Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File:                     M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier:          XWICV5aIPWXnIqWl9+3ce5uCJgFfH4JcskZEI7wnWIs=
Subject key identifier:   57:F7:26:A3:9A:5E:92:83:8F:6C:CE:CC:DF:1C:45:03:60:1C:82:77
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer:       /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial:       019745F8D3E0E4AD0919FA468FDE23BC9C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 16:00:24 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:24 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:24 +0000
Files and hashes:         1: HqUdNukgCT5prgnM_K-f0-if2vo.roa (hash: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=)
                          2: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: cwXLoYUw0nDjn42GP/4DMDVTU5UTPts7GIrPNLDsYWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f8:d3:e0:e4:ad:09:19:fa:46:8f:de:23:bc:9c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
        Validity
            Not Before: Jun  6 16:00:24 2025 GMT
            Not After : Jun  7 16:00:24 2025 GMT
        Subject: CN=57f726a39a5e92838f6cceccdf1c4503601c8277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:d8:03:50:7a:48:38:f7:de:a7:7f:87:c5:
                    cd:ba:af:6a:65:e5:0b:bd:ef:df:4b:3a:6c:e4:80:
                    81:b7:65:7d:91:b0:5f:76:d6:3d:72:96:06:fe:14:
                    97:dc:3e:c6:b3:73:a1:b5:b7:2b:39:c3:cc:7d:46:
                    51:5e:25:15:72:3e:28:79:71:6c:08:cb:d1:2b:fc:
                    ca:64:3b:c4:4f:c4:26:1e:6d:c3:5e:ae:68:8a:d0:
                    8a:41:a2:9d:2d:d2:c5:0b:dd:3b:a5:5f:19:ee:c8:
                    a9:68:c2:31:1a:91:11:f4:62:ec:77:90:8b:05:55:
                    41:ad:2f:af:d9:01:7e:6e:b6:53:14:2f:a6:a8:7a:
                    a1:47:2c:2e:04:db:64:0c:af:04:53:aa:5e:f7:d4:
                    cc:dd:ac:41:4e:26:9e:c2:0d:e8:11:f5:be:83:ee:
                    33:46:64:9b:03:e0:fb:b5:ec:35:9d:d7:76:e7:c7:
                    4c:f3:cc:1b:6b:46:56:fd:06:e0:5c:bd:1e:63:19:
                    8d:18:59:6a:0d:63:54:1e:09:93:49:d2:1c:34:dd:
                    70:28:e4:89:39:35:bc:9a:fb:d4:00:f5:75:25:7f:
                    29:72:85:74:2a:61:32:3e:a7:45:c0:66:89:3d:89:
                    a5:e7:6d:66:da:71:c2:cd:0a:53:b7:89:ea:f2:46:
                    19:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F7:26:A3:9A:5E:92:83:8F:6C:CE:CC:DF:1C:45:03:60:1C:82:77
            X509v3 Authority Key Identifier:
                keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b6:b0:c5:32:aa:96:91:6b:78:39:e6:6a:2d:0a:73:e2:a9:
         35:ed:67:bc:3f:a3:f2:0d:d4:94:3f:11:e4:04:b2:d2:1d:89:
         82:4d:85:3b:80:ca:d4:d8:ed:83:11:60:d7:5c:78:ca:6c:81:
         dd:27:02:19:a5:0e:7e:0e:c7:4c:95:49:bb:94:d1:12:3e:54:
         f8:a2:55:12:4a:30:ad:67:3b:dd:ea:5d:fd:21:79:98:cf:55:
         e0:5a:7a:49:c8:ea:3a:de:bf:05:93:a5:b2:8a:5f:f5:00:27:
         aa:ef:a0:39:51:65:35:70:ab:a0:6c:9c:63:b4:da:50:1f:d3:
         42:79:41:f2:81:ff:3c:a6:43:8b:1c:54:25:42:31:31:22:12:
         7f:79:9b:7f:4d:15:6f:6a:c7:fd:93:ed:13:c2:14:05:4c:7c:
         d5:10:f2:ee:9d:c5:e7:0e:b3:41:c9:e2:b5:7c:c7:eb:73:6a:
         23:78:88:ee:a3:ae:7d:7d:78:5d:47:3c:5c:11:24:bb:77:b3:
         76:e4:79:c8:cb:86:cb:ae:f5:4d:ee:5a:d9:3b:af:9b:90:62:
         e5:f4:85:ee:41:71:ce:44:6a:e3:8c:63:bb:b8:28:dd:26:5d:
         49:e0:27:29:87:31:93:75:74:f4:5a:36:ca:28:e2:05:b6:ab:
         71:36:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:22 2025 by rpki-client