Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File:                     a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier:          I2YFGVaGXXiJ03VjZnByfhvgfFvBUjlESvH9VGdxEDA=
Subject key identifier:   E8:43:83:C6:FB:8E:E3:A4:DB:CB:C9:5A:7B:D8:CB:ED:C7:2B:1B:4C
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer:       /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial:       019769979DF62FFCDF53AA69A23F56D7A07D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 14:00:33 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:33 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:33 +0000
Files and hashes:         1: LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa (hash: ijCon2p1g8yWQ5glLczywg0vICoOxaxCrjmV9KKJaoI=)
                          2: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: YSQo/gObZD9eXi2bBjrxNywHtqwiLx+otb3VUiiwDh4=)
                          3: bIOP6zTckgfazEJud8vxPBhx8yU.roa (hash: MrtqoOHLEt4NYdTsarUu/kPlSqMrs79epMZuKq+/qAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:9d:f6:2f:fc:df:53:aa:69:a2:3f:56:d7:a0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
        Validity
            Not Before: Jun 13 14:00:33 2025 GMT
            Not After : Jun 14 14:00:33 2025 GMT
        Subject: CN=e84383c6fb8ee3a4dbcbc95a7bd8cbedc72b1b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:d9:08:9b:5d:c2:4d:f5:54:7a:3f:83:ee:
                    45:54:1f:ec:34:6f:61:b5:47:cc:e4:1d:ec:a3:67:
                    e9:78:45:a1:4a:67:a7:88:58:b4:b5:bf:67:d9:c4:
                    af:58:4b:c3:4b:c7:fe:df:54:c4:41:97:70:89:84:
                    02:e8:78:16:1c:60:f0:45:ce:5e:60:df:37:4b:20:
                    fb:90:16:cc:13:70:78:91:2e:05:d7:64:b5:80:f9:
                    bc:27:10:f2:9f:15:6c:5c:40:7f:85:9a:31:2b:05:
                    d1:ac:6e:98:c8:9e:eb:14:9d:b3:9f:f5:14:1c:9d:
                    22:23:43:dc:82:09:da:65:14:a2:f7:1a:27:d6:f7:
                    8c:23:c0:24:73:68:5a:eb:8b:10:d1:a9:ca:b3:a7:
                    61:1c:0f:71:f3:ee:69:31:f6:33:d4:2d:62:c9:38:
                    d8:d2:7d:28:88:81:a1:a4:79:c9:15:4d:37:b7:f7:
                    3e:0a:ca:c4:f9:47:a0:28:de:48:9d:75:c5:50:75:
                    b9:af:e3:f6:bc:a0:e1:f4:d4:fe:86:50:b6:87:77:
                    ad:57:f3:f2:cb:b5:ce:97:d0:4c:0c:75:65:66:10:
                    8f:d1:cf:f3:2d:e4:8f:bc:72:30:e5:d9:30:38:70:
                    6c:c8:45:e9:45:1d:7e:09:3e:4e:4c:5e:1e:01:6d:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:43:83:C6:FB:8E:E3:A4:DB:CB:C9:5A:7B:D8:CB:ED:C7:2B:1B:4C
            X509v3 Authority Key Identifier:
                keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c5:f2:81:bf:8b:86:36:12:a5:f1:41:1c:46:dc:b5:9e:30:
         c4:95:b8:a0:5e:dc:3f:c4:31:de:e0:b9:d0:60:88:a6:40:fd:
         a8:f1:17:c8:19:50:16:72:85:cb:60:64:3d:9c:c1:cc:44:6a:
         96:f7:b8:fa:32:f3:5f:00:b4:3c:b3:9f:91:eb:20:c8:a0:58:
         a4:5a:32:64:87:20:65:4a:a5:b6:9e:8f:f1:61:56:eb:19:2d:
         93:cc:4c:c7:44:20:81:ef:f6:ce:ae:92:ed:44:54:7f:4f:43:
         a5:20:a9:c4:cd:8d:19:0d:26:58:f6:65:cd:d1:45:e5:02:74:
         ee:2b:58:f8:52:7c:76:9a:20:93:41:e8:a5:d5:30:d1:34:b2:
         cb:1e:18:9d:a1:fa:6b:b8:6d:4b:b6:0f:c8:58:d3:62:12:6e:
         05:a8:b5:d6:52:08:8c:88:03:d2:35:4c:f4:29:8e:f6:4c:64:
         e7:36:5c:22:da:70:27:68:6c:5d:7c:ec:10:b1:57:ce:5b:f6:
         8a:41:f6:0a:ea:4d:40:a1:10:e4:15:be:14:40:07:36:1a:80:
         5c:d5:74:61:68:58:e0:fa:b6:4b:38:60:b4:47:00:ae:f6:b8:
         d8:69:74:12:7e:c7:93:85:3f:6c:c4:72:5c:62:b4:14:9e:85:
         46:d1:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:00 2025 by rpki-client