Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File:                     EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier:          AvbtWSV9AZ3LTA77Igum4gK7k8aDTeLWEJ1iMfhPOmk=
Subject key identifier:   A0:FB:BC:AF:5B:4F:CA:95:42:BD:F6:A4:3F:CF:65:9C:1F:73:F6:BB
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer:       /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial:       019748C30711D168B079D56322451CAA8E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 05:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:30 +0000
Files and hashes:         1: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: p0V6fvjLjLZD0sNgWUC+gpx3+4XjvmyoDwGkS7GDRzw=)
                          2: MROw4gFzcWIJiW-57fk1zpXQhBk.roa (hash: hWAGq+JyynXafr3/kTLPO6K2XTKtATKTBF5Bwv0mE6A=)
                          3: ePDnHbOXTUlVTt6WhrgofDAybdQ.roa (hash: dBzcW1+wZxIMYW+MPmPSO2MTLadbHEVw8y5qmE2KY9E=)
                          4: s1uawTeOUkgDW6mBKyzm3NI6hxc.roa (hash: lpqkVOyU/cokka/2U3UZmXPkRI7YfeF62rGfPTiCmjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:07:11:d1:68:b0:79:d5:63:22:45:1c:aa:8e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
        Validity
            Not Before: Jun  7 05:00:30 2025 GMT
            Not After : Jun  8 05:00:30 2025 GMT
        Subject: CN=a0fbbcaf5b4fca9542bdf6a43fcf659c1f73f6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:19:c2:8e:02:e1:6a:97:bc:ae:52:b8:cd:
                    2d:8a:ad:1b:f8:c0:ea:0f:70:96:c5:63:c5:39:60:
                    d5:53:fa:c5:f7:8c:fb:0e:ac:d5:07:05:1c:b5:06:
                    a2:70:d7:ca:e1:f1:15:30:c3:de:0f:af:26:19:0c:
                    7a:60:2a:2e:d8:f7:47:77:a3:b7:cc:39:98:26:6a:
                    aa:2d:cf:74:60:1b:de:f9:3a:d0:c9:86:b8:91:4f:
                    f1:78:98:78:0c:da:82:d1:d3:c9:fa:56:f1:7d:ae:
                    65:6b:09:87:00:5c:9b:49:c0:c6:d2:34:dc:ff:39:
                    e6:3e:24:b2:63:b5:23:46:07:a1:0a:a2:10:9d:f5:
                    a3:3b:98:7f:4d:a7:6d:4d:1a:57:cc:c2:f6:56:64:
                    1f:3f:8d:62:72:fa:75:15:15:93:6c:7d:52:83:36:
                    8b:27:8d:57:7b:78:18:55:bb:51:14:d6:46:65:cb:
                    f2:af:84:a4:29:d8:3c:b1:2a:4b:71:3b:f5:ad:16:
                    3e:d7:a6:90:02:4b:29:77:42:a0:a8:c8:d2:de:c2:
                    9f:bb:2e:a2:43:4d:19:f8:3e:51:d5:f8:81:0c:19:
                    1c:24:8d:91:27:e0:09:fc:51:c9:eb:81:f2:04:d4:
                    34:d9:68:be:0d:f3:81:d5:45:cd:27:fc:1d:e0:a6:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FB:BC:AF:5B:4F:CA:95:42:BD:F6:A4:3F:CF:65:9C:1F:73:F6:BB
            X509v3 Authority Key Identifier:
                keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:7f:f3:88:19:9e:38:2c:30:e5:0c:b5:36:87:09:9f:12:57:
         36:46:80:03:fa:0e:69:64:55:c3:aa:9d:36:66:19:1f:6f:04:
         bc:a6:ca:39:7d:b4:36:29:dd:af:13:f5:06:31:49:dc:16:19:
         e3:0e:9f:4d:55:30:62:a1:57:84:2e:f5:f5:34:97:e9:4f:f8:
         a5:c1:9b:f9:c0:3a:cd:a6:cc:5e:e5:49:70:5b:5d:4a:f7:5f:
         f1:80:7b:c0:06:21:79:d7:e2:13:b2:04:98:2c:b5:c2:0d:f2:
         cc:4b:b6:9f:f9:f2:77:ad:7a:11:34:bd:42:aa:b7:2c:d4:9d:
         a2:76:bc:e8:bd:67:ac:c9:e3:1c:58:94:f2:6c:2c:12:77:90:
         03:1b:95:61:10:4a:85:c9:18:d2:ec:e9:37:31:0b:00:1c:55:
         00:c4:89:2d:8a:12:c2:5c:11:0a:fd:0f:3b:da:39:5b:9f:14:
         f3:0a:56:c6:72:c1:86:0b:d2:e1:5b:22:79:95:bc:38:ca:7b:
         42:2a:0a:4a:f8:5d:4d:20:fb:47:1a:b1:f5:b1:4f:54:09:33:
         2b:e3:d6:e9:10:34:0b:3b:32:f2:c0:78:61:d3:5e:a8:bf:c2:
         b3:6b:c0:fd:46:0d:22:f6:a4:51:24:7c:1a:16:44:80:a5:73:
         79:54:00:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:53:28 2025 by rpki-client