b8b481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d4:2d:c4:b6:55:fd:23:70:65:61:e5:6e:1f:
                    f6:ae:c4:2f:48:1d:d0:f6:11:23:38:0c:46:ca:d6:
                    f4:ae:de:44:66:0c:f8:6a:cf:86:f9:16:59:c2:cf:
                    8a:e0:9e:c5:76:42:18:7b:79:12:8b:52:ef:c1:92:
                    67:92:1c:dc:dd:96:c0:65:d0:a6:cc:29:03:2b:aa:
                    56:34:44:45:05:0f:bc:0d:94:1a:2f:30:40:e1:4b:
                    aa:68:dd:12:02:bc:fa:25:df:1b:64:8d:fe:67:15:
                    25:0a:06:aa:8d:c4:76:a4:4d:09:14:e1:d0:b5:2e:
                    ae:c9:82:86:40:ed:f1:8e:a8:5f:93:47:de:fd:4d:
                    80:e1:1b:f9:de:7a:9f:f5:46:2a:52:cb:81:16:4e:
                    54:c7:3b:00:d7:63:94:de:1d:f0:2c:7b:66:c6:03:
                    aa:41:03:ef:21:2b:b7:c5:12:13:9a:f4:35:a8:11:
                    5b:87:15:1a:73:38:db:23:40:52:2a:aa:93:c2:1e:
                    9b:f2:a2:69:80:e1:e5:ad:a1:2d:9f:bc:3c:c4:79:
                    40:de:bd:2e:d5:89:1d:40:bd:c4:79:19:30:41:e4:
                    d3:ae:3a:ba:66:59:9c:fb:9a:26:7b:c4:fc:ae:68:
                    05:70:c6:ac:81:00:3b:13:8a:7a:17:19:05:b9:e5:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B3:ED:41:EC:BD:B1:FC:51:D5:5D:3B:77:6E:64:2E:80:B8:B4:81
            X509v3 Authority Key Identifier:
                keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:85:87:38:da:ae:a6:c0:a3:24:af:f3:d2:ae:07:bf:cf:a1:
         de:81:7a:8e:4d:a0:1c:61:01:9c:dd:5a:b1:17:55:6f:8d:16:
         17:87:09:0a:c7:a0:26:fc:49:85:28:d3:44:65:38:85:d0:77:
         b6:65:c0:42:df:ea:e9:f5:e0:35:6b:6f:da:f4:ff:13:bb:bb:
         ff:66:4c:16:08:ae:a2:ce:cc:4e:c6:80:d2:7a:9e:00:37:1c:
         1f:7d:35:27:60:bb:4a:d6:e0:58:29:53:ed:3e:c4:3e:b0:07:
         4d:70:51:56:8a:56:03:92:aa:11:7f:a1:62:d1:11:0c:0c:f0:
         23:09:ec:b6:5c:b0:40:84:85:df:dc:d5:a2:8e:ed:20:70:26:
         4d:65:04:75:56:6a:e5:4d:bb:a9:92:e5:95:1d:fc:b3:65:a6:
         f1:09:51:fe:ef:a9:a6:20:1a:ad:82:a8:91:21:37:36:6d:93:
         40:66:40:0c:e8:1c:cd:92:72:ef:df:f9:b4:c1:1c:a9:5f:30:
         1a:16:6c:b7:a7:90:88:b4:4e:e1:f9:a9:e0:79:93:e4:fd:30:
         3f:ce:b3:19:33:c6:23:69:11:3d:93:92:58:45:a4:32:7a:b4:
         c8:1d:22:99:51:3c:32:97:3b:76:31:06:9b:dd:09:33:1a:9f:
         bb:ce:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:07:20 2025 by rpki-client