Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File:                     Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier:          6qTEHcKF4zdsZnzYLpULY+jy7mgfPbf9HD/25kJgIoo=
Subject key identifier:   CB:BF:21:9B:C8:CB:2A:85:33:04:08:2E:A7:66:C5:9E:91:23:1D:16
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer:       /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial:       019747B0B47D9651D60BB130321516F27A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number:          157A
Signing time:             Sat 07 Jun 2025 00:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:52 +0000
Files and hashes:         1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: oWoiJtzjZDM8vSRnkirpvxLQS1CvJGgf4HmNvBLHzVQ=)
                          2: ul5ni49--9XUdy3GQJ4QItwk2fY.roa (hash: 5VF37divuR8ckyhjHtdEIrjaJHoOsNcFhYqFs1LGC98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:b4:7d:96:51:d6:0b:b1:30:32:15:16:f2:7a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
        Validity
            Not Before: Jun  7 00:00:52 2025 GMT
            Not After : Jun  8 00:00:52 2025 GMT
        Subject: CN=cbbf219bc8cb2a853304082ea766c59e91231d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:aa:12:5c:56:65:80:0e:9e:d9:ce:29:35:
                    55:c2:63:42:98:83:42:03:f0:a2:5b:f8:82:f0:b2:
                    e5:e7:26:86:b7:0e:7b:33:91:53:55:36:c3:8d:13:
                    90:b1:2b:99:4d:44:43:4a:ba:e2:51:57:ec:e2:be:
                    53:96:41:a2:cc:02:1c:d1:33:98:b6:8a:ce:d0:2c:
                    6d:75:31:c6:5c:dd:61:4e:99:46:90:b1:1d:d1:9b:
                    42:b6:2b:80:70:19:a9:69:e3:bc:19:4f:9a:ea:ad:
                    28:c2:fe:a5:df:00:0b:8c:19:37:60:ca:e3:42:db:
                    2c:fd:7a:79:6e:a7:27:55:21:e7:49:dd:75:f3:e1:
                    29:24:84:6e:3d:25:1b:1d:a4:5f:a8:08:70:e7:b3:
                    6c:d2:48:d6:1d:73:1b:5d:15:a5:c6:85:f7:38:13:
                    cc:95:26:e9:af:79:73:e7:df:e3:16:6c:94:cf:bc:
                    36:1a:5a:62:bd:2a:f3:60:fa:0b:41:6a:5a:35:8b:
                    19:54:a4:c5:d3:0c:47:4b:02:ff:a4:19:46:9e:e8:
                    3a:15:3a:43:7f:5f:bb:59:16:f6:8f:2e:6f:aa:8e:
                    e2:6a:88:c9:0e:a5:f3:32:60:af:3d:07:7a:ec:d0:
                    fa:f8:89:91:b2:5d:09:73:ef:f5:2b:7d:d5:fd:52:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BF:21:9B:C8:CB:2A:85:33:04:08:2E:A7:66:C5:9E:91:23:1D:16
            X509v3 Authority Key Identifier:
                keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:af:b6:d4:6f:27:ea:7d:96:b8:79:ee:a0:6f:f2:d2:4c:e0:
         c6:2a:c9:74:2f:45:19:fa:b3:2e:ed:97:89:7c:c1:06:ef:b1:
         b3:51:c0:6c:26:d3:66:56:7a:a5:f5:0c:ad:3a:42:e8:1e:16:
         df:00:3c:e3:c5:50:1d:36:d1:23:ec:1e:16:3a:85:d9:29:ed:
         fb:45:1b:b9:5d:cd:88:c4:e7:31:2b:65:9d:d1:15:e6:fa:7d:
         12:73:92:76:f7:32:bc:3f:7e:29:3d:70:3b:6b:13:7e:fe:3b:
         21:2f:9e:06:f6:d2:5d:5a:30:be:da:29:68:40:8e:fa:ef:29:
         f9:2b:b2:b3:f1:1e:a3:0b:d1:e0:11:6f:fc:cf:d4:95:73:cf:
         39:d2:d6:b9:6d:30:b8:a1:1b:9e:96:6a:3e:0e:04:f8:53:bf:
         41:d6:20:23:82:a6:6e:70:df:59:52:ca:a3:89:d5:e6:40:72:
         e2:cc:89:13:30:f1:8c:dc:c8:30:77:fd:85:34:7b:bc:4c:c4:
         05:6f:49:46:b9:c7:24:04:85:a2:14:a2:ce:eb:6c:c6:c4:b6:
         d0:e3:84:80:ca:c1:15:6e:cf:31:16:fb:19:b0:4f:45:b7:03:
         c3:99:97:3c:68:fc:b1:a9:cd:e9:f1:b0:b1:81:16:6c:dc:a2:
         19:a1:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:18:32 2025 by rpki-client