Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
File:                     i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json)
Hash identifier:          AZHSG+mvZch3KMqfCz6bGYwa+KA0E9hHPVi0LLh/Lzw=
Subject key identifier:   AB:E6:E0:CF:0E:C4:36:3E:B5:EE:F2:AF:34:9B:4D:F0:07:05:40:12
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Certificate issuer:       /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial:       0197C45C78AC26C9CFE91A6CA6210279ECD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
Manifest number:          154F
Signing time:             Tue 01 Jul 2025 05:01:23 +0000
Manifest this update:     Tue 01 Jul 2025 05:01:23 +0000
Manifest next update:     Wed 02 Jul 2025 05:01:23 +0000
Files and hashes:         1: LNuPziOYyIrKubsBwXhoqEItKOI.roa (hash: HVHsB2c8MGUhz2rUlgm+F2HzTtyYnTiTaoLJeI/5tZw=)
                          2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: pDPLed7DcyPMrUdt/KzCfWPqYD2MekwlXYW1r2JqFPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:5c:78:ac:26:c9:cf:e9:1a:6c:a6:21:02:79:ec:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
        Validity
            Not Before: Jul  1 05:01:23 2025 GMT
            Not After : Jul  2 05:01:23 2025 GMT
        Subject: CN=abe6e0cf0ec4363eb5eef2af349b4df007054012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:31:29:e2:dd:b6:6e:40:9e:9f:6d:52:e1:
                    1e:c2:54:40:45:5b:30:54:5a:f4:57:34:dd:65:46:
                    4e:a4:ed:06:e2:01:30:5f:f2:1b:08:6a:af:27:03:
                    d0:a8:13:60:f7:41:f2:55:bd:37:f5:33:fb:93:79:
                    af:82:62:09:35:53:a1:a2:01:90:cb:30:be:85:7a:
                    9d:d4:bb:c9:e4:58:6a:85:8a:42:e6:ae:d2:92:b1:
                    09:42:1a:f8:29:71:33:64:02:bc:5a:7d:d6:d9:7e:
                    dc:b7:16:56:24:6e:bf:88:7d:71:9f:7b:a5:05:e9:
                    87:45:82:da:59:37:c3:1e:df:ce:f6:bd:78:85:6e:
                    f1:b7:39:2d:6c:c8:44:0d:27:b9:20:6f:cf:1a:da:
                    70:1d:77:0c:6c:e6:01:c1:40:f0:ce:a4:db:7c:8c:
                    3b:44:5b:1a:ad:35:cd:d3:41:7d:8f:5e:fc:57:86:
                    e4:97:a7:1d:4f:46:70:fa:ed:b4:e2:04:57:39:9a:
                    99:0c:5c:6a:5b:2b:a5:91:66:40:1d:cd:d4:3d:ac:
                    f6:7c:d6:84:1d:14:73:cb:fe:55:87:ed:81:4c:bb:
                    d1:6a:3a:1f:2d:63:68:13:0a:1b:9e:29:82:c6:ff:
                    ee:47:71:0d:99:4d:89:84:d5:a4:99:60:bc:33:d4:
                    e6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E6:E0:CF:0E:C4:36:3E:B5:EE:F2:AF:34:9B:4D:F0:07:05:40:12
            X509v3 Authority Key Identifier:
                keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:62:36:f1:2e:50:23:9e:15:1c:2b:a0:c9:54:87:67:64:40:
         91:b2:18:33:32:53:a9:fd:53:a4:d8:31:15:57:df:aa:d2:79:
         26:9e:54:9c:ed:4a:6f:17:8c:7e:ab:ee:3d:58:c2:6c:4e:90:
         e3:75:dd:41:e0:e7:f5:48:bf:59:51:ca:15:44:b8:4f:f0:9e:
         63:07:7a:5b:62:ae:5d:28:b5:4e:f6:ab:ee:f8:43:1a:32:d9:
         70:08:bc:f2:91:5d:e0:80:f6:8b:8f:6c:42:7e:b7:05:e2:07:
         69:84:51:4b:24:a4:39:ef:87:63:b0:1e:a4:c0:ca:1f:cc:8d:
         d7:26:30:91:26:22:b8:54:04:97:bd:4d:ff:6e:59:63:80:c1:
         11:3d:a8:c0:ea:2b:55:65:fe:b3:74:c7:7c:88:0f:f8:a7:b6:
         7b:14:af:a8:3f:ea:65:96:3a:58:2d:e0:77:7a:9d:41:eb:8e:
         f9:24:4b:65:f9:e4:06:4d:5b:e1:b5:39:08:b5:73:2f:68:f9:
         f9:f8:0d:6d:01:c1:6f:2e:e9:78:65:b2:fb:fa:38:7d:1e:32:
         0d:80:99:48:51:b0:28:a4:4d:86:9c:46:2d:d9:6d:af:ea:71:
         fa:c1:00:d9:eb:77:b9:0a:df:cc:89:34:db:42:04:fa:36:92:
         58:e2:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:22:44 2025 by rpki-client