Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File:                     7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier:          4JkLXgyTjYGCiQrcYJl4Iz/oy3ag1j8g/wenLP9/r78=
Subject key identifier:   C5:7F:20:96:98:C5:DC:2C:B5:D6:72:7D:44:E0:ED:E5:F4:6D:10:76
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer:       /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial:       01974A7A7EB468A07D9DEBC144801ADB1015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 13:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:30 +0000
Files and hashes:         1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: YHWZJukhAA83ZMf2nr0bs2dBIB/f27wZ/vO8a5CPA44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:7e:b4:68:a0:7d:9d:eb:c1:44:80:1a:db:10:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
        Validity
            Not Before: Jun  7 13:00:30 2025 GMT
            Not After : Jun  8 13:00:30 2025 GMT
        Subject: CN=c57f209698c5dc2cb5d6727d44e0ede5f46d1076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d2:8c:a7:17:00:f0:ff:54:90:90:4d:eb:2c:
                    68:12:a3:d9:49:c1:6c:47:ef:e8:14:6f:e5:e0:22:
                    13:6b:46:7d:a7:86:c0:bc:09:d7:c1:d5:f6:24:c4:
                    d3:30:7f:e3:83:04:8c:1e:62:cd:00:52:cb:5a:bd:
                    b5:87:59:28:ed:b2:5f:02:a8:53:ff:ea:9c:c6:26:
                    44:6d:d5:06:4d:a3:b9:80:29:38:f3:67:f8:35:60:
                    57:3d:1b:51:ba:f3:8e:37:17:76:ff:6d:fe:db:49:
                    28:14:2a:ca:0e:ed:a6:3c:d1:58:97:52:82:76:7b:
                    ef:1f:09:1a:0e:56:59:26:fb:98:40:8b:c1:66:24:
                    37:5f:1f:6b:ef:39:2e:7e:1f:f0:5b:d5:1f:c6:6e:
                    f2:f0:87:e4:f1:d3:a1:44:44:9e:f0:f3:ee:03:64:
                    a4:de:5e:2c:8b:2c:32:59:67:ef:1e:a9:85:4d:7e:
                    c1:2f:ed:a1:68:66:a6:92:e5:d2:c3:a6:46:bb:14:
                    4e:a7:c9:6a:45:58:07:be:16:12:47:12:34:e0:3c:
                    55:49:af:fc:c5:2f:48:27:bc:2e:fd:dc:7b:cf:70:
                    b4:1d:3f:72:a4:1d:c7:0d:f3:38:2f:1f:31:e8:74:
                    de:44:ae:1f:3b:ae:40:7c:ec:c1:29:e3:16:b5:90:
                    6b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7F:20:96:98:C5:DC:2C:B5:D6:72:7D:44:E0:ED:E5:F4:6D:10:76
            X509v3 Authority Key Identifier:
                keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:6d:a2:80:2e:92:8a:a5:95:53:61:ef:1a:9d:8f:cd:46:5d:
         2e:80:1b:2f:df:3d:32:49:4a:bb:8e:55:bb:da:7b:b3:55:09:
         65:78:7b:ea:6d:d5:2f:84:e0:79:a6:95:e1:74:15:aa:2e:8a:
         44:9e:f7:12:74:01:c5:9f:77:42:09:ff:6c:c6:be:6c:08:05:
         3b:9c:22:82:dd:22:ac:2e:d0:e1:b0:d0:9f:87:d7:2b:9c:4e:
         b5:4e:37:7f:d6:09:b5:9d:20:99:48:9e:68:98:d0:25:bc:f9:
         c5:ce:76:0f:e9:f4:8e:5c:4f:a6:bd:d5:c9:14:d3:2d:92:27:
         86:0d:a3:ca:d3:0d:b1:9b:18:29:de:8a:d5:66:e6:0f:e2:2c:
         4e:85:b6:85:a2:98:5c:7c:25:41:63:eb:0f:79:a3:05:1f:9e:
         02:8a:ac:08:3d:07:cd:58:fc:5c:cc:4a:a9:63:c7:f4:85:25:
         f9:5a:e5:0a:c3:df:3f:e3:ad:d6:7b:b1:00:4c:30:cf:2e:89:
         68:dc:d9:61:2b:05:9f:11:3c:de:a1:41:9a:90:a3:f6:6a:ef:
         a3:f6:46:5d:3b:03:06:6c:a6:9e:df:14:41:b1:a0:da:fe:93:
         de:6d:d4:27:10:d5:33:b8:95:fa:e9:8b:87:d1:93:ae:e8:48:
         a4:ab:2b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:39 2025 by rpki-client