Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          zJQ6iLqQ54hMFXbjNO+uYIqw9Ohw/murJ/7G+UnPrtw=
Subject key identifier:   5F:4C:12:C6:DE:87:5B:B0:86:B0:5B:F3:3F:4A:EC:E1:22:5D:B3:BF
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       019746300693127023932F2EE424D82FF4A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          157D
Signing time:             Fri 06 Jun 2025 17:00:41 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:41 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:41 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: thK4P1ze1qwTG+fjl2JZuxN04J88iqRrAihBvBVDk/o=)
                          2: _rOeYqbasUbg4wEPxQv2jbf1rDs.roa (hash: QqZ9iY31p0jdqPdmJMdj1h5d+9EiWy2N5/wKWyWJKZc=)
                          3: oWADFTlHdFGaImpVaeuI3PTES70.roa (hash: ocNMe2JAUFkx91R2NARDArJ9m07CtxuPNuzV6BlyWig=)
                          4: uoGc2nJpk2UpZyfHZzcx7uBg-dw.roa (hash: YbLz65VSnoZrUAyODriZg6tIX0t6U/Eu072okI1A/7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:06:93:12:70:23:93:2f:2e:e4:24:d8:2f:f4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Jun  6 17:00:41 2025 GMT
            Not After : Jun  7 17:00:41 2025 GMT
        Subject: CN=5f4c12c6de875bb086b05bf33f4aece1225db3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:10:5c:86:72:f1:f4:fb:a7:1d:f4:fe:cf:
                    9d:96:87:db:6b:bf:57:66:38:79:eb:db:b9:22:58:
                    47:92:03:41:94:af:cc:7f:c6:1b:f3:61:3c:cf:3e:
                    eb:c4:61:98:1c:23:c0:ca:5f:bb:c1:47:ce:06:24:
                    bf:cd:52:8b:03:5e:e1:21:da:52:4a:95:1e:45:9d:
                    15:d8:b2:7b:1c:3a:cf:81:58:d9:4d:12:49:fb:34:
                    52:64:3d:4f:5f:fd:e0:9a:e6:e0:7a:02:46:04:e8:
                    ba:a0:cc:87:19:4b:3f:9f:15:f6:39:b0:bd:c7:be:
                    7f:30:61:f4:41:30:9a:54:86:d7:e6:11:1b:a4:38:
                    fd:1d:ea:b0:c2:67:06:90:97:ce:34:f8:9b:9c:87:
                    9a:49:78:a7:e8:66:4d:fd:c2:3e:75:fa:39:ad:8e:
                    f4:52:07:50:fb:12:74:e4:0e:6d:38:67:86:37:27:
                    c7:17:4b:16:f9:c1:df:33:cb:44:b5:bd:ae:7f:31:
                    a9:18:06:7d:63:51:fa:42:ef:1e:56:05:bb:df:18:
                    ba:8e:a2:26:a2:58:f2:28:64:ba:42:5a:05:6b:00:
                    88:ee:91:4e:d9:f7:0e:6e:86:bc:59:ec:24:54:89:
                    9a:b4:a0:03:ca:2a:e9:41:2e:4b:7b:8f:62:82:27:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4C:12:C6:DE:87:5B:B0:86:B0:5B:F3:3F:4A:EC:E1:22:5D:B3:BF
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:98:78:ed:bc:b6:22:ba:89:63:46:9d:20:15:ad:d5:0b:a9:
         7e:23:e3:02:02:cc:f5:0d:a6:32:14:46:f8:a8:c0:06:fa:26:
         54:ea:df:df:0e:2b:37:23:79:93:c4:0b:02:48:93:a6:8d:f0:
         b8:de:5d:31:95:24:1b:62:ee:55:03:c3:32:d6:a7:b4:9e:da:
         9a:57:e4:6e:21:da:83:d6:2c:bc:08:f2:8e:24:a0:c3:ed:d0:
         82:da:ec:66:87:61:26:e6:5d:96:b6:32:36:6f:39:fd:c4:6c:
         87:d9:43:70:33:dc:df:c5:29:97:8a:13:c5:9e:d1:1b:81:99:
         38:8b:c4:c6:70:4b:35:cf:64:da:67:ca:14:9c:ae:9b:4f:91:
         1e:15:fc:ed:54:d4:4b:c8:7e:06:8f:17:38:ee:49:51:09:03:
         0c:8a:23:64:24:d2:9b:ec:44:0e:a8:da:a3:e7:d6:ae:cc:70:
         a9:24:54:01:e5:23:c8:52:b9:44:12:14:e1:87:1d:c8:3c:f8:
         95:84:4b:c0:b2:28:3c:4c:be:60:27:af:3c:9e:44:b1:58:1b:
         89:a6:03:f7:eb:93:f2:56:11:7d:b1:38:87:cd:24:89:13:fd:
         e5:9b:03:5c:47:f8:d9:02:e4:83:ae:7b:28:64:18:2b:bc:d7:
         e7:71:29:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:34:45 2025 by rpki-client