Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File:                     bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier:          fi1n0AIa1rdjBlpb7rVrgYMg0Q2ir4ALbXvEXrQE6ak=
Subject key identifier:   B4:39:F3:AD:D1:64:8A:5D:A0:27:E0:D7:B9:21:62:BE:08:3F:E9:33
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer:       /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial:       01976929928B9194B810621D2ACEAE3C9747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 12:00:21 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:21 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:21 +0000
Files and hashes:         1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=)
                          2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: U1s4strEz/BCKHKvIXou/4LH1mG2LGwQb10edOXbbls=)
                          3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=)
                          4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:92:8b:91:94:b8:10:62:1d:2a:ce:ae:3c:97:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
        Validity
            Not Before: Jun 13 12:00:21 2025 GMT
            Not After : Jun 14 12:00:21 2025 GMT
        Subject: CN=b439f3add1648a5da027e0d7b92162be083fe933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6e:f6:fc:bc:3c:91:73:98:b1:a4:30:79:47:
                    6e:6f:96:56:1d:28:3b:1f:aa:ef:7c:dc:b3:bf:d3:
                    cd:2a:00:4c:b8:99:27:18:6f:ea:7f:86:13:d0:75:
                    87:5b:9e:e1:df:3a:68:f1:35:f8:56:d2:3d:71:37:
                    cf:a3:28:4e:f1:a6:e4:66:71:7f:49:69:56:f9:80:
                    12:7e:36:70:3d:0c:ba:97:8c:25:71:f8:ae:f7:a9:
                    84:7e:fc:5e:93:e0:a7:6c:e8:78:f6:78:91:46:2a:
                    5c:d8:9e:03:f6:d1:6b:2c:f6:0d:1c:4b:f2:eb:63:
                    9a:d2:b7:50:78:6a:9b:47:66:8e:8e:e4:41:bf:c0:
                    ba:70:fd:b1:8a:4f:77:10:5a:0b:ce:96:19:f6:22:
                    bb:8d:cd:05:9e:a8:b7:a9:91:a8:7c:7a:aa:95:2b:
                    f5:2e:e4:92:98:3e:c1:c0:95:d7:5d:20:17:21:0e:
                    dc:17:c2:75:1e:d1:ab:0b:2d:c1:74:ee:cd:91:fd:
                    a1:f3:f0:6c:78:46:f0:58:55:7b:60:63:f1:36:d1:
                    34:e4:8f:47:8a:24:5a:8c:d0:53:aa:e8:5c:f7:e6:
                    d0:38:61:12:50:74:a6:30:10:4d:8c:02:fc:db:18:
                    d8:ab:6d:f6:2d:6d:c9:18:79:1b:e9:6a:b0:21:bf:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:39:F3:AD:D1:64:8A:5D:A0:27:E0:D7:B9:21:62:BE:08:3F:E9:33
            X509v3 Authority Key Identifier:
                keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:14:ab:4a:7c:41:17:49:83:5d:8e:ba:ff:32:46:b3:df:
         7e:b4:6b:6d:58:71:4f:4a:9e:9f:1f:6f:6f:63:9a:28:a4:5c:
         a1:02:bc:e1:25:19:70:28:40:71:19:8e:77:be:11:fa:18:3a:
         f3:e3:c2:9f:07:71:9c:15:94:fc:3f:09:04:a0:c2:22:20:98:
         01:30:5b:97:1c:f4:ca:bd:f3:e9:e3:de:8c:d6:de:d8:0b:11:
         ca:ce:87:7c:75:cc:db:b8:5d:0d:e1:e1:6c:53:aa:23:0b:e7:
         4d:e0:0b:a7:2f:f8:b4:ad:1c:45:dd:79:43:bc:69:b6:df:1b:
         18:7d:b6:97:04:39:a6:5c:65:b6:2a:f4:e1:77:59:7f:cc:a0:
         91:f2:97:60:97:5b:01:dd:58:ed:31:5a:fa:0c:d4:37:02:f1:
         45:15:2b:e4:c5:a8:0d:ea:3e:09:86:8d:07:ca:3f:5b:c0:eb:
         fe:22:bb:9c:45:c3:93:ae:5a:32:f6:38:4e:04:62:3d:9e:bf:
         13:99:d6:19:d5:29:84:18:67:3a:46:42:5b:d6:37:ea:11:f6:
         83:ef:b7:05:e1:5b:5b:93:32:e3:48:29:15:d7:22:50:2f:a5:
         51:71:ca:bc:bb:70:8e:df:09:48:4f:33:14:32:ed:b7:21:09:
         0d:ec:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:26 2025 by rpki-client