Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
File:                     cVuIXDswL9UObCJkejPcR3J_6pU.mft (raw, json)
Hash identifier:          K1Oozg3CAV5AZmxDyr/bot/AsmXecFCqvJ7dHUgNE9w=
Subject key identifier:   02:70:94:E9:37:8E:20:AD:46:51:EB:32:3E:80:41:27:F8:55:9D:45
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Certificate issuer:       /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial:       0196C013E9ADE855C91BA50814439763621A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
Manifest number:          153A
Signing time:             Sun 11 May 2025 16:00:52 +0000
Manifest this update:     Sun 11 May 2025 16:00:52 +0000
Manifest next update:     Mon 12 May 2025 16:00:52 +0000
Files and hashes:         1: 14pido6o0wqfomgXR8pucw1gPzU.roa (hash: jgQtihM0UCn7BbKxbmBUgDGUKYz/W0MyqwuDhDbNzpY=)
                          2: 2etIb7Rnc-HqeeBf3zVt1jLWUNA.roa (hash: OC17SOEObLk3HsIqjo4SamQfndEYttT241yoTEhMhMM=)
                          3: NA4JD_GnqQvOyR7m4m3Vw9okgE8.roa (hash: J1cBhjZo1uGeijpNkjCbQKnO6iIh1rl0/dVJtp6h+ew=)
                          4: cVuIXDswL9UObCJkejPcR3J_6pU.crl (hash: y19T29x8LCmZDh2+Rzvk5br66S1F3wkQlHgT7fWse5Y=)
                          5: eHn6AySlJiBAuuxtiCIN3RwN6qA.roa (hash: LgEJiOedO8COAzGV0am2pAV/Vl26Jh1hgQQo5CskTyg=)
                          6: i3VhAkwmg1Hp-iEg5-4DqgQXOCM.roa (hash: mdFfnRZh31uX+xwiVUHnQrTZIRO7yKpYbNnQm8yN5rc=)
                          7: iNOcJVz2_fB3iFNvhul_qe9ZMbQ.roa (hash: PTNjFEC+8LOf9p9/46EB/Gyud8WBITxQ3kLEIaOMY6c=)
                          8: oi_n1Va3IGPAcBfd-0AP3-FX77M.roa (hash: szdc2nWaBES7VDGsxzr+xrQOccNyUqGV5KOPHZLY5gM=)
                          9: qAgR3U_rmhTk9ylZXwkHVA3MlH0.roa (hash: aIy0e102scbWahaNYsLiO2Tj1Fxcl0+tQeOdYm8oqFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:13:e9:ad:e8:55:c9:1b:a5:08:14:43:97:63:62:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
        Validity
            Not Before: May 11 16:00:52 2025 GMT
            Not After : May 12 16:00:52 2025 GMT
        Subject: CN=027094e9378e20ad4651eb323e804127f8559d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:17:d7:89:eb:c0:c3:86:e7:d0:fb:9f:e9:
                    d3:19:23:23:b1:03:46:43:20:57:1d:ee:cf:61:14:
                    38:60:09:e2:b0:21:06:36:50:65:87:54:df:c8:8f:
                    78:ff:52:99:f6:a5:67:c6:f8:b0:17:e0:1d:79:b8:
                    ae:4e:96:69:fd:a9:a4:83:cc:d8:b6:c7:a8:0e:4d:
                    d7:e0:c0:95:9e:e2:0f:88:58:c0:6c:da:d2:26:33:
                    bc:2b:45:d0:9d:51:14:ec:be:ad:f3:92:c4:ea:c0:
                    31:64:bb:1a:09:d9:ad:1c:1a:90:66:3a:83:91:bc:
                    8f:37:34:50:9b:93:64:a7:26:8b:0c:cf:09:04:bd:
                    8e:8b:94:ff:cd:b5:3a:59:5a:6d:e0:0c:b6:83:91:
                    0c:bc:ff:f2:b8:cf:19:f4:64:92:fd:01:7b:bf:00:
                    45:c9:a9:53:b7:e1:ae:88:cd:be:b2:f9:4d:25:f9:
                    a8:c7:4a:c8:f2:60:32:fe:47:f6:81:1a:5f:58:45:
                    fe:1b:21:ba:92:47:8c:36:c7:2a:a8:bf:9c:8e:98:
                    ed:a1:95:5f:7f:2f:2a:51:8c:85:67:fb:dd:05:fd:
                    53:dd:0d:64:03:9e:c4:33:9f:c1:36:0e:e2:86:55:
                    51:dc:01:88:86:1e:01:04:22:26:61:97:11:6b:4a:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:70:94:E9:37:8E:20:AD:46:51:EB:32:3E:80:41:27:F8:55:9D:45
            X509v3 Authority Key Identifier:
                keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ca:d5:10:b6:1b:6b:ef:8a:9e:d2:1e:75:a7:3c:ec:98:68:
         8c:21:f5:94:79:f9:1d:ec:af:44:cb:b9:d6:b2:b6:98:fd:f1:
         96:d2:e9:41:02:5a:ee:88:ca:47:6d:24:47:ff:3f:41:dd:4f:
         78:6a:73:c7:2f:72:67:0c:83:34:cd:a5:1f:d1:df:8f:1f:79:
         10:27:c1:8c:43:1f:c8:8e:94:c3:28:b6:a0:be:cf:4a:9e:46:
         6e:8b:46:20:ce:ce:64:db:e3:70:7e:48:ec:d6:11:19:f4:ce:
         4c:ef:41:b2:c5:0f:d9:b6:f2:27:47:6e:f2:5b:da:db:3e:2b:
         76:56:82:7c:0e:b4:11:ce:0d:ce:15:61:5d:4b:7b:7f:15:e5:
         0c:14:70:dd:1b:5f:19:e7:ee:23:b4:ac:04:95:9b:4d:e0:77:
         01:68:c9:76:11:81:48:ac:bd:35:13:12:67:bb:2f:e9:86:56:
         6d:33:c2:81:f6:da:f1:b4:91:3c:29:e4:dd:b1:b2:a8:7e:ae:
         72:eb:ab:ed:7c:c7:1d:45:e5:6c:b8:37:a2:a6:59:bc:82:69:
         21:b1:c4:ac:a2:f4:02:77:c7:d9:a0:94:8d:ad:46:1a:5a:ce:
         d8:1f:f7:f5:d3:38:75:6e:99:7a:4f:fe:01:97:b0:ba:2b:07:
         d0:de:df:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:56:23 2025 by rpki-client