Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File:                     XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier:          trXM6TbT5J3PL5itZLGADkO5Prq3hp62348TlHwZGxs=
Subject key identifier:   6F:9A:4E:36:5C:42:64:DA:D8:63:5F:9C:F8:B3:4F:22:B8:C2:F7:98
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer:       /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial:       01974F6A278DA26DE25B765A04FB3F542688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 12:00:46 +0000
Manifest this update:     Sun 08 Jun 2025 12:00:46 +0000
Manifest next update:     Mon 09 Jun 2025 12:00:46 +0000
Files and hashes:         1: 1gXwwzbhOt1hhfZYV2fBPdSTJbg.roa (hash: /+nPsAg4u83TQZZz46kK0QTPr5Dhmsg+FCh0CrrMzt0=)
                          2: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: WR83fRcXPR6zEQkSvtVNORsipbAsdf617hYL7EDeLYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:6a:27:8d:a2:6d:e2:5b:76:5a:04:fb:3f:54:26:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
        Validity
            Not Before: Jun  8 12:00:46 2025 GMT
            Not After : Jun  9 12:00:46 2025 GMT
        Subject: CN=6f9a4e365c4264dad8635f9cf8b34f22b8c2f798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:03:cf:a4:3c:f1:fa:39:9e:97:91:b9:09:
                    1d:65:cc:a5:a6:6e:34:d1:14:53:c7:b5:8d:8d:27:
                    90:90:4a:7d:75:8d:dc:9c:03:b8:07:b0:6b:4d:f0:
                    6d:67:b5:cf:66:78:3c:40:3f:0e:b9:9f:f0:67:99:
                    a9:10:30:09:0c:3a:a9:56:c2:a6:65:e7:cc:8f:15:
                    dc:ee:12:e3:67:2e:42:b9:8b:51:73:de:2a:6a:f6:
                    55:c4:46:d0:a1:f5:43:bd:06:cf:80:0b:83:b8:25:
                    85:99:33:03:4c:90:db:a8:a9:4e:9c:a5:73:80:7a:
                    5c:bf:dd:09:55:8d:d4:3a:7f:85:50:b7:29:3d:9d:
                    b4:93:1b:eb:ad:bc:02:b8:2b:dd:f5:92:21:9c:87:
                    a3:c3:08:1c:25:91:63:29:1c:03:f1:fe:1b:b6:79:
                    d1:5c:4b:fc:70:03:ac:7d:f8:eb:c4:7a:1a:a5:19:
                    15:57:9a:b6:05:8e:7c:34:90:05:67:0e:5a:bc:44:
                    b1:c8:6c:92:e3:60:76:9e:65:54:2f:44:5e:52:13:
                    a2:f6:fe:43:ec:3e:a9:43:1f:8f:94:d8:a3:db:f2:
                    13:47:34:a7:48:c4:5f:27:3d:c7:98:ab:ec:c0:40:
                    b3:4e:47:97:ec:4a:9f:59:6a:e6:7a:46:21:f7:61:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9A:4E:36:5C:42:64:DA:D8:63:5F:9C:F8:B3:4F:22:B8:C2:F7:98
            X509v3 Authority Key Identifier:
                keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7c:35:0f:b0:90:f7:d7:8e:b7:bb:6c:24:1c:d7:47:e9:73:
         46:b2:b0:ed:e0:60:6a:09:af:b5:7c:0b:65:50:aa:7f:37:41:
         ed:cd:f1:42:2c:d6:d5:ee:c0:2a:ee:49:3f:c4:65:d0:2e:9a:
         e7:7e:99:29:9e:d4:65:b0:d7:f4:0e:8c:c9:ed:e0:a0:ab:24:
         41:ef:3f:da:35:e7:c6:3d:ae:e6:ba:b0:86:e6:36:5c:11:1f:
         6c:00:15:48:1d:33:e9:20:ee:8f:43:38:23:11:1f:a3:5d:e9:
         30:c8:9a:eb:75:f5:6a:07:6a:b4:94:fc:e9:0c:44:c5:f3:1b:
         48:e5:30:87:9f:22:3f:c3:6b:f0:cd:4c:63:65:c7:53:10:35:
         cb:d6:26:26:39:c0:42:63:4c:e3:23:e7:55:74:b9:4c:a9:01:
         c5:9a:ab:1e:37:b6:c7:51:67:1e:29:ee:de:c5:19:ef:9b:62:
         08:ef:23:89:c2:69:e7:af:a9:5c:c0:4f:bf:eb:1c:92:87:bf:
         5c:88:c8:a6:6f:65:76:a2:2c:cd:ec:06:24:da:8c:0c:18:85:
         bd:76:e4:b6:4c:66:51:bd:f3:06:e4:bc:ed:e3:a0:10:4f:ea:
         85:9a:95:93:54:85:6f:42:00:12:3c:36:78:05:63:cf:85:db:
         ed:05:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:41:54 2025 by rpki-client