Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
File:                     5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft (raw, json)
Hash identifier:          /zffmtxWBe7k6F9xSKAai/S7U7W3Hu1wooddrS0kPFE=
Subject key identifier:   E3:74:D3:69:DD:5E:9A:B1:F8:2B:0C:16:27:4E:E9:1D:35:03:97:60
Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85
Certificate issuer:       /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
Certificate serial:       01974D7BA45CF979D258E883CFCD2BFB320D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
Manifest number:          157D
Signing time:             Sun 08 Jun 2025 03:00:37 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:37 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:37 +0000
Files and hashes:         1: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl (hash: UeM6qQCnFAsimSChICUh93LTxZ8TE3OmIEvkJDSr3oU=)
                          2: dFrITcK-gyFXGF4gMBJMUn82DUw.roa (hash: JzRq8pBFAlmY9cNlSptGZN7KGuqVF/MkHyhE1GubBM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:a4:5c:f9:79:d2:58:e8:83:cf:cd:2b:fb:32:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085
        Validity
            Not Before: Jun  8 03:00:37 2025 GMT
            Not After : Jun  9 03:00:37 2025 GMT
        Subject: CN=e374d369dd5e9ab1f82b0c16274ee91d35039760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:18:79:07:68:f1:21:46:d1:55:79:48:89:
                    d3:6a:1b:ef:ad:b9:3f:28:71:d2:25:d4:ec:f8:1c:
                    16:7e:57:77:c9:d9:ed:de:99:91:7b:43:bb:0e:6b:
                    bc:c2:b4:d2:52:10:4c:e3:cd:51:98:2f:28:22:a0:
                    cf:06:f9:77:82:c7:47:fd:12:1d:35:02:6a:27:af:
                    c4:a2:29:4f:73:2f:ed:19:72:5a:94:c9:54:70:bd:
                    2d:f4:ca:25:15:cd:2e:9d:39:dd:d7:5d:11:99:61:
                    15:0a:49:00:d3:ee:2e:6b:16:b7:86:23:cf:a7:cd:
                    e7:1b:0c:a1:2b:b9:71:3b:af:ea:01:41:b8:ad:38:
                    14:7f:15:34:68:18:ba:47:ae:ca:42:5a:65:8e:92:
                    30:28:61:ec:fc:32:f8:82:f9:25:fe:4b:00:5d:a4:
                    d3:63:5a:d0:c7:c7:ea:9c:af:68:0c:de:61:0c:85:
                    7d:af:66:11:91:0e:67:73:74:e8:de:5a:60:59:1f:
                    ed:9f:0c:d8:61:93:55:eb:05:73:2a:35:9b:b9:bd:
                    56:6e:fc:0f:59:ef:f0:a6:05:4d:ae:7d:d8:e0:10:
                    19:96:f2:d5:e4:71:16:66:77:c4:57:b7:f9:5d:84:
                    95:92:7c:1a:75:9d:03:1a:88:f8:2d:d9:d0:c0:9e:
                    31:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:74:D3:69:DD:5E:9A:B1:F8:2B:0C:16:27:4E:E9:1D:35:03:97:60
            X509v3 Authority Key Identifier:
                keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:42:45:98:43:f7:a3:b2:8d:5f:6c:76:fb:3a:5c:c3:82:85:
         81:47:42:f9:85:4b:e9:3b:00:ce:e8:40:29:e1:23:05:49:d9:
         cd:e0:35:01:f7:16:46:ef:e2:e3:e7:96:76:3a:c8:6e:ab:f3:
         79:26:94:e0:bb:00:a7:af:e6:c6:7d:3e:af:68:68:10:61:c6:
         d9:4a:a1:16:2d:4a:ef:70:79:62:97:d6:5d:1e:9f:48:d0:27:
         4a:7a:1f:09:6f:71:1c:5d:73:76:78:18:3d:8f:1d:9b:de:0e:
         5d:76:11:86:15:97:7d:3b:6d:09:ae:ce:94:97:59:1a:55:8c:
         f4:6b:40:2f:a3:f7:47:d1:b3:00:51:4d:a9:2a:f7:2b:de:36:
         78:c7:64:13:ae:f5:59:44:58:92:b0:20:d7:ef:43:e2:4b:8a:
         f4:f4:96:0d:24:e4:20:b2:0c:e6:b5:46:43:73:67:db:89:ce:
         c4:d1:1f:07:16:de:9a:3d:ed:4c:24:81:db:04:52:ed:5f:98:
         60:f7:40:e7:20:55:d5:bf:5d:fc:35:d6:97:cf:ba:10:b5:a0:
         59:f6:b0:d6:af:a5:7b:1c:ef:d1:e0:d1:86:c7:01:1e:2a:05:
         57:4e:02:d4:1b:bc:7c:23:6d:9d:47:be:4d:4c:8b:a0:ad:71:
         d8:a2:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:29 2025 by rpki-client