Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
File:                     V8e-KewTsKsBiXQR6G7Piw87NEo.mft (raw, json)
Hash identifier:          vfu3mYPtsH2pMFTgupUVZAd7q5DP72E5GwVawtGk7do=
Subject key identifier:   EE:32:0D:1A:2D:5C:2A:5C:16:0C:E8:63:73:8D:9C:20:CE:F1:39:D7
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Certificate issuer:       /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial:       0196A68ADEFEE37CCE7775C03BD43E4F6E0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
Manifest number:          152A
Signing time:             Tue 06 May 2025 17:00:40 +0000
Manifest this update:     Tue 06 May 2025 17:00:40 +0000
Manifest next update:     Wed 07 May 2025 17:00:40 +0000
Files and hashes:         1: EQPOhUSrp_265j0O-uMyhE9jt_I.roa (hash: rrM5XgLKkJnvxVqnAYFYnHJh7gl05YTg1NaJpYIDwHg=)
                          2: V8e-KewTsKsBiXQR6G7Piw87NEo.crl (hash: 7W+4jVOZT7szvwm4w8Ju9Ot2h/gUX3350JW02yDSwx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:8a:de:fe:e3:7c:ce:77:75:c0:3b:d4:3e:4f:6e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
        Validity
            Not Before: May  6 17:00:40 2025 GMT
            Not After : May  7 17:00:40 2025 GMT
        Subject: CN=ee320d1a2d5c2a5c160ce863738d9c20cef139d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:f7:91:71:a5:5b:df:33:70:fa:bb:b2:a2:
                    70:4a:3a:01:39:97:a5:21:91:32:a9:e8:da:f8:f4:
                    f1:3f:75:79:b2:41:27:aa:39:ec:87:ec:88:04:df:
                    49:d2:b4:95:6c:dd:d6:33:38:f5:ef:1d:e8:a6:b3:
                    67:d0:a4:f0:46:bf:eb:16:a9:e5:2c:ca:13:27:6d:
                    12:bd:46:ce:2c:fd:55:80:ff:5f:63:01:68:f7:5d:
                    86:ca:45:81:f5:71:41:96:65:cb:b3:03:1b:07:e3:
                    84:4f:32:10:9b:3d:20:70:56:84:7b:80:86:f7:ba:
                    a9:a4:97:9b:98:aa:b0:c8:81:b3:63:08:ec:6a:e1:
                    9c:4e:60:20:05:a2:61:cf:82:07:e4:23:64:7d:eb:
                    8c:a6:47:28:b3:6c:79:8f:6c:43:a2:5a:2e:7e:3b:
                    60:01:dd:44:71:0d:1f:a9:2b:e5:5a:39:03:33:0f:
                    74:45:ed:b8:93:a8:e2:6b:21:f8:6c:f1:82:f1:cd:
                    fa:0f:65:44:dc:06:db:5d:b9:fc:df:a8:26:99:35:
                    fa:63:f7:3b:87:7f:d6:c0:49:9c:f3:a1:b8:4b:28:
                    52:4f:dd:6d:df:1c:f2:f1:b4:0b:9d:e0:32:f6:fa:
                    54:c9:a3:5c:b1:a2:ca:59:30:24:af:47:df:45:be:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:32:0D:1A:2D:5C:2A:5C:16:0C:E8:63:73:8D:9C:20:CE:F1:39:D7
            X509v3 Authority Key Identifier:
                keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b6:bb:df:ec:d1:1a:49:ce:00:e7:4b:89:18:72:69:ad:fb:
         19:9a:37:f3:24:7a:b7:3c:2a:c9:09:47:f9:93:b6:6e:8a:8a:
         04:7b:8e:bf:43:ce:bc:50:36:89:79:97:b2:e6:48:a1:74:4c:
         f0:04:b1:71:b2:a3:a5:17:6b:38:31:52:b2:55:53:56:05:1a:
         3c:ff:fc:ef:13:97:b6:cf:3e:fc:f3:ad:bd:9b:ed:c2:ab:cc:
         58:80:de:57:a7:19:04:ce:4f:f2:b1:d7:e7:80:eb:04:fe:16:
         27:3d:32:88:e6:0b:97:2c:99:ed:db:61:e4:49:97:7f:07:c9:
         ae:23:88:75:b0:57:73:91:94:06:42:fd:f4:6a:29:5b:6a:4d:
         fa:e6:2a:3b:87:a3:68:b6:75:2e:e2:b7:10:9a:42:65:a3:1a:
         70:e4:4e:7b:43:cc:ca:57:e3:6d:fe:4b:ec:8a:ca:e8:ef:5d:
         b2:18:a9:c9:97:6b:ea:56:7a:68:d0:95:c3:5f:cf:e4:6b:52:
         d5:68:c9:dd:6f:f9:85:fc:e7:94:fd:c6:b6:4d:a5:d0:c2:1f:
         5e:b1:79:72:44:9a:0e:40:30:a9:20:3c:8d:de:ce:8c:dc:92:
         f3:49:05:f1:74:e6:d5:e2:fa:b1:7c:a9:1a:8a:c4:d2:02:86:
         0e:a8:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:44:46 2025 by rpki-client