Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File:                     pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier:          iaVJlel0gD08wj1V2yBi0fre5s3bOEsYCdfiQYfn3Ig=
Subject key identifier:   9F:E8:15:B6:14:FA:82:40:3F:D9:15:62:8D:BA:91:5B:C3:FB:6D:DF
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer:       /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial:       01974C68BE9E0B9B59AB5AB31B564843A8E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 22:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:22 +0000
Files and hashes:         1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: gSJJUE1yM82QzTX242/XicR+9ik9sQYJqnw/c3vlw8U=)
                          2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:68:be:9e:0b:9b:59:ab:5a:b3:1b:56:48:43:a8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
        Validity
            Not Before: Jun  7 22:00:22 2025 GMT
            Not After : Jun  8 22:00:22 2025 GMT
        Subject: CN=9fe815b614fa82403fd915628dba915bc3fb6ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:5a:55:74:2f:cd:ae:23:62:db:e6:1c:8a:
                    c1:de:e3:4f:27:9a:ea:c3:4f:e9:fe:d9:9a:13:2a:
                    53:98:1d:21:1c:ab:06:18:b4:bb:13:85:c1:f9:f6:
                    eb:83:7c:fd:9f:77:b5:dd:00:24:a9:d4:38:47:db:
                    b0:ad:d3:5c:24:ef:74:77:c4:94:90:5c:0e:be:ed:
                    77:a4:9b:79:0b:d8:52:dd:ca:d4:72:f2:31:c6:5e:
                    6c:2e:5a:52:dc:15:9b:d1:08:e4:30:26:0a:2e:f4:
                    d8:87:9d:63:a6:0d:99:6e:f2:8a:fe:d6:b3:3c:6f:
                    4a:a5:5a:93:8f:de:01:64:c1:98:f1:34:b1:15:b7:
                    9f:53:ab:d2:cb:28:f3:a6:80:c6:b2:04:c9:23:bb:
                    bb:45:df:47:c5:16:06:8e:0f:f3:83:28:99:c4:50:
                    fc:fb:42:9d:d4:d5:5e:3a:0e:42:87:6f:df:05:ac:
                    82:dc:c3:df:3a:c6:2e:32:64:c6:8f:69:1a:38:64:
                    78:7e:19:91:8d:5a:42:67:5c:c2:5f:4e:93:51:8e:
                    93:5d:0d:67:a1:6e:12:11:6a:ae:33:67:ce:c5:cc:
                    93:7d:90:2c:0f:f2:ba:a6:12:f8:ac:d7:1e:dc:4e:
                    63:5b:4f:d4:0f:c7:c1:df:b2:1c:0b:e4:8f:4c:04:
                    ab:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E8:15:B6:14:FA:82:40:3F:D9:15:62:8D:BA:91:5B:C3:FB:6D:DF
            X509v3 Authority Key Identifier:
                keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:5f:29:1a:d7:4e:bf:e9:4c:f2:58:11:1f:d5:d5:11:f8:
         df:c6:85:34:b3:f3:1e:b1:4c:3a:da:13:84:07:2d:47:f6:18:
         f1:2c:87:eb:94:82:c1:31:59:b7:3a:ef:ab:0d:8f:fa:c5:01:
         c4:ea:20:b2:b4:f6:80:84:ec:ad:ad:b5:6c:1e:b5:d6:06:88:
         9a:01:50:46:6f:de:e9:2e:12:da:5d:7c:72:cd:55:a8:c6:38:
         d1:72:52:59:53:fd:3e:c1:5a:0f:d1:f1:4c:c1:8b:a9:e5:23:
         3f:8d:09:a7:5f:28:78:2f:7b:f0:23:04:77:d2:8d:87:0a:1c:
         ee:c1:e6:7f:d6:8e:01:58:4f:46:de:f6:1b:49:6d:0a:0c:5a:
         56:4b:20:65:f1:00:c2:ca:48:a2:8e:ce:4d:10:e4:40:df:97:
         75:30:48:61:3c:a5:c8:1b:41:80:d6:a1:3b:c8:41:7e:3b:cc:
         c3:f2:41:d3:aa:a2:27:c6:95:fb:bc:61:13:7e:7d:2e:e0:1e:
         08:2d:ad:ba:d7:1f:93:90:8f:cf:39:87:b4:35:e4:a7:d3:a1:
         78:26:6a:41:e3:4b:f0:b4:f3:69:a5:23:47:0e:bb:a9:9a:a8:
         5d:7f:11:7f:85:ec:5b:ea:cf:fa:dc:dd:c4:76:eb:97:71:57:
         18:54:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:46:20 2025 by rpki-client