Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File:                     q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier:          kDWFIL+z060Cv4kTZVMBJSVFnebAota1zFBKxkGVjcA=
Subject key identifier:   00:57:B9:DF:C1:8C:E2:05:9C:E2:3C:F4:44:7E:7E:A1:20:44:ED:7D
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer:       /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial:       019748C2D7CB3D30C8F1E425501F00A6133E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 05:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:18 +0000
Files and hashes:         1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=)
                          2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: ryRMxoyLrh17hsSq7UbNzwJFreYurBEf31fOD+EeFrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:d7:cb:3d:30:c8:f1:e4:25:50:1f:00:a6:13:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
        Validity
            Not Before: Jun  7 05:00:18 2025 GMT
            Not After : Jun  8 05:00:18 2025 GMT
        Subject: CN=0057b9dfc18ce2059ce23cf4447e7ea12044ed7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:5c:fa:ba:e5:88:f3:de:ba:d0:89:10:3d:
                    c2:e3:43:d9:50:27:65:59:0d:f8:22:20:f5:6f:47:
                    e4:84:d9:0b:c9:5c:4c:18:45:a5:98:3c:72:c3:1f:
                    ce:2a:c5:72:c6:8e:51:11:0a:24:6e:17:ea:28:05:
                    5a:a8:c0:95:55:fb:54:da:24:81:bf:16:a4:33:e0:
                    18:a9:71:5c:f0:fe:c1:79:20:fe:e4:3b:b8:55:0d:
                    ba:19:91:aa:cd:d7:fd:81:d5:14:11:6b:c4:11:c9:
                    e5:4e:ba:88:b9:8f:77:c2:7f:7c:9e:fe:fb:ad:4a:
                    22:39:fc:e2:eb:b6:99:6b:09:c4:a2:b3:06:86:fb:
                    b6:b4:53:d9:fd:dc:e4:41:78:3a:95:1d:93:0f:2a:
                    fa:dd:cf:85:bd:77:26:21:55:ea:25:eb:c7:a6:98:
                    e3:76:58:50:f0:68:90:fc:88:7d:fa:48:a9:46:ba:
                    87:d3:27:61:13:ce:2c:c7:01:14:bb:c3:b2:5f:81:
                    7c:cd:d8:92:a0:c8:01:f2:5e:8f:49:54:7f:f8:62:
                    4e:8b:74:74:92:5a:25:34:e8:86:d4:bb:7e:06:e8:
                    03:1d:ea:1f:38:f6:96:06:27:47:1a:88:0f:a3:1c:
                    42:c7:53:e8:86:6b:ba:9b:c9:46:02:91:a3:0f:ad:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:57:B9:DF:C1:8C:E2:05:9C:E2:3C:F4:44:7E:7E:A1:20:44:ED:7D
            X509v3 Authority Key Identifier:
                keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:52:60:5a:ed:46:65:0a:a0:97:00:70:0f:aa:74:31:12:
         b3:8e:b6:de:c8:94:d5:c0:b0:eb:c1:c6:9a:79:1c:8d:83:ed:
         27:16:5a:71:44:33:66:10:1a:f9:c9:c6:fa:fd:45:fe:19:8c:
         10:06:f7:e9:90:84:42:8c:f0:14:5c:8d:24:b5:ca:65:7d:4e:
         c4:71:9d:86:57:47:ee:71:26:cf:e9:3d:d0:db:3f:e2:13:9b:
         2b:98:36:cf:22:46:88:94:dc:71:a2:3e:40:be:de:c2:d8:17:
         45:19:33:41:bd:46:4c:d5:f5:55:a8:38:56:a7:cc:2c:3b:9c:
         d8:30:f4:14:59:b5:40:0f:6c:21:77:ca:27:81:9a:0f:a7:0b:
         2a:1f:21:d9:5c:22:a3:c3:8a:34:2a:6c:76:47:4d:a6:42:33:
         fc:54:29:ef:5d:b8:13:20:2f:de:46:dc:65:d3:ce:88:c1:6c:
         d5:87:fa:53:0c:9b:e0:2d:20:a9:76:0a:e7:73:b5:b5:cb:a1:
         0e:52:7d:00:52:f3:9d:34:f8:0a:3a:3f:a0:70:a1:9c:cf:82:
         8d:99:29:f5:e1:f9:ed:66:05:f6:bd:68:15:c8:2b:8f:19:96:
         e2:06:c3:db:f2:e8:5e:80:8d:38:68:93:4b:cf:3e:0f:e0:19:
         0d:74:a1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:44 2025 by rpki-client