Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
File:                     iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft (raw, json)
Hash identifier:          ocDuYZtnVZQMa86su8T3j8UJaqUvMMM/hOl0nm98Kbc=
Subject key identifier:   EF:55:A5:C7:41:41:9C:B3:5D:CD:6D:A5:08:C1:69:B4:71:C9:A1:6F
Authority key identifier: 88:72:7F:AD:5B:5C:06:85:2E:1D:AF:A0:71:CE:47:67:A7:99:E0:50
Certificate issuer:       /CN=88727fad5b5c06852e1dafa071ce4767a799e050
Certificate serial:       0197462FC3DBDAED42F434A18612FE06F97E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
Manifest number:          157D
Signing time:             Fri 06 Jun 2025 17:00:24 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:24 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:24 +0000
Files and hashes:         1: iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl (hash: uOY2wf5YrLidfiY6D0Hr0/Wq1DJyGQMMyDC7fbCjAFA=)
                          2: y26WpZEldCdiwpqodYBCZ3hzMbM.roa (hash: Q1+h8XgN41jDqcPqF4sdoSdNWkaGt5GnKBqYH1YkYlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:c3:db:da:ed:42:f4:34:a1:86:12:fe:06:f9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88727fad5b5c06852e1dafa071ce4767a799e050
        Validity
            Not Before: Jun  6 17:00:24 2025 GMT
            Not After : Jun  7 17:00:24 2025 GMT
        Subject: CN=ef55a5c741419cb35dcd6da508c169b471c9a16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:24:75:30:a5:27:64:f4:94:94:08:09:85:
                    81:4c:ef:1e:c6:f6:73:1b:37:7a:fb:46:56:c5:27:
                    c5:01:99:de:31:ea:a5:38:b8:1f:73:8e:5c:1c:88:
                    6d:59:7b:8a:26:aa:16:b9:6e:cb:10:72:d6:41:32:
                    6e:d8:5c:84:6e:f8:3a:9d:e2:fc:e5:96:f8:d4:10:
                    c2:52:7c:2d:4f:c1:be:cf:0e:f9:54:54:4e:33:a3:
                    b8:37:ba:d3:51:9c:5c:8e:19:d1:31:70:ac:78:64:
                    b2:56:1f:4f:0b:a7:54:e6:35:a1:34:8e:0a:59:c3:
                    86:f6:e2:38:3b:b7:00:c0:16:1d:69:dc:b8:c7:bd:
                    80:73:2d:e5:91:23:2b:3c:c3:d6:01:d1:d4:fb:0e:
                    86:87:04:f5:45:9f:2c:1b:97:d4:de:ec:cd:f9:95:
                    c7:99:b2:c9:b4:8f:ae:04:e7:59:b9:e9:e2:1c:0e:
                    11:9d:3e:81:df:15:9a:e3:dd:67:91:58:08:ea:f9:
                    f0:cc:99:d4:93:20:01:6d:9c:47:ef:66:ba:74:28:
                    55:97:f8:e5:d2:3f:41:aa:a5:3c:a7:45:db:61:ad:
                    27:85:41:04:23:6e:60:3b:90:5b:90:ad:ba:bf:46:
                    0d:7a:91:2f:d5:cd:a4:f0:6f:8d:24:67:16:9b:31:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:55:A5:C7:41:41:9C:B3:5D:CD:6D:A5:08:C1:69:B4:71:C9:A1:6F
            X509v3 Authority Key Identifier:
                keyid:88:72:7F:AD:5B:5C:06:85:2E:1D:AF:A0:71:CE:47:67:A7:99:E0:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a4a260-84b0-468e-b497-5a41926fed7c/1/iHJ_rVtcBoUuHa-gcc5HZ6eZ4FA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b7:a8:11:3c:40:6b:f0:f7:5a:7d:2c:b2:45:f5:a9:8d:46:
         8f:2d:c5:bc:13:e3:48:97:f2:5d:dc:e1:a8:b4:ed:5e:fe:2e:
         c7:5c:ad:cd:cf:9c:e4:91:75:9e:33:ce:21:15:84:9f:eb:ce:
         62:29:d2:84:26:c7:80:0f:df:1b:7c:31:58:60:43:31:77:ab:
         9c:4a:5a:2d:72:90:9d:67:2d:a3:ea:36:35:2c:0a:67:2e:a4:
         02:a1:c4:43:80:11:f8:d9:60:9b:27:c3:44:cb:47:be:da:f6:
         dc:8b:8b:2e:ac:d6:1e:a3:7c:da:0a:4f:26:54:9a:c0:e0:2c:
         07:7d:81:16:73:2f:a6:86:3a:57:16:c5:cd:07:f8:ef:3e:9d:
         02:a5:ca:53:e0:92:ef:fb:14:b7:92:ad:29:70:c9:ba:75:1f:
         cc:48:31:fd:d9:38:a4:dd:a1:29:65:18:11:3c:5b:08:32:20:
         c9:45:11:29:c9:e1:8e:5e:78:d5:92:e4:90:2b:6b:be:b6:d6:
         ee:b3:9b:d8:ca:09:e2:de:5f:9f:a0:de:9e:a5:0a:eb:5c:ea:
         45:07:42:10:4d:c1:07:8b:e6:ce:56:04:26:99:5f:b5:03:6c:
         ec:c4:23:30:ae:c3:41:a2:46:9e:99:cf:68:f3:fb:ef:44:60:
         7a:87:8c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:26 2025 by rpki-client