Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File:                     RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier:          rf/W1yDCZJxftIeRMRKsGRHt1GeMjVXIco0QAxcXGkE=
Subject key identifier:   EA:B4:1A:1B:54:A0:C9:F8:FE:8D:CD:92:4B:44:FE:C8:C9:EA:82:DF
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer:       /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial:       0197477985CA1C20F343D39500E61CC7E5AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 23:00:35 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:35 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:35 +0000
Files and hashes:         1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=)
                          2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: VJpmuMPp8WzYW55psNAyr6E0kGYOdg+juj5dsrwXA+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:85:ca:1c:20:f3:43:d3:95:00:e6:1c:c7:e5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
        Validity
            Not Before: Jun  6 23:00:35 2025 GMT
            Not After : Jun  7 23:00:35 2025 GMT
        Subject: CN=eab41a1b54a0c9f8fe8dcd924b44fec8c9ea82df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:cf:73:52:ca:7d:30:b8:1d:33:f4:75:41:
                    4a:f7:6c:d3:df:22:49:0d:c8:fb:31:e0:10:dc:d6:
                    29:52:49:f1:d7:78:96:e5:bc:62:9b:d7:02:4f:22:
                    b9:5d:20:b0:13:37:b0:b0:49:8e:37:94:c0:38:5c:
                    3b:7f:42:6a:8a:be:6c:2c:ee:ae:59:85:3e:37:75:
                    08:43:99:2e:91:1b:e7:04:80:ca:a3:a9:31:d2:e9:
                    1c:a6:a9:21:fc:dc:9f:bb:92:f5:27:88:ca:37:d4:
                    a5:7b:1b:3c:2d:74:16:2e:41:32:96:71:5f:23:50:
                    a2:8f:ec:93:a5:fe:f6:29:78:61:df:6d:8c:34:91:
                    4c:af:30:47:cd:4d:e0:47:55:b9:12:d8:3f:4f:d5:
                    97:8e:00:1d:1c:25:9c:0e:cc:f2:3a:a8:89:88:37:
                    eb:e1:0e:b4:c1:7d:d3:ad:57:4a:57:ec:2d:c3:77:
                    06:c7:98:83:25:b5:16:15:b7:11:8a:29:46:35:98:
                    40:b3:5a:7b:a5:6d:e1:53:5a:d1:f7:ae:dc:8b:b0:
                    f8:8c:9e:09:c0:65:ca:d8:93:b9:b1:e7:2f:01:d3:
                    6a:e4:ba:a5:d4:97:dc:77:57:57:31:d8:99:99:23:
                    fb:5a:1a:4d:33:dd:68:d1:0c:93:2e:b2:c3:cd:7d:
                    71:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B4:1A:1B:54:A0:C9:F8:FE:8D:CD:92:4B:44:FE:C8:C9:EA:82:DF
            X509v3 Authority Key Identifier:
                keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:77:18:8f:81:e5:f3:08:98:2f:4a:ae:a6:6f:79:ec:69:da:
         14:1a:17:28:15:88:fe:35:1d:7e:91:4b:06:29:79:9f:89:ad:
         3d:25:16:37:80:ef:ef:ed:e6:71:b6:fc:3d:e3:a3:07:b9:98:
         53:fc:1f:15:b6:80:c1:6b:5a:df:bc:55:ab:6f:d4:46:c4:a2:
         2b:80:04:93:72:fe:3a:41:36:03:6c:f7:17:83:cc:29:0a:8f:
         ae:a8:53:02:3a:82:6f:39:a4:2a:78:a0:be:bf:3d:6c:31:19:
         02:ec:58:9f:c2:3f:29:e6:1a:95:f1:ce:a7:2f:a2:07:0a:bc:
         c4:04:a8:94:26:96:30:b7:67:cd:d2:b1:9c:2c:d6:d5:ed:d2:
         10:e7:63:25:91:ad:57:f3:7b:85:f5:73:54:be:b5:26:b3:60:
         9c:48:1a:32:4e:92:18:a1:46:f8:03:15:1f:95:c1:11:08:e3:
         e4:0d:cc:78:27:81:86:9e:d8:57:78:91:7f:bc:16:2f:8b:5e:
         2c:b3:9d:77:06:33:59:f3:18:4f:fa:07:15:53:dd:4a:7e:7f:
         5c:ec:16:42:f7:a5:68:a7:c5:74:21:18:f8:dd:36:d4:a8:2c:
         31:04:8e:c7:13:17:5c:b3:95:7e:70:0d:22:24:60:96:ec:38:
         85:e9:aa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:49 2025 by rpki-client