Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
File:                     TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json)
Hash identifier:          6Krxr3HptaYcdprOQB0gvsBKw4OZb31ozIteP3d1opk=
Subject key identifier:   E9:8E:61:31:F2:0F:5C:B7:E9:62:BC:F0:6E:33:E7:5F:7F:F3:AA:13
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Certificate issuer:       /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial:       01974B1F51A1FBBF04F81359E4AF2B83665B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 16:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:33 +0000
Files and hashes:         1: 9dHpkAlOL0XgkLxchS4Qy2sMNCs.roa (hash: g9vMbBt1/drUDiVGZvjhkatTyph0Mun8c4A/qeNjgzE=)
                          2: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: 9XedxqORj9wq9LfUu2XVdbzIYhxyq8chAYDqmBBdde4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:51:a1:fb:bf:04:f8:13:59:e4:af:2b:83:66:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
        Validity
            Not Before: Jun  7 16:00:33 2025 GMT
            Not After : Jun  8 16:00:33 2025 GMT
        Subject: CN=e98e6131f20f5cb7e962bcf06e33e75f7ff3aa13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c0:d8:08:0e:24:6b:12:60:20:f8:54:d2:57:
                    a1:62:73:c4:04:30:cc:c5:7e:46:cb:a2:62:49:71:
                    c0:7d:7f:d4:76:8e:60:cb:ba:ea:e6:b5:04:3f:0e:
                    45:fb:98:f2:0f:ee:59:26:51:b0:a8:61:f0:dc:07:
                    cc:38:cd:ba:e7:57:53:1f:2b:bc:61:d0:1e:14:13:
                    0e:bd:3b:04:a8:20:3f:af:db:74:86:36:5f:f6:47:
                    bd:08:d1:bb:7e:c9:5c:45:7d:4e:16:3b:5e:54:98:
                    8d:97:18:85:17:5a:2e:3a:2d:10:ae:9f:01:e7:e7:
                    72:c6:0e:b9:18:d8:54:58:65:f6:b7:6c:c0:dd:3e:
                    f3:50:98:2f:b4:81:0d:d6:27:0a:79:cb:20:b0:a6:
                    59:72:3f:de:a6:59:b6:fa:53:51:ca:81:0c:b9:87:
                    bb:f4:7e:61:91:02:f0:a2:b1:5b:3e:24:f3:8f:3e:
                    94:89:3a:59:de:c5:e4:bb:b5:0e:0f:7b:eb:cb:39:
                    8a:83:f0:0c:c4:02:fd:5f:aa:39:fb:63:e0:a4:82:
                    8f:30:a0:f7:8d:89:dc:6d:01:12:89:f2:c7:75:50:
                    42:4b:f3:8f:69:be:81:46:b8:0e:4e:9c:b4:1a:61:
                    2b:30:4b:a7:f9:14:d7:8a:8e:ba:69:18:b6:7a:42:
                    24:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8E:61:31:F2:0F:5C:B7:E9:62:BC:F0:6E:33:E7:5F:7F:F3:AA:13
            X509v3 Authority Key Identifier:
                keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:1b:94:aa:1b:a1:e5:8b:f0:bb:15:da:94:63:92:e9:55:6e:
         89:2a:b2:62:fd:3a:b1:92:7b:09:4c:f3:07:fa:c6:dd:3f:44:
         ec:bf:e5:6e:07:98:f9:e6:27:f4:37:20:c8:93:f1:ba:a1:ec:
         77:49:99:e9:22:65:1c:b0:47:cf:1c:8b:cf:7a:bb:ac:5f:88:
         2b:12:95:db:61:a5:c0:4d:0e:7a:71:ab:8c:41:57:d8:fa:27:
         7b:64:42:61:a4:7f:40:3b:6d:94:64:9a:f4:15:9d:da:7b:bf:
         5a:3a:ff:39:28:ef:1c:54:7f:85:67:eb:bc:c3:29:c0:dc:12:
         51:bc:71:97:ab:5d:dc:20:24:35:6e:aa:47:e5:77:5c:cc:8c:
         a5:62:89:72:8a:df:5b:a5:3c:4c:cd:09:99:b6:60:b2:ea:e0:
         2b:cb:8c:cb:a7:65:9c:5a:77:d6:5b:5b:23:db:2d:96:2a:4e:
         08:7c:b5:99:01:23:44:cd:51:0d:58:8b:df:a2:48:5c:b3:3c:
         6f:2e:11:c1:2f:6a:89:91:89:53:d9:3f:8c:dd:81:e4:82:fc:
         7e:6a:32:4e:37:c3:f0:d2:d7:34:c7:cc:7f:35:65:30:ce:80:
         5d:02:9e:87:37:41:2e:cb:96:f8:af:a6:26:ba:65:74:3c:d4:
         9a:9a:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:34 2025 by rpki-client