Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File:                     1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier:          hxhewXi7nU6Ytgd5Dd13dUXSwwtTqc8mJCbLBbSriQo=
Subject key identifier:   01:B6:0C:AB:20:96:A3:66:41:B1:30:0B:49:D0:C1:C8:48:73:E7:95
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer:       /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial:       019749686FE41E091F4957C64652F8D3D8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 08:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:10 +0000
Files and hashes:         1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: p9CVhRhzEz3Wmnw8UlO+2SnyOossZUBv1jE70MJsn1E=)
                          2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
                          3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:6f:e4:1e:09:1f:49:57:c6:46:52:f8:d3:d8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
        Validity
            Not Before: Jun  7 08:01:10 2025 GMT
            Not After : Jun  8 08:01:10 2025 GMT
        Subject: CN=01b60cab2096a36641b1300b49d0c1c84873e795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:40:b7:1f:39:cd:9c:bd:79:e1:4c:59:7b:
                    80:13:c3:c2:db:b9:63:6a:17:8d:54:cc:40:45:13:
                    d8:04:d7:2b:f3:d2:fb:05:6d:da:ab:50:13:45:2d:
                    18:f4:77:af:2d:bb:15:89:62:b7:68:c0:46:fd:60:
                    ae:94:9e:3f:59:8b:15:93:41:39:93:f1:5f:29:83:
                    14:88:bb:15:80:39:18:76:1b:4a:cf:6f:66:13:8e:
                    55:00:cd:8f:3c:be:1b:f2:0f:9b:bb:77:61:64:a4:
                    da:43:b9:7e:74:17:60:0b:38:3c:09:5f:47:94:28:
                    dc:02:59:c6:d6:fb:cf:be:3e:83:3a:9e:41:f2:ac:
                    f0:5e:01:77:3f:44:8a:9a:55:6e:b6:b3:48:51:ed:
                    d5:a8:0a:ba:c1:6f:b8:dd:f0:36:d5:87:e7:6f:a7:
                    c7:cd:0f:ae:2c:21:3c:fd:57:2f:15:17:39:29:43:
                    38:34:5a:50:a9:82:ad:79:9a:f1:3e:45:59:21:8f:
                    f7:2a:5b:0e:57:74:67:bc:05:6c:dc:61:0b:2a:72:
                    af:e6:84:05:e1:58:24:0b:48:46:c6:d9:e4:05:e2:
                    65:9f:74:2b:dd:1f:b1:5a:2b:6c:16:37:e0:85:8a:
                    7d:1d:70:9b:3c:7b:ea:54:ed:c3:ff:be:14:cc:46:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B6:0C:AB:20:96:A3:66:41:B1:30:0B:49:D0:C1:C8:48:73:E7:95
            X509v3 Authority Key Identifier:
                keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2a:0b:2d:8c:31:57:be:72:59:d0:7e:b0:da:54:d3:42:5f:
         90:59:30:f3:47:fd:ac:2e:1d:1f:8f:8d:63:8c:b0:93:11:47:
         ec:eb:9c:80:c1:3b:ef:a9:c7:57:4f:2f:e6:49:08:a4:23:64:
         aa:54:48:3b:93:6e:82:e7:b4:b7:96:87:14:5b:70:35:22:b2:
         26:0e:04:32:0d:0a:61:d4:04:8f:97:aa:88:a3:12:87:c0:77:
         72:a0:8e:8c:de:cd:c5:d6:c4:f1:97:5d:bc:b5:1a:1f:a9:6c:
         d5:99:ce:b3:f0:cb:dd:33:f8:33:6c:ed:bf:01:b5:42:3d:79:
         08:a1:d4:67:60:11:f1:30:db:d2:82:78:1e:c7:f7:e7:c8:90:
         a8:46:d2:f8:4f:60:04:7e:98:a7:ca:1b:b8:1d:e0:0d:74:a4:
         10:c9:5f:ec:f6:42:b3:a5:5e:4b:3b:69:72:b4:a3:dc:1e:3f:
         34:35:ca:58:e1:51:36:b0:54:ff:aa:d6:a4:35:20:91:24:10:
         b4:12:db:1c:fc:08:8c:ef:47:db:2c:7c:5c:4c:42:ea:63:0d:
         4f:54:8d:9e:e6:e9:09:db:4a:a6:8a:e7:39:95:26:1f:38:fd:
         54:1a:d4:b8:65:41:0f:d9:bf:ae:15:27:85:c1:c4:cd:4e:a7:
         04:fe:d8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:38 2025 by rpki-client