Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File:                     KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier:          3Qs/NCbgtZyj0HrajMiWa76BDEo3t0rfxeEOiw076TI=
Subject key identifier:   15:D5:C5:F2:98:CE:A0:5E:62:E9:78:22:76:9D:F4:51:36:FE:D7:82
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer:       /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial:       0197469DA729050C6A2B802F32EE4DA86838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number:          157C
Signing time:             Fri 06 Jun 2025 19:00:26 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:26 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:26 +0000
Files and hashes:         1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=)
                          2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: cypPZRtQOwH2VNpdD9qpmJ7qnn426H7iSEX37UDZmf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:a7:29:05:0c:6a:2b:80:2f:32:ee:4d:a8:68:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
        Validity
            Not Before: Jun  6 19:00:26 2025 GMT
            Not After : Jun  7 19:00:26 2025 GMT
        Subject: CN=15d5c5f298cea05e62e97822769df45136fed782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:da:3e:e3:c8:41:2e:45:54:f9:b1:95:ab:
                    f9:99:c2:8b:bf:d2:8c:4e:35:14:2c:a9:fd:59:89:
                    30:9f:ff:f7:56:47:37:28:d9:63:88:4f:cb:51:91:
                    bc:f1:38:10:1d:88:d4:96:e4:20:a2:b1:ac:d4:d7:
                    3e:51:e6:86:91:72:9e:0f:2e:4f:b6:74:0f:d1:8e:
                    5f:93:32:49:24:56:23:96:ad:c8:d4:c3:a8:dc:ff:
                    e2:f7:7b:dd:15:c2:34:75:bf:18:f3:ac:f9:f4:0b:
                    83:6f:e3:a3:36:2c:14:4e:15:1e:0e:4e:39:f8:ba:
                    70:01:d7:bf:2f:45:5c:70:b2:4a:62:0c:a7:ab:a4:
                    1e:15:a2:61:83:57:f7:1a:e1:dc:e8:7b:ea:cd:a4:
                    aa:15:e1:2b:a1:91:35:59:f0:f1:f2:59:c8:53:d4:
                    8c:9a:b0:03:cd:bc:f9:62:8a:c8:15:a8:1d:9f:e5:
                    22:80:7f:cc:a5:4b:b8:02:d0:36:97:ee:19:dd:42:
                    0c:74:ae:f5:83:b3:fc:be:7f:3d:b2:ea:fc:54:84:
                    b0:39:37:07:04:86:e8:8e:2e:39:c8:0a:74:d8:50:
                    d9:37:ca:ff:21:ab:79:d4:38:40:05:71:34:e4:26:
                    50:9c:49:43:d6:09:67:c3:c4:81:a8:4d:2c:65:d6:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D5:C5:F2:98:CE:A0:5E:62:E9:78:22:76:9D:F4:51:36:FE:D7:82
            X509v3 Authority Key Identifier:
                keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:6b:b6:61:73:0b:78:fa:00:77:db:31:33:cf:25:91:67:
         24:dc:91:56:15:5a:12:60:a4:2f:ae:19:19:b0:19:a7:bc:d5:
         4d:06:4f:5d:1c:94:62:84:c4:44:17:ba:76:e5:0d:51:59:44:
         cf:df:f0:28:d8:fb:ea:92:3f:2d:6f:dd:2e:6f:58:dc:a9:7a:
         72:9a:47:82:22:69:d6:67:e5:d2:b8:fa:f7:ec:90:3d:83:17:
         bb:de:b5:64:3c:cc:d3:b2:69:14:15:ae:44:83:cc:f9:96:bb:
         04:16:db:81:fd:8f:b1:36:d5:ba:3d:2a:46:08:28:3b:83:08:
         dc:62:ca:c3:53:88:ab:e2:ff:66:ab:bf:14:49:09:7a:1d:db:
         4c:2a:b7:fd:73:98:e2:8f:90:8b:a0:dc:06:b5:c4:b9:0e:ab:
         e1:4c:0e:e1:d0:89:c6:ba:c1:9f:0b:b4:d0:4f:cd:73:46:6c:
         2f:04:3d:8c:06:e3:b0:dd:62:b5:f4:cf:b6:36:8d:9b:74:af:
         4a:5f:4c:ea:97:55:fa:88:a2:2d:c1:02:2c:74:33:7f:42:67:
         3a:24:7c:2f:9b:71:f5:b7:46:19:58:c0:cd:24:d5:8e:e2:a9:
         f1:b2:a7:7a:78:08:4e:8a:2d:26:c3:1f:a4:d8:03:8f:25:c4:
         0c:46:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:12 2025 by rpki-client