Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
File:                     1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json)
Hash identifier:          TQkZevSMxOau/UcdjDOrgLdx21hn2BksrVW7F7h4L4g=
Subject key identifier:   C5:7A:4F:0A:41:6D:C9:52:D4:42:10:77:E5:21:2C:F5:40:0A:F5:F1
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Certificate issuer:       /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial:       0197496806DBC3F63C23E4BF12B44C8B5F55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 08:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:43 +0000
Files and hashes:         1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: kJ1nzls7tRozZGvcyWqOrUCBYBltPNMRIzYbWBbMc40=)
                          2: 14BL-wRZn5qjKkbFlqqqjR24P9o.roa (hash: Q0+ry8DIoIvWS3jg4INnkBPjowRqJvM+1fF1Ae0B9HU=)
                          3: 3ZWEjgFplaR5kgIjaCqCP6tbjsk.roa (hash: mHlRrwC758D0HqzkPpUCJ65f9p+erZHSEHy+5VU4L4A=)
                          4: 4IxFRlMrY5M0eHHtZ2UOtZHqyV0.roa (hash: kG5O2uK7FPMtHKZqn4oBt9q3T41tqnOK54SmBGsdGls=)
                          5: M13OT1H85As_Tv9wWN39JJmrGq4.roa (hash: 3iWdknIUsVQtlNk63UCp+noj8Iq5EODisWGU9pdA1Es=)
                          6: XBvyNtAX_qyPJCtO1fGS20UqGjs.roa (hash: KHN56+uDjic5K6QfFI010t46UK2xFZQ5/zoeeWjaQBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:06:db:c3:f6:3c:23:e4:bf:12:b4:4c:8b:5f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
        Validity
            Not Before: Jun  7 08:00:43 2025 GMT
            Not After : Jun  8 08:00:43 2025 GMT
        Subject: CN=c57a4f0a416dc952d4421077e5212cf5400af5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:c6:d1:88:00:f9:6c:46:e9:9f:5a:d1:f6:
                    89:1b:c8:d2:54:dc:a4:04:32:72:c1:83:9a:88:60:
                    a9:a6:7f:0f:02:df:18:ae:61:2a:63:51:ee:6c:79:
                    c0:b0:c0:c6:d2:b4:2f:de:d1:53:72:50:20:aa:ac:
                    41:55:b8:a9:04:7f:62:c0:e8:5f:43:64:c8:ff:8d:
                    ea:c8:bb:93:a7:ec:3d:15:a3:ab:67:54:f1:4b:ac:
                    57:01:37:67:f5:be:15:fb:b8:52:7f:97:a0:42:95:
                    2b:56:2d:0d:23:2a:c9:55:25:9b:25:1c:fb:9d:dd:
                    2a:2e:35:9c:bd:e7:16:2d:39:96:0f:e6:82:45:d2:
                    27:b7:7d:10:41:b8:4b:c9:e3:fe:70:c7:d9:70:26:
                    5b:48:ab:7d:ba:71:90:cb:df:22:09:25:9f:c1:68:
                    6d:5b:3b:a8:14:7d:ee:dc:0f:57:94:f9:cb:46:17:
                    96:aa:3f:22:3d:f9:06:2b:00:0f:d0:14:de:36:db:
                    5e:d7:66:7c:12:62:05:f7:80:24:c8:7d:6b:2e:ab:
                    7e:db:b8:c1:6a:95:c9:24:31:d4:52:2a:26:57:de:
                    41:53:f7:88:20:7a:7f:10:0a:44:15:09:1f:6a:6c:
                    1a:ba:4e:5f:d3:8e:1d:1e:65:0a:3e:aa:84:49:97:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7A:4F:0A:41:6D:C9:52:D4:42:10:77:E5:21:2C:F5:40:0A:F5:F1
            X509v3 Authority Key Identifier:
                keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d7:da:3d:c5:be:94:0c:e2:53:f2:e3:3b:cb:19:b9:06:ae:
         2d:2b:eb:38:eb:84:c4:8b:be:7b:67:44:b7:68:6f:9c:7e:69:
         32:94:fa:b2:05:25:c5:f0:88:d2:75:0b:de:34:49:2d:38:86:
         41:ed:33:5c:1f:5d:9b:98:58:2b:12:47:a7:7f:bd:76:ea:50:
         cd:07:bb:ed:da:07:15:42:c3:19:3f:75:e6:a6:7d:ca:0e:fb:
         dd:2f:c8:ec:9d:43:d0:1a:3f:ab:00:1a:c2:6b:5f:00:d0:71:
         ef:66:74:12:62:59:b2:92:13:fd:06:9a:43:eb:af:37:cf:8d:
         e7:6f:f5:68:9b:14:53:27:cd:73:a2:bc:55:ac:b2:83:75:e4:
         ee:de:ad:9f:b0:3a:3c:3c:c0:9a:23:5a:3b:e5:96:e2:91:0a:
         10:c6:f2:e7:aa:25:8b:55:ec:40:1f:d2:63:cd:4a:e7:ed:52:
         b5:f5:01:0a:a9:0d:11:14:3a:2d:31:71:a8:fa:90:dc:b0:ea:
         0d:63:32:5e:31:6e:a6:63:06:05:5f:54:61:f9:0a:67:44:84:
         1b:f3:15:5c:c4:38:4f:10:04:60:e0:3a:32:08:5d:a0:9f:6e:
         84:ce:fa:1b:7d:b1:51:de:3b:d2:f4:d8:96:ee:9e:89:08:79:
         4b:9d:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:16:03 2025 by rpki-client