Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          X5BrgSiyPxrC/GpXd5dIMszyT199U3SU1KsuysI49X8=
Subject key identifier:   96:0D:55:82:41:08:9F:1F:7A:72:C1:9F:BB:C9:6B:DE:61:B0:CB:2A
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       01974A7ABE4D36BD04063259AD32297566E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 13:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:47 +0000
Files and hashes:         1: 5qz81vMuyN5eYJ6zyRRelyT4XK0.roa (hash: 0LizoQ7sooXP56qjV8fYtL2cZDWoYFEUv70QcevbSss=)
                          2: Oo8Lhh4RlCa7xttIyBwx5LDEUoc.roa (hash: wrOx7qjHfGVS+J5guJXeAV7Who7QhhesA0WvqwwUSt0=)
                          3: bred8jKnNPms1BCagsD8kMQFkWQ.roa (hash: VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=)
                          4: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: Lv3e0TJJkXlnVtPqJM6H+I9W+R7cFwW/yLeEjRVvsjw=)
                          5: orjkFnmOp2fkt5BOjfHTUe1SFM8.roa (hash: VR0THqWhrxUSaUWx/H66JHdMtnv+5/NgmHEPJq0RqoM=)
                          6: vHN5MXtzccXdspQhStY4Z57CoPM.roa (hash: 4HXRwfo/a7HGgHSGpok7A4ldu5noCeEQDTLX8aICufE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:be:4d:36:bd:04:06:32:59:ad:32:29:75:66:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Jun  7 13:00:47 2025 GMT
            Not After : Jun  8 13:00:47 2025 GMT
        Subject: CN=960d558241089f1f7a72c19fbbc96bde61b0cb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:96:c0:59:47:9e:c2:cd:ea:2b:49:de:1f:2c:
                    14:9b:6f:10:6e:1b:39:0d:b6:5c:06:0f:f9:13:01:
                    68:a5:03:92:08:16:3b:8c:47:5d:48:dc:9f:e1:d8:
                    66:85:e7:c3:3b:27:0e:bd:ff:fc:a1:33:f4:49:b8:
                    be:5c:da:44:32:2a:fd:38:c9:09:0d:47:98:2e:ac:
                    33:c5:89:19:83:22:9a:01:2d:71:26:3b:9c:46:a3:
                    35:32:1d:79:e3:65:30:da:ed:8b:f0:67:24:c2:79:
                    f9:3d:38:0f:ed:96:7c:a2:5d:c8:4e:2c:c4:6d:2e:
                    2a:ea:9a:f2:bd:43:29:b2:71:11:b8:a7:8b:59:d9:
                    be:83:89:90:87:a0:91:d1:f5:a2:a2:ba:25:0c:37:
                    c8:57:fd:e3:43:5c:29:9b:18:28:3f:44:3a:fd:db:
                    99:a4:a9:e2:50:7a:83:1c:fb:d4:54:6f:89:a6:bb:
                    e2:bb:08:29:4e:93:03:c8:4b:ff:18:37:35:6a:0e:
                    c0:19:fa:53:d5:cc:8e:96:f9:34:60:c6:bd:40:c2:
                    95:91:31:50:c1:01:c5:f3:d9:ca:1d:35:fe:6c:bf:
                    fa:1d:ab:42:f8:98:27:f3:4e:ac:73:92:2d:68:9c:
                    6d:35:18:c6:2f:f4:3f:e2:de:ec:1c:d0:47:20:24:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0D:55:82:41:08:9F:1F:7A:72:C1:9F:BB:C9:6B:DE:61:B0:CB:2A
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7a:8b:4a:ec:0d:c8:e1:d5:61:a4:11:55:e5:a4:8d:05:fe:
         51:53:b9:84:c3:bd:c6:8a:70:7b:c5:ee:48:45:3e:1c:d3:a7:
         18:92:5c:06:c0:b0:39:77:50:d4:35:c0:63:e1:2b:99:89:d0:
         00:a2:c3:a5:6c:9e:8b:a5:65:e6:78:bb:d5:69:bd:8b:d2:64:
         08:cd:59:a3:68:d6:10:51:f0:7f:2e:18:2c:fa:ef:0d:29:c6:
         e6:71:31:3c:f2:57:da:84:63:f2:6d:ea:e3:d2:65:de:7f:89:
         20:54:c9:55:b6:29:42:99:51:33:57:55:7a:b7:e9:0b:e6:45:
         d8:5d:d0:3d:fd:4d:19:d7:d5:81:09:b4:39:cb:bb:b7:1c:99:
         73:16:09:1e:96:fb:d1:d5:67:7d:62:8b:51:3a:de:8f:e2:cd:
         c2:18:4a:50:d0:ca:67:5d:71:1c:6c:da:97:23:41:95:4f:55:
         a0:f5:66:4d:ad:88:01:4f:66:42:9e:d7:c2:a9:d7:e4:33:46:
         4e:71:e3:05:4d:7a:88:ca:40:02:97:2b:a1:be:ca:6a:68:c7:
         c1:29:9e:a7:22:08:6f:53:9d:2d:b6:3a:02:d9:0f:ff:5b:da:
         8d:f1:c5:e9:98:e9:19:4c:b0:a5:cb:fa:90:e7:4d:cb:a9:86:
         d9:76:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:22:54 2025 by rpki-client