Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File:                     p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier:          YZ7GdyoCjI9Uj7RTS6HLxxkpX5G/R3qaV6X8nbGMfxA=
Subject key identifier:   BA:44:00:58:50:93:84:69:F2:65:BD:2E:E8:43:C7:A2:00:AD:1B:6A
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer:       /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial:       01974C695EA9866116C756B15FCA4C78CFCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 22:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:03 +0000
Files and hashes:         1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: CacgcFqWIUos9y322fl20Kvt4ves9i2Er5grltDNXzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:5e:a9:86:61:16:c7:56:b1:5f:ca:4c:78:cf:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
        Validity
            Not Before: Jun  7 22:01:03 2025 GMT
            Not After : Jun  8 22:01:03 2025 GMT
        Subject: CN=ba44005850938469f265bd2ee843c7a200ad1b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:8b:80:ea:80:e3:74:48:ae:3b:77:cc:a6:
                    dc:ab:e0:c2:fe:7d:7d:f7:1e:53:0b:58:0d:b6:c8:
                    01:71:9c:11:7c:97:d3:c6:ca:30:04:ad:91:7a:3b:
                    95:e3:34:a2:18:dc:5d:d5:25:a2:33:d6:b1:5c:f3:
                    dd:13:a7:80:5a:f0:e4:e6:31:4f:b1:38:90:c7:b6:
                    cf:79:0b:5a:5a:1b:de:26:a1:7d:3c:b2:f1:f6:d9:
                    a2:05:80:25:4f:21:28:26:4f:9f:b0:97:80:8d:68:
                    93:44:82:34:eb:0f:d7:24:4a:9b:2e:3e:cf:b1:36:
                    8d:b4:45:6e:ca:0c:9f:7e:5e:bc:d7:3c:56:64:e5:
                    db:10:a7:39:ed:b0:c9:3e:59:15:93:be:dd:e9:5f:
                    50:44:39:a0:0e:83:72:38:5f:d8:3b:8b:0f:a8:d7:
                    01:74:ba:d3:ec:c0:d7:f5:14:59:ee:75:c9:31:8a:
                    6f:a3:eb:db:f5:ce:7d:ea:d2:52:95:43:5b:cb:68:
                    49:cb:cc:ef:cc:62:2d:9d:42:de:81:b3:fb:8d:8e:
                    98:77:d0:0d:b4:e1:57:89:f9:2c:49:38:f5:e1:75:
                    8e:5c:31:db:74:b9:b4:5c:e8:4a:38:e3:6c:ec:2f:
                    61:64:a6:aa:5e:84:bc:fb:4b:3a:05:4b:0e:36:d8:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:44:00:58:50:93:84:69:F2:65:BD:2E:E8:43:C7:A2:00:AD:1B:6A
            X509v3 Authority Key Identifier:
                keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:03:66:45:e5:6e:5f:09:f4:0c:25:4b:a1:b6:e8:54:6d:
         fa:d2:d1:d0:f8:64:77:00:94:9e:74:62:9a:34:a7:57:b0:d1:
         22:3b:c6:2c:6b:2b:e5:97:9c:da:6c:ab:04:94:01:91:18:1d:
         65:81:bd:6f:8c:ba:0a:d4:58:82:8a:ce:0e:51:f3:74:74:ea:
         e8:44:cf:65:5c:3f:a0:58:cc:e7:4e:9e:32:dc:93:99:9c:75:
         78:08:f9:03:7a:88:51:9d:16:98:6d:29:f7:85:67:40:74:17:
         46:1f:14:db:c2:ce:67:b6:c1:cf:38:b4:b9:6b:d3:f4:ef:88:
         c2:e1:21:45:63:b0:6c:e7:68:05:a9:0f:34:bb:67:f2:f4:ce:
         cc:71:9a:88:15:03:9c:d6:7a:d7:1d:9b:b8:15:1c:69:ee:c1:
         c0:ba:d3:62:19:a0:24:8d:ef:7f:38:5e:9d:88:fb:7e:1e:fe:
         02:32:1c:dd:65:d0:49:36:73:f4:ea:ce:1e:c0:a5:38:71:15:
         86:14:55:df:cc:af:1a:d8:d2:ec:9f:ba:f3:7d:9d:76:09:73:
         e8:c4:66:1d:e4:00:96:fb:33:84:c9:86:71:c1:bc:d3:42:30:
         4e:87:97:09:66:f7:79:17:af:d1:82:6c:8f:03:ae:ea:63:eb:
         03:63:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:50 2025 by rpki-client