Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          zuYEo33z69D9n9s0Wj8kT43M4Acyp1JFt9MwKbvlnVM=
Subject key identifier:   E3:E0:A2:9C:0C:D0:2E:A5:F7:15:6F:6B:B2:39:89:65:D6:A6:56:12
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       0196C87252C5FFD1134F72C68D81C4F91430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          153A
Signing time:             Tue 13 May 2025 07:00:57 +0000
Manifest this update:     Tue 13 May 2025 07:00:57 +0000
Manifest next update:     Wed 14 May 2025 07:00:57 +0000
Files and hashes:         1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
                          2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
                          3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
                          4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: cI8FCcyPOcFWD7xIz6+QTfQCuwYwpGXaXVz6cBIlItY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:72:52:c5:ff:d1:13:4f:72:c6:8d:81:c4:f9:14:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: May 13 07:00:57 2025 GMT
            Not After : May 14 07:00:57 2025 GMT
        Subject: CN=e3e0a29c0cd02ea5f7156f6bb2398965d6a65612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5c:50:71:7e:cd:25:a4:01:47:a1:3f:02:5c:
                    f8:e5:47:c9:9e:80:61:b2:c6:ee:98:67:5e:2a:95:
                    4e:f5:e8:bd:13:8f:4f:ed:9d:54:4e:eb:d5:7a:b3:
                    96:b4:8b:5d:19:dc:d9:9b:58:62:32:f0:ae:1b:46:
                    db:ac:14:65:01:9a:e1:59:0d:c0:77:32:d8:81:ef:
                    3e:3e:63:1f:d0:f8:c5:31:b3:ae:fd:73:40:37:cb:
                    6c:01:bd:23:c0:03:7e:26:b1:61:87:ba:5f:5b:2f:
                    d8:a9:88:3e:27:1a:64:37:c8:06:2f:6d:1e:50:48:
                    39:90:4f:2d:0f:5c:27:02:dc:5b:17:cd:99:f9:08:
                    0b:2c:3b:3b:05:45:db:c3:12:e1:39:cd:c0:0d:e4:
                    af:3e:91:99:9c:ae:14:8f:91:55:68:9b:30:74:8c:
                    54:c4:52:ff:9d:4d:e3:4c:98:b5:aa:89:16:db:b0:
                    d5:5e:21:42:f6:13:00:40:07:bc:31:a3:6d:da:66:
                    21:9a:d1:07:06:cf:bc:e3:2f:0d:1c:b6:4d:a8:69:
                    48:65:c9:4e:b3:de:79:26:92:07:b0:47:49:d6:ea:
                    a1:16:7e:46:e3:fc:2f:83:e8:d8:d7:af:47:f1:7f:
                    0c:ca:da:1f:53:bc:ce:fb:70:6d:c4:13:7f:6d:5e:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E0:A2:9C:0C:D0:2E:A5:F7:15:6F:6B:B2:39:89:65:D6:A6:56:12
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:bf:e7:b8:30:7f:69:56:ea:11:64:c3:18:1d:1d:35:33:
         c5:fa:28:ce:e5:1b:66:62:b9:c3:c2:d1:13:3f:8d:8a:06:fb:
         58:88:14:b5:27:9d:8b:a2:85:ba:f1:e4:c6:8e:52:f7:84:c1:
         8d:bf:b9:44:43:0c:44:3d:3a:d7:20:d6:96:53:aa:67:21:93:
         5e:2d:72:38:38:f1:85:e8:77:90:97:f1:57:ac:a7:46:17:f8:
         1b:ce:2a:7c:2b:50:1c:db:0f:d1:82:61:5c:9a:99:7c:8b:26:
         79:17:14:6a:90:a4:45:f2:8e:45:ea:0c:13:a2:a0:5e:b7:3a:
         68:7f:62:1b:5b:ee:e3:40:8f:1f:aa:c9:91:b6:96:4d:9a:da:
         3e:df:0d:44:03:d1:48:65:6b:41:66:ff:5c:12:7d:84:2a:bf:
         70:bc:1b:aa:04:5c:de:dc:47:2a:f4:60:ba:79:97:25:41:0c:
         a0:6d:48:06:75:a8:73:6e:c0:d6:c2:64:e4:3e:20:45:b7:96:
         2b:98:93:36:21:dd:f7:d9:b7:dd:a4:9e:c2:0d:04:0e:f1:cf:
         2d:60:b0:c3:95:58:8e:f3:b2:2c:47:dc:ed:2a:19:da:e9:8d:
         89:ec:9a:ed:45:bf:6e:be:48:3b:38:1e:a2:64:9d:ae:88:65:
         20:41:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:49:56 2025 by rpki-client