Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
File:                     AdbvBHn5_fqCZlff2ODvNmjKGr8.mft (raw, json)
Hash identifier:          kiejzrkVLdq+z92kxPh2PXhbIaGWRRgiOIgxRl5lzyg=
Subject key identifier:   F0:25:B0:BD:F2:B5:2E:94:36:F1:96:67:50:84:EA:2E:54:B7:83:73
Authority key identifier: 01:D6:EF:04:79:F9:FD:FA:82:66:57:DF:D8:E0:EF:36:68:CA:1A:BF
Certificate issuer:       /CN=01d6ef0479f9fdfa826657dfd8e0ef3668ca1abf
Certificate serial:       0197B77C4EB4774094D49119121F41F236AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
Manifest number:          154A
Signing time:             Sat 28 Jun 2025 17:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:06 +0000
Files and hashes:         1: 7EOzLcM3E8sNA4PjSFrYUsbrEd0.roa (hash: no++UKlw2Jo1Bu83dbRNy2X31/EQKIzfSNC5oFSK5Ew=)
                          2: AdbvBHn5_fqCZlff2ODvNmjKGr8.crl (hash: ycOtJ9I/YLutrspkarUT7aFFAnnBlixdt7MPa+C7zL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:4e:b4:77:40:94:d4:91:19:12:1f:41:f2:36:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d6ef0479f9fdfa826657dfd8e0ef3668ca1abf
        Validity
            Not Before: Jun 28 17:01:06 2025 GMT
            Not After : Jun 29 17:01:06 2025 GMT
        Subject: CN=f025b0bdf2b52e9436f196675084ea2e54b78373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:43:5f:e5:5f:e9:c9:34:a0:0e:42:6d:df:
                    c3:16:cb:7b:e3:fd:08:c7:a8:f9:bc:c8:38:07:c8:
                    64:e6:9d:8d:f6:42:2e:0c:ea:20:99:9e:75:f1:c3:
                    bc:53:f1:16:c4:ad:8d:fe:ce:8c:9f:0c:e6:7e:5c:
                    08:6a:21:47:e0:e2:ef:1d:e0:85:8c:e8:d9:f5:4a:
                    65:ec:d6:dc:db:cf:1f:49:35:bf:a8:a0:60:54:74:
                    5c:89:15:9b:ac:d5:15:67:07:19:7a:08:6b:3e:63:
                    65:52:e8:80:a9:f0:0d:ad:2c:f9:ad:81:7b:fe:ea:
                    26:ed:6b:39:06:4b:32:7c:a6:e1:e5:79:df:2a:be:
                    08:09:f4:cb:d7:94:19:23:d1:a5:f9:f7:b5:32:04:
                    df:35:4c:c7:87:28:0b:0f:6e:24:ff:4e:68:31:bd:
                    0a:0b:a6:52:6b:a9:2e:29:f3:1e:06:71:f8:2a:dc:
                    9a:06:04:cb:f9:d2:23:53:39:63:d9:4d:ea:be:2d:
                    86:75:8d:4c:67:8b:8e:89:67:b6:2f:d2:a9:2a:47:
                    c3:34:f7:8d:74:1e:39:27:94:1a:b9:34:a3:8f:34:
                    15:a9:23:0e:4f:9a:7a:2e:15:9b:52:51:4c:8e:40:
                    9b:6a:79:16:d1:5e:a6:92:d4:bf:2e:0c:60:66:ff:
                    e9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:25:B0:BD:F2:B5:2E:94:36:F1:96:67:50:84:EA:2E:54:B7:83:73
            X509v3 Authority Key Identifier:
                keyid:01:D6:EF:04:79:F9:FD:FA:82:66:57:DF:D8:E0:EF:36:68:CA:1A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:13:e5:39:a8:ef:59:ab:63:d1:40:2e:6b:1d:cd:d0:0b:
         4e:7c:c6:07:a2:67:89:0b:a8:5f:43:f0:7a:ca:f9:8f:ac:ca:
         0b:c1:b0:7f:e7:54:f7:b8:56:2d:ba:d3:bb:b4:50:ff:b1:bf:
         6f:a3:7c:dd:b5:14:bc:5f:44:71:38:d7:f6:34:fb:d4:97:da:
         a5:a2:3b:30:76:7a:d6:e2:51:77:e2:6b:0f:ae:10:dd:f2:ec:
         96:98:fd:c9:a8:f1:c5:e3:aa:a4:e7:dc:db:30:7c:19:8a:22:
         17:72:5e:d2:fa:fd:d1:34:2f:7d:45:28:15:b3:0d:2a:8a:c5:
         4f:54:d6:a7:c1:04:37:f2:94:14:be:25:31:86:c0:2a:9a:ca:
         4c:83:7b:c0:d6:2f:2c:50:fb:57:89:b0:2d:e4:0a:55:e9:7a:
         57:77:03:6d:c2:e0:94:be:22:b4:a2:20:86:31:dd:69:58:5c:
         41:51:db:30:2d:e8:a3:ed:e4:51:77:4b:a0:61:5c:ae:b9:10:
         c6:ec:07:70:24:7a:fa:b2:6e:c4:ef:2f:a4:ec:ff:d1:98:1a:
         c3:77:4d:08:d6:a4:a3:b0:40:ca:16:d5:d4:df:8c:03:9c:ca:
         0c:ae:82:e4:f6:95:65:61:83:74:93:94:be:a3:22:49:f3:c1:
         9d:7c:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:37 2025 by rpki-client