Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
File:                     F92cI69p7Czbb-K5k260lM_RYh8.mft (raw, json)
Hash identifier:          g+XwGtEfz6AhaAhfIrxm2EDibvOYPHOFD8D8j4bMgIA=
Subject key identifier:   F7:4E:EB:E2:35:EE:14:21:2F:FD:E0:DB:CB:FB:EE:8C:97:F4:BE:B5
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Certificate issuer:       /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial:       0196D7093C2062780A5A14EB7BD6A3CE6A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
Manifest number:          154F
Signing time:             Fri 16 May 2025 03:00:28 +0000
Manifest this update:     Fri 16 May 2025 03:00:28 +0000
Manifest next update:     Sat 17 May 2025 03:00:28 +0000
Files and hashes:         1: F92cI69p7Czbb-K5k260lM_RYh8.crl (hash: w2JY6/kkzNzPuBwFVi1FrDqSgPS1niwsBMVfMXlxIzI=)
                          2: Kj5ZZT_QMGV8ggXHA75R7vnwc-Y.roa (hash: p+eVg1Sb75Egr4y3obi4lrz5P3sy7D8NwnWNwRsHb70=)
                          3: NIDKHm7_cZUNMihpKQDzfd-ZjRA.roa (hash: kaf5wyEDhcWh11clAHcF36F7W+dfPnAjUXKofTGxPck=)
                          4: PGLRT7UqxBVt5ZGCBsJhv8rP6qQ.roa (hash: RTH/rFrhQw74U5knflYk2x+P7ymGF/LwjJP/pIPOpvM=)
                          5: amXihoIti_1rSNyGXmBzzCK307E.roa (hash: nLmxvSWML2dah+dCWe4SPAyANy3yKBIMLrJwHa4DIEM=)
                          6: cmnKESnx3pYzc_9zB3Nnd1QMDJ8.roa (hash: yO89D9gVpePds41T+w6tzQYVY3S3xzIRop0YPL+B3+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d7:09:3c:20:62:78:0a:5a:14:eb:7b:d6:a3:ce:6a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
        Validity
            Not Before: May 16 03:00:28 2025 GMT
            Not After : May 17 03:00:28 2025 GMT
        Subject: CN=f74eebe235ee14212ffde0dbcbfbee8c97f4beb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:b2:a5:6f:24:70:3e:66:ad:e6:2d:94:76:
                    8f:3f:48:ef:e6:8a:43:b0:fa:d4:78:11:cc:41:b0:
                    b8:23:6e:75:ff:80:4f:99:33:48:76:bf:23:28:f2:
                    7b:fa:4f:ca:8f:9d:2b:37:15:ab:07:38:c6:ef:ef:
                    44:64:62:9c:3b:a5:f3:69:34:7f:8e:01:21:2f:14:
                    f1:75:e7:26:1a:7f:bc:01:06:c1:7f:84:91:80:ae:
                    8d:5a:46:ef:e4:c7:ad:c4:45:64:81:72:2d:e6:cd:
                    40:da:87:3d:7c:8a:87:30:bf:b8:74:2e:a0:41:28:
                    91:da:8b:db:3e:9a:e5:16:c2:08:96:d8:23:48:fe:
                    6a:6a:77:a6:91:33:6e:dc:99:0e:c7:69:09:4e:8c:
                    7a:0f:11:d8:5a:35:25:70:61:e0:31:83:12:6b:8f:
                    32:ce:63:2b:b4:d1:d7:1c:b7:c0:a9:f9:a2:ad:e6:
                    66:8f:5b:a3:f7:5b:d6:57:96:64:08:d2:38:56:fe:
                    17:b4:8c:8b:2a:0b:84:b1:c2:a6:4e:6c:19:8f:16:
                    10:5d:60:36:75:2a:a4:83:3a:e1:b3:58:ba:a5:03:
                    ce:ce:26:b4:6b:f7:90:0b:e5:09:5f:92:83:a8:23:
                    2b:f8:d9:b9:70:02:5f:81:92:53:9e:38:bd:08:82:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:EB:E2:35:EE:14:21:2F:FD:E0:DB:CB:FB:EE:8C:97:F4:BE:B5
            X509v3 Authority Key Identifier:
                keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:da:ea:f2:f1:b9:7c:63:58:53:9f:09:38:db:8c:5a:0b:
         8d:a9:bb:16:26:d4:55:98:9f:11:94:3f:72:20:46:93:55:46:
         3a:43:70:42:cd:04:d7:71:cf:17:e8:37:36:ee:4a:a4:9d:53:
         eb:04:f3:f5:ea:05:1f:9c:fb:4f:4e:e0:bb:70:bb:92:f0:64:
         97:a9:c5:7d:c3:cd:e5:76:42:06:49:67:75:24:3a:4a:f7:29:
         c9:33:3b:2f:f0:3c:7c:ef:30:c5:4d:4c:b4:39:54:95:05:2f:
         6b:cc:eb:bc:c9:45:4c:7e:73:f9:4a:dd:a0:f8:e1:08:06:05:
         94:4e:3f:38:3a:92:32:ca:c6:8d:ed:a3:75:3f:1d:d4:2f:8b:
         c1:a3:35:8e:d1:8c:bf:63:8a:4e:fa:8e:c5:f3:f5:4f:82:9e:
         58:85:60:bc:f6:34:c1:2a:5a:19:3b:82:c2:3f:f4:5e:71:a3:
         cb:f5:ea:6d:69:c6:c9:2d:ce:3c:33:64:59:b2:07:72:53:ec:
         cd:0d:10:a3:6b:89:d3:1d:4e:a5:67:65:6b:d1:65:15:23:aa:
         ed:1c:71:65:94:a5:c8:80:33:3f:aa:7f:6b:47:93:a7:2c:d0:
         12:a8:6c:80:e9:46:09:55:14:6a:68:16:db:44:6c:44:61:64:
         35:11:5c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:26:07 2025 by rpki-client