Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
File:                     svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft (raw, json)
Hash identifier:          3cOm5/j+SID6aGVFvKhuBLCQI5S6XK54VhK01RZnaSY=
Subject key identifier:   E5:41:71:72:50:77:DC:4E:96:24:C8:53:55:66:17:ED:D6:D7:3A:A7
Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37
Certificate issuer:       /CN=b2fba356186c1dc5031c2fb20bc635491f878637
Certificate serial:       019771510356505592639F727AB8B548090C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
Manifest number:          0F24
Signing time:             Sun 15 Jun 2025 02:00:23 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:23 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:23 +0000
Files and hashes:         1: 4QP14L9LxP1FDJDVa3DI94blGWY.roa (hash: bLtR0ptcRwZJ4yJiejffUukpQF+MAsqc3I6CXZQZA40=)
                          2: svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl (hash: 7NwxatpKu6a71pZqCKDeVYuzm5jbTNreNcblYu5g9sM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:03:56:50:55:92:63:9f:72:7a:b8:b5:48:09:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637
        Validity
            Not Before: Jun 15 02:00:23 2025 GMT
            Not After : Jun 16 02:00:23 2025 GMT
        Subject: CN=e54171725077dc4e9624c853556617edd6d73aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:09:ad:af:e8:2e:b9:26:10:d5:dc:5e:02:
                    96:33:1b:28:06:cd:a5:96:61:cc:86:e3:52:a1:b2:
                    55:ba:eb:ca:b8:03:c8:13:d8:10:a1:50:66:5d:19:
                    19:fd:24:dd:19:7f:9e:3f:82:9a:c1:4b:6e:ec:ed:
                    af:26:09:90:c4:14:76:ed:04:95:2d:3f:8d:90:ed:
                    72:3a:c6:2b:a2:45:7a:07:29:1a:10:f5:31:51:07:
                    dc:8e:ff:9a:18:17:68:2e:dd:0f:0e:a5:91:fa:ea:
                    b3:91:34:04:48:2a:8f:81:90:02:69:00:3a:5b:5e:
                    f4:61:36:4d:44:a5:7a:a8:a1:00:0b:8a:47:77:f8:
                    4f:13:8a:89:9e:6f:ab:52:dd:7a:81:70:49:b2:e6:
                    bd:4c:70:05:48:3a:bf:a3:de:14:da:e9:fb:bb:71:
                    7d:14:b1:06:10:09:a0:e2:10:5a:13:4b:2b:8a:6b:
                    ba:ec:b3:db:be:b9:78:b5:ea:10:4b:c8:01:91:72:
                    c7:c0:59:77:1b:55:b9:9b:19:49:1b:6e:93:79:d6:
                    df:99:f4:c9:dd:6f:b2:d2:ec:1f:76:0e:0f:d3:1b:
                    97:32:d1:21:79:d4:70:36:e4:3f:38:20:83:b9:01:
                    ec:f7:7c:1e:eb:18:60:20:44:ee:bb:21:5a:99:b1:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:41:71:72:50:77:DC:4E:96:24:C8:53:55:66:17:ED:D6:D7:3A:A7
            X509v3 Authority Key Identifier:
                keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:01:c5:41:0e:0a:36:43:9a:a6:ff:33:39:c6:c1:8e:b6:e1:
         3b:9d:4c:a0:37:82:88:2d:24:92:9d:c2:99:ed:98:89:3e:3d:
         0d:cb:25:1a:fb:4c:70:03:d5:c5:78:79:3f:02:e5:11:63:3f:
         57:43:85:b2:8d:c2:be:97:76:d7:a9:db:8e:fd:3b:13:42:47:
         ae:a2:f2:98:0b:4e:86:a8:12:de:90:39:02:32:25:e4:aa:af:
         c1:c0:b0:f8:3d:fc:3d:5a:d9:2c:7e:5a:12:d0:de:f2:7d:61:
         23:49:2d:24:71:79:0e:0e:3e:b5:45:0d:00:2e:18:e2:18:9d:
         8a:f3:60:e1:f3:1a:c1:1d:58:2f:45:1a:e0:21:0f:88:3d:96:
         51:43:08:3d:b1:07:c5:8c:5f:7a:7d:fc:c4:64:25:58:1c:00:
         c9:5c:88:12:d1:36:7b:d1:42:58:2a:9d:14:87:2d:0c:f4:f9:
         3d:01:cb:18:77:47:a7:e9:03:38:35:ad:f6:70:a9:07:ef:86:
         aa:2c:77:28:5d:2e:fd:8f:ba:3f:da:d1:ae:4a:65:97:9b:a2:
         e8:2d:6d:bf:67:3e:3b:8b:4d:61:a0:f5:64:8d:43:8d:48:9d:
         4c:f0:18:3b:3e:d0:1d:e2:ec:91:85:3a:f2:6c:de:51:fe:52:
         b5:58:66:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:16 2025 by rpki-client