Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          pVh+Th2xwAdFMv6CFJi2iT0Jf4KVY0t38QO/ZAYFaGI=
Subject key identifier:   43:2C:90:34:81:2D:60:89:42:37:BA:E8:2C:CB:3F:6C:02:9B:E6:4F
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       01974A43E42A0686C144B8030FB16739951C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 12:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:52 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: 5UophvEYGjRYZDkEwo+Mpm4Pms0AYMwkKQQ8lpn7hE4=)
                          2: 9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa (hash: xWmWZ6mNV40OXaNhlTROFGFnywkkEouFvFZTD1JJjZc=)
                          3: MXxh0YHPMrk5arTCf3q6sfloz_s.roa (hash: N+z7kc9squE6rbdRMbjpnb079oubXEpLhtNwZjifRAU=)
                          4: PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa (hash: kW2DqnWjgsO28lEW1wrqQlb2aOCM46/dPtOZpgqTEW0=)
                          5: q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa (hash: TuJ+a/fTT9f6d+FkeMmzYXOZB23+5zFwPl6nA0Nxjxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:e4:2a:06:86:c1:44:b8:03:0f:b1:67:39:95:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Jun  7 12:00:52 2025 GMT
            Not After : Jun  8 12:00:52 2025 GMT
        Subject: CN=432c9034812d60894237bae82ccb3f6c029be64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:12:e8:17:e3:f0:b4:16:58:61:ea:2a:25:
                    13:03:ca:18:7f:2f:45:fe:92:a2:b9:6c:48:02:27:
                    a8:b5:b2:85:ad:86:9f:81:f8:d4:e3:a5:82:d1:86:
                    de:cf:6c:98:c0:40:4c:ba:97:fb:c9:9f:78:03:98:
                    08:22:88:e4:d7:e1:39:4d:e7:88:78:dc:87:44:92:
                    28:28:b9:9b:ca:b8:10:31:c4:7e:58:84:8b:4f:68:
                    9e:92:ea:19:05:09:af:b7:86:03:3a:94:51:fe:36:
                    91:53:e5:31:18:06:f9:e1:5c:86:78:51:58:4a:6a:
                    b3:f5:85:8b:71:19:ea:43:8c:1e:8e:0a:76:17:2f:
                    ba:c0:fc:6f:01:2c:45:a6:c8:24:e4:6d:2c:87:43:
                    59:8c:a6:af:a2:65:70:dd:06:00:4a:ae:50:48:0a:
                    9b:71:fa:bd:7f:75:27:07:28:0f:56:29:39:2d:5e:
                    19:2c:25:43:01:6b:ac:09:97:63:ba:5e:91:ff:28:
                    44:06:68:76:46:89:f1:c5:dc:30:c2:0a:31:e4:41:
                    19:4e:36:92:db:38:2c:ab:f8:4c:dc:59:41:d4:cd:
                    7f:ff:1c:06:53:93:04:d8:b1:5b:46:21:2a:68:94:
                    cf:be:d6:2b:a6:ce:7b:28:c5:44:cd:6e:f2:c8:51:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:90:34:81:2D:60:89:42:37:BA:E8:2C:CB:3F:6C:02:9B:E6:4F
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:60:3a:38:b9:7d:c8:15:ed:ae:ef:50:58:f1:93:6b:92:1e:
         bc:7d:86:37:3f:9d:f2:88:af:1a:02:70:34:d6:7e:3d:b0:48:
         23:77:e1:8a:12:41:2f:ec:65:3f:54:fe:08:c8:1f:58:8d:75:
         45:0a:4a:cc:df:4c:37:22:82:67:e1:6a:7e:15:07:b4:f7:36:
         db:85:35:ec:99:7f:2c:e3:1a:eb:3f:83:58:fc:8b:7e:b6:bc:
         70:37:b0:9d:b3:4a:f2:75:01:d3:ab:39:53:c9:2b:b4:d8:87:
         67:09:a2:c8:5d:da:c2:bc:e3:b1:9a:7e:81:4a:39:84:45:03:
         2e:53:a8:b0:ff:c7:09:b4:09:c8:6b:cb:d2:fe:a4:3d:aa:2e:
         b3:16:30:6e:5d:6f:ca:c3:8d:d2:a4:5b:f4:52:6f:0a:a3:f2:
         4c:4b:99:9b:95:b9:f5:24:aa:ab:4f:b5:70:98:97:d6:26:64:
         88:87:a0:a5:19:ad:0c:de:30:9b:62:be:14:33:92:b3:5f:81:
         91:af:6c:e9:40:bb:78:ed:01:80:6f:91:ce:e8:b3:97:35:06:
         65:f5:b5:42:b4:a8:62:a9:ea:19:a9:58:b3:9c:f1:a0:5a:4d:
         12:53:eb:76:f7:36:5b:3e:68:9f:4c:da:e3:57:f4:1d:e6:11:
         a5:21:d5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:07:44 2025 by rpki-client