Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File:                     kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier:          bpAcFG5qi09NBBhzRAUncKUiexBdBiCcNvMIBYRqsWw=
Subject key identifier:   23:35:84:EB:77:CA:58:96:1E:16:3B:4D:F8:26:F1:AB:48:CE:E1:02
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer:       /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial:       019746D4BA6FF458F23216388E592FC39012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number:          157F
Signing time:             Fri 06 Jun 2025 20:00:35 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:35 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:35 +0000
Files and hashes:         1: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=)
                          2: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=)
                          3: ZgG20-53jQJwsyA9Uj-HDlUNiyA.roa (hash: r4Yw7FV6MragLYSnWbxNhJIL4Bz5tpt7zooYhdKRX2U=)
                          4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: N+jxk9vQmZFQApHLiK0KIiWZclL2ZT3l1R2h7w3bRBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:ba:6f:f4:58:f2:32:16:38:8e:59:2f:c3:90:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
        Validity
            Not Before: Jun  6 20:00:35 2025 GMT
            Not After : Jun  7 20:00:35 2025 GMT
        Subject: CN=233584eb77ca58961e163b4df826f1ab48cee102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:ec:72:e2:fd:15:bb:bc:c3:ab:53:0d:fc:
                    3a:f6:1b:a1:1d:68:6c:b8:f4:bf:8c:7d:b9:b4:f3:
                    08:9b:73:59:9e:27:c3:0e:c6:52:fc:8f:03:34:48:
                    2d:04:b5:1d:0e:31:49:c7:bf:5d:aa:90:6a:70:f0:
                    5c:ff:1e:e5:cc:7f:fd:24:e1:3b:0a:88:55:eb:f6:
                    80:37:8c:06:50:6c:d6:c3:97:d0:4d:58:86:b0:59:
                    af:89:66:1d:98:e9:0c:2c:28:89:73:e8:e7:d0:4e:
                    df:28:61:3f:2c:0f:f1:25:50:75:37:12:b9:31:62:
                    f1:bd:17:01:e9:64:3d:e5:ea:79:6a:50:b7:41:9d:
                    cb:8b:3f:75:10:f5:a9:bf:2f:09:14:78:ce:ef:a3:
                    d5:e6:7c:c2:72:00:8b:17:fe:fd:bb:a4:51:28:dc:
                    84:80:57:2a:09:13:a5:ee:ea:57:c0:e7:3a:0a:10:
                    55:1e:df:4d:f7:89:90:c3:cb:3b:d0:37:b8:72:e7:
                    92:ec:68:e8:ba:37:b3:27:dd:6c:ef:a0:a1:29:eb:
                    ae:2f:4a:c2:18:e9:67:68:15:fd:6e:76:77:02:fa:
                    97:a8:23:fb:32:c0:c6:66:c4:cc:2d:6d:81:bd:d4:
                    3f:55:d3:5e:68:30:80:91:ec:6b:d9:e0:b8:4e:56:
                    7f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:35:84:EB:77:CA:58:96:1E:16:3B:4D:F8:26:F1:AB:48:CE:E1:02
            X509v3 Authority Key Identifier:
                keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3a:64:93:9d:c8:76:4b:7d:ac:46:13:0a:a0:71:25:84:30:
         62:61:cd:7b:6b:57:41:37:69:ec:cf:3a:8d:91:68:71:38:d2:
         5c:74:9d:47:a9:5d:a2:44:12:7a:18:43:3e:fe:36:a8:a7:98:
         c5:56:55:47:a3:b9:1e:65:e9:d9:d3:ce:1a:72:c6:2f:23:77:
         be:46:a1:82:37:43:a6:47:74:32:6d:61:ce:9f:04:d1:cc:e9:
         82:b7:48:59:3d:68:17:e5:02:5f:f6:32:ae:72:ef:62:7a:4a:
         46:6c:9f:db:5a:ae:a4:2f:62:76:14:aa:84:82:b2:cb:6c:36:
         7b:e8:60:9c:34:09:3e:dd:00:9d:1e:a9:78:56:4c:2d:23:34:
         ab:eb:e4:65:20:97:63:d1:a8:5a:a0:22:a8:5d:b8:63:1e:c2:
         b5:87:02:d6:e5:c3:2b:bf:89:7a:b7:8a:ba:de:06:bc:60:2a:
         96:c1:e1:8a:10:a7:d1:27:4e:6c:2c:b8:aa:94:cf:b6:ba:61:
         c0:b9:5e:3d:8d:59:de:4b:6e:2a:98:6a:11:66:ab:7f:e6:d1:
         d2:42:48:6d:a6:3a:ad:e0:84:4d:27:05:a9:ec:26:c9:fb:98:
         4b:78:3b:50:2c:4d:a9:cd:e4:28:67:bd:b7:d0:7d:e1:27:25:
         2b:7e:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:32:56 2025 by rpki-client