Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
File:                     dvMR7xWBoA5DfNcEtigayGIa_FY.mft (raw, json)
Hash identifier:          jPXO1up2KipQDOS3YuWsbCaPj0jmCrNg5eGQwXnssgw=
Subject key identifier:   AD:C2:CE:B3:F5:0B:F0:44:80:ED:E6:4F:D4:FD:93:AC:2A:03:3D:8B
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Certificate issuer:       /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial:       019769617E5E93F4239B273B7C862F3EF8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
Manifest number:          158F
Signing time:             Fri 13 Jun 2025 13:01:26 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:26 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:26 +0000
Files and hashes:         1: Q6cjkrSokxtUJmUsJvQ_7Hwg27U.roa (hash: m1XnL/411Yf9huGjfl9fr7l+U2VdNJkxGE7M3cXIn3c=)
                          2: _Bhg_0oqoTNSpwMzEcCpFnd46nA.roa (hash: AG0x4xC1l+R6ZCFoLMsVQeQ9AoJqN1cWLKxqvQ0rMIY=)
                          3: dvMR7xWBoA5DfNcEtigayGIa_FY.crl (hash: FWXJ3DqDswkmbzbAop2ocZsw446fF8lIPSvVmSDRt7c=)
                          4: gdPoGNVcOTxve9Q4-VpVufJk2tk.roa (hash: WuZzCuCA9L2ThwhAvWX+I1Ah6JPhfZ6ih/yP6XwGm+0=)
                          5: m7C4LK8pgT5lORZBsv-BS_VdFFQ.roa (hash: X3l+LpnL2+oK3trvHtfdrKfFth5mN5qj+aVKY9/H5Rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:7e:5e:93:f4:23:9b:27:3b:7c:86:2f:3e:f8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
        Validity
            Not Before: Jun 13 13:01:26 2025 GMT
            Not After : Jun 14 13:01:26 2025 GMT
        Subject: CN=adc2ceb3f50bf04480ede64fd4fd93ac2a033d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4c:40:2f:b8:73:f0:df:e1:36:44:c5:49:15:
                    14:9a:e7:52:77:58:80:dc:e0:76:9a:bb:0e:60:61:
                    66:7d:02:d7:af:c6:70:a0:b1:c8:b2:26:e0:79:5f:
                    a7:0e:4a:42:89:25:6d:c9:90:64:a5:de:79:d4:8e:
                    fc:48:ad:1e:61:11:e1:0a:31:d8:5f:14:3e:ce:ed:
                    ee:c9:f2:1e:a8:cc:30:ba:55:70:0b:5e:57:7f:6d:
                    d3:fc:81:77:31:f6:bd:b1:f1:52:f3:61:48:48:77:
                    19:82:57:be:a2:ee:51:70:50:7b:81:7e:b1:9c:df:
                    0a:b0:37:c4:21:5f:f2:ed:57:c0:f9:a0:f2:df:37:
                    b3:7e:95:8f:99:96:9d:02:09:fc:aa:57:8b:2c:5c:
                    7d:85:99:3a:f3:06:1d:f2:c3:9d:97:77:15:4a:b8:
                    34:ad:82:d6:91:24:9f:ec:0b:cb:c3:ab:99:de:69:
                    e0:7c:7a:76:7a:03:5b:a7:fb:34:ca:a8:96:09:5e:
                    c6:12:22:70:2d:75:2f:86:6d:19:33:4e:51:89:75:
                    e5:06:8f:00:d0:38:cd:8b:3c:0a:9d:bc:2b:8c:28:
                    04:ed:57:1e:3e:55:91:ce:4b:ec:6b:5f:7c:02:5d:
                    9a:ec:51:50:3f:b7:f7:94:ec:55:87:83:1e:87:21:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C2:CE:B3:F5:0B:F0:44:80:ED:E6:4F:D4:FD:93:AC:2A:03:3D:8B
            X509v3 Authority Key Identifier:
                keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:de:b9:c1:3e:3d:c7:94:9c:2c:94:b6:8d:6c:9c:15:eb:1c:
         b8:29:de:40:f1:e8:d9:f1:ca:a7:c3:54:42:e2:6d:79:f7:70:
         23:92:bc:71:44:96:c1:0d:22:5e:08:e3:db:f5:db:67:e5:8f:
         87:7f:9e:8c:84:36:29:aa:69:15:1f:b8:67:54:a7:52:e3:dd:
         b9:57:b2:5c:13:a0:c4:fe:da:cf:b8:15:24:8b:9c:0d:10:e6:
         31:c3:f0:4c:32:31:dc:7f:43:51:78:9c:31:3c:79:a7:bf:48:
         c5:1e:53:7a:ad:b3:07:28:44:1c:5a:e2:6c:d9:80:69:9a:8a:
         6a:5d:cc:df:00:a4:3a:16:cd:27:df:0a:73:b7:ad:47:33:35:
         eb:a7:48:8f:7e:51:96:77:5c:bf:c5:e2:1b:82:fa:7e:8d:38:
         2c:63:4f:b1:e5:a3:a4:36:8c:5a:32:92:a4:f5:85:4f:75:ea:
         4b:6c:c0:89:db:28:0b:15:dd:c5:a7:e5:90:f5:00:43:32:dd:
         20:e6:f1:aa:7b:9b:85:72:e6:74:9b:8f:c8:ea:c1:82:5f:c8:
         2a:81:50:21:3e:84:d2:ba:ff:83:17:61:34:c5:0d:f7:da:37:
         31:a1:67:68:2d:4f:a7:0c:ac:bb:7b:36:a2:c8:12:e8:34:e3:
         45:81:95:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:09:46 2025 by rpki-client