Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File:                     EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier:          gB8KBWo9rW0anP4BqQ40j//qYAO4YYGKfvIlOzsSOEw=
Subject key identifier:   62:2F:AD:71:45:A5:59:4D:76:A9:F7:7C:33:8D:1B:4E:61:0A:35:22
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer:       /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial:       0197469E026D562CBDA2BA3173CC2D05399C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number:          157E
Signing time:             Fri 06 Jun 2025 19:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:49 +0000
Files and hashes:         1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: 9o455OPtXVcYBiaZR2Si1Kv8i5lqtKwpX6LY50AnPBM=)
                          2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:02:6d:56:2c:bd:a2:ba:31:73:cc:2d:05:39:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
        Validity
            Not Before: Jun  6 19:00:49 2025 GMT
            Not After : Jun  7 19:00:49 2025 GMT
        Subject: CN=622fad7145a5594d76a9f77c338d1b4e610a3522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:77:ee:b2:b8:5a:9d:d3:08:6f:79:2b:28:40:
                    e2:f6:a9:b6:76:96:ed:df:a0:31:c9:65:cd:9e:14:
                    59:76:c7:34:69:13:0c:b5:1a:40:43:4a:07:4c:77:
                    6f:09:d4:a5:e6:bb:e7:79:79:36:3a:ce:c3:0c:11:
                    b7:58:5f:01:ea:bc:5d:a0:93:a9:d6:ad:81:2c:b7:
                    da:0c:34:85:cc:11:f8:57:a2:d8:99:57:b6:d5:11:
                    f2:e0:2d:bf:8a:c9:c7:71:fe:61:c8:6b:c3:09:bd:
                    4c:e0:09:02:b4:73:cc:ae:ca:43:98:38:5e:d2:d9:
                    d8:34:24:78:84:f5:c4:81:3b:5f:54:af:70:91:43:
                    7f:27:d2:c0:70:37:1f:1b:33:0d:c3:12:b1:f5:ad:
                    9e:3a:c6:fe:c3:83:de:b8:b8:72:d9:c4:e0:ad:17:
                    cd:40:65:5c:7a:a9:92:63:09:25:03:68:ac:09:47:
                    82:78:3f:d8:56:ba:05:5a:b0:4d:2c:5e:a0:d0:3e:
                    d9:18:88:5f:26:59:2f:04:71:cc:a9:43:b9:51:2c:
                    53:fd:f8:1b:19:51:f5:10:ef:8d:f7:e7:37:c6:6a:
                    33:ed:3a:20:75:71:ca:2e:44:50:26:62:7e:40:0a:
                    ce:3d:32:ad:a6:6e:c9:e1:20:d3:6a:13:58:10:fb:
                    d9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2F:AD:71:45:A5:59:4D:76:A9:F7:7C:33:8D:1B:4E:61:0A:35:22
            X509v3 Authority Key Identifier:
                keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e8:f7:00:3f:50:0f:94:4d:dc:0e:c8:fd:00:ad:d4:de:24:
         1b:93:8a:2d:e4:a0:68:a7:22:c9:39:d9:79:e1:d8:50:da:a3:
         b7:33:db:51:c6:9b:de:26:af:66:86:0c:13:80:66:6d:d2:3c:
         29:f4:1e:81:5a:5a:b3:6a:b5:30:a6:a3:33:4b:20:77:0c:09:
         59:ef:c1:f0:85:81:72:63:df:be:f6:99:c0:bc:00:95:8c:0c:
         07:08:d6:cc:8b:cd:0f:3f:77:4f:ae:f6:ae:33:31:37:26:9e:
         44:fc:04:ec:9d:c4:e9:a2:a3:34:57:54:5e:75:8e:0f:e6:e9:
         8b:2d:1e:fd:42:8b:86:67:28:97:bb:14:aa:17:3d:1b:a1:33:
         cf:8f:82:bb:4d:81:d9:f9:ca:a7:99:3d:83:19:e2:b9:79:d9:
         8e:3e:44:4b:c8:46:31:40:ef:fc:bf:b8:4b:05:fd:9e:3b:10:
         95:e4:04:22:ba:08:c6:25:fe:8c:0b:cc:a0:e2:81:37:80:d1:
         c1:46:e6:10:26:e0:49:89:fe:8b:a4:46:91:7a:7d:d5:06:8b:
         78:06:03:92:e6:9e:27:47:3c:eb:02:1a:71:65:a0:4c:72:67:
         1e:3f:03:75:76:aa:5d:6a:c7:f1:c4:93:98:2e:5b:29:9c:61:
         2f:f8:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:20:41 2025 by rpki-client