Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File:                     RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier:          xNHeGEtDgJPt/JmBedyFQMajkIe3mNyIkCcZeLIS+s8=
Subject key identifier:   83:D3:8E:52:B4:52:F4:1F:00:1A:18:87:86:A0:B7:E8:08:C8:D4:A4
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer:       /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial:       01974E57F1B898C30E04B4B72AB50F31FE15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 07:01:15 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:15 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:15 +0000
Files and hashes:         1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: p1wjMu4II/33LgYB8U6kOTj+ZR0hqs69E24IbSDST8E=)
                          2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:f1:b8:98:c3:0e:04:b4:b7:2a:b5:0f:31:fe:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
        Validity
            Not Before: Jun  8 07:01:15 2025 GMT
            Not After : Jun  9 07:01:15 2025 GMT
        Subject: CN=83d38e52b452f41f001a188786a0b7e808c8d4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:18:69:83:2d:5b:b3:7f:47:c5:10:4b:9d:
                    e2:c6:a4:47:18:25:8c:8f:7c:d0:9a:0c:b7:20:e7:
                    1d:11:77:a7:5c:91:f6:ed:71:1b:4c:9e:e1:53:0a:
                    71:60:26:c8:6f:84:bc:06:cd:61:fe:07:4c:d5:42:
                    01:96:e5:ce:ad:86:70:33:2e:a7:b1:0a:9c:6b:ce:
                    79:3d:11:0e:64:c0:ed:c7:01:0f:de:22:9a:a6:ce:
                    85:6a:70:30:df:13:a3:d3:e2:36:b5:6e:1d:9d:ac:
                    59:63:0f:04:ff:e6:14:12:29:72:0a:c6:10:bf:cc:
                    a1:1d:cb:00:ea:08:21:be:43:01:d4:c5:40:44:7a:
                    f1:fe:d9:5a:e1:74:a5:75:1c:61:47:d1:25:d6:f1:
                    90:7d:76:85:1b:fa:1c:22:df:1f:0a:49:00:d7:50:
                    fc:52:2d:8e:94:65:3d:d2:37:fe:1c:e0:25:03:5b:
                    8d:67:d2:75:95:cd:21:82:3b:94:32:89:8e:2c:6d:
                    36:ba:e3:a1:cb:87:a9:af:b9:6e:65:a9:a7:3d:86:
                    8b:77:64:67:88:b0:98:0e:1c:f4:ac:3b:8e:4b:6f:
                    0c:6d:e7:14:16:14:ae:c9:ee:e7:72:ee:14:72:de:
                    26:21:46:20:49:0c:b0:af:c6:5a:79:a9:12:7e:c4:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D3:8E:52:B4:52:F4:1F:00:1A:18:87:86:A0:B7:E8:08:C8:D4:A4
            X509v3 Authority Key Identifier:
                keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:60:fc:4e:c3:31:94:67:cf:f0:fb:81:92:fb:f7:05:62:b9:
         89:50:eb:c6:26:6a:94:4e:0a:dc:5c:02:fa:2a:dc:bc:aa:5e:
         69:70:d7:c7:47:61:a1:f5:a5:b0:e8:f9:0e:05:1c:16:ba:c0:
         ff:5b:a9:a0:8d:8d:d5:ab:84:50:cd:00:aa:27:8c:fa:27:3d:
         0b:48:75:5f:8a:90:15:5c:b2:c9:48:c6:1a:50:5f:86:85:81:
         d6:e5:82:69:91:f8:79:5d:6f:56:cb:93:0b:8c:fb:6c:32:a5:
         41:5e:e2:dc:9d:53:b1:9a:d5:1a:6a:7b:35:d2:a0:2f:c2:ba:
         19:e9:d4:cf:c8:9f:f4:cc:b6:a2:a9:42:79:27:9b:9a:9d:f2:
         78:37:a8:b5:d5:61:4a:19:9d:e3:df:4a:fd:4f:b9:91:52:2a:
         df:2b:e2:26:4a:7f:04:b8:3a:19:92:e1:86:6d:1d:57:ca:01:
         bf:5d:ea:98:95:6c:1c:ed:8f:3e:9a:e5:89:c0:ea:44:cf:a9:
         33:35:e6:6e:f1:f4:3e:57:d8:2b:ca:e8:e8:a2:8f:2c:ef:d2:
         a0:15:0f:16:80:b9:39:80:ec:4d:06:6a:4f:b2:e5:2c:02:f8:
         eb:ed:41:a8:9b:a4:35:22:16:2e:ab:87:4c:5a:8c:62:00:70:
         48:23:d9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:04:09 2025 by rpki-client