Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File:                     8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier:          5otAy6ATso1AJiWA8OQM5ujPozZGVuIlERvLqKSgrEk=
Subject key identifier:   E7:BA:91:F6:64:36:10:4D:0D:61:30:4D:CB:CC:B5:96:27:D2:31:A7
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer:       /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial:       01974A7BA9426057FD730C5F94EDEAA27F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 13:01:47 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:47 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:47 +0000
Files and hashes:         1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: npkhu26EvWhI/i0zaniIlTmv7p58pTiu5vqRc2/cMcM=)
                          2: M0x4P-eqDOpLCOY_5rdYfIPAYXc.roa (hash: Hz1NV4C1yE6vehHnBgkxV2TE2v53JgdybplNGjL2XYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:a9:42:60:57:fd:73:0c:5f:94:ed:ea:a2:7f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
        Validity
            Not Before: Jun  7 13:01:47 2025 GMT
            Not After : Jun  8 13:01:47 2025 GMT
        Subject: CN=e7ba91f66436104d0d61304dcbccb59627d231a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:96:35:da:76:e5:c7:86:ea:89:4b:cc:60:
                    aa:19:8f:ee:6d:e1:bf:84:ee:4d:67:f1:c5:ca:03:
                    28:b6:b4:2f:a7:a8:f4:96:45:14:52:f0:f2:ad:08:
                    52:43:48:e1:f8:12:9c:30:3b:d9:d2:06:dd:b4:b1:
                    b3:35:2b:1d:42:bc:96:21:50:8b:30:a0:30:7b:d8:
                    dd:21:9d:29:52:59:05:ea:35:ea:1e:81:98:7f:3f:
                    a8:3a:8f:4b:f0:bb:55:91:cc:8c:73:bc:22:7a:79:
                    7d:03:2d:ec:74:94:13:49:8f:ae:b3:11:22:65:ee:
                    a5:7c:42:e0:3b:f8:e3:ee:61:3a:57:c8:1c:8d:da:
                    cd:08:1f:80:db:29:68:18:ea:bc:2a:03:0e:b3:37:
                    fd:93:04:13:4d:3c:4c:ac:cd:a4:92:ea:49:f6:78:
                    8f:ea:1e:15:23:8d:f2:18:31:eb:3c:47:5b:55:be:
                    b3:d1:5e:84:10:14:36:0f:0c:13:fa:34:3f:23:ea:
                    69:d7:c4:b1:79:00:2f:79:8e:a2:3d:71:db:4a:ad:
                    b3:22:91:9b:35:cf:96:8b:0e:c9:8c:ef:34:33:9d:
                    4d:84:83:17:de:6c:9c:0f:72:89:fd:5a:a8:04:75:
                    fa:58:cb:5c:27:4c:62:34:b5:05:61:95:27:96:8d:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BA:91:F6:64:36:10:4D:0D:61:30:4D:CB:CC:B5:96:27:D2:31:A7
            X509v3 Authority Key Identifier:
                keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9d:2c:eb:29:2a:70:e7:d3:5a:2c:7c:61:f6:0e:f0:68:96:
         26:77:a3:cc:b8:96:f2:ec:38:63:a5:cb:2e:63:b0:4b:bf:44:
         13:d0:7f:ab:0f:0c:0d:fb:6b:90:a2:ac:73:72:ea:cb:ca:e4:
         8d:ae:30:65:b8:4c:88:e5:f4:71:6d:65:ef:0d:f9:e0:b2:42:
         4a:bd:5b:d5:da:9f:da:b0:8d:18:34:c7:9f:4d:9d:d3:4e:18:
         ff:2a:6b:31:74:dc:8e:c4:bf:1b:3a:6d:90:7f:0b:30:dd:bb:
         67:91:5f:cb:3c:c3:85:be:46:9b:b1:5b:fa:03:51:9c:52:f6:
         67:4c:2d:15:fb:1d:58:ca:11:18:4e:bc:64:06:07:4c:d5:d4:
         6a:82:bc:b1:6e:32:dd:cf:0a:ae:02:df:e7:13:ce:9f:a1:ef:
         aa:af:5a:d0:d4:bd:56:15:bc:51:9c:71:89:8b:67:3e:59:c0:
         e3:ee:b5:3f:28:50:58:c6:2f:37:3d:d2:dc:3a:65:e2:8c:6a:
         8c:ea:91:ea:17:35:17:75:74:cc:89:49:f0:8d:7c:78:23:78:
         79:33:3d:d4:7d:15:18:90:d2:32:06:c0:a3:2d:74:e1:e8:a2:
         42:b4:4c:c8:3d:3b:c8:45:07:4e:cf:ff:bf:4c:ce:57:61:81:
         db:8f:05:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:13:53 2025 by rpki-client