Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File:                     1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier:          6XO+JXc1GpOP8rwdvUDJCEYmAawdXEX7LXjECWKFFyY=
Subject key identifier:   5A:A2:C8:48:EF:F2:9B:75:3F:C6:19:25:03:80:32:28:B1:1F:62:3B
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer:       /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial:       01974967D6B01DC7E07639DE64B8AD06D909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 08:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:31 +0000
Files and hashes:         1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: f8ZnXSNlGJoC+3XAmYyfSpoAhVpLWZ4LEN49t7AdNvo=)
                          2: 5MOhgExuZKrwcKUMPmkmqSgYYV8.roa (hash: BeNjV3R3WIa+A/yjnQFp45yGVELTOEe4wkt7MNfzXzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:d6:b0:1d:c7:e0:76:39:de:64:b8:ad:06:d9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
        Validity
            Not Before: Jun  7 08:00:31 2025 GMT
            Not After : Jun  8 08:00:31 2025 GMT
        Subject: CN=5aa2c848eff29b753fc6192503803228b11f623b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:92:51:56:8f:95:ce:35:76:a1:00:1c:30:
                    64:b6:1c:08:a2:ae:7e:f6:8a:1a:46:d4:b4:eb:7e:
                    78:2f:62:63:b6:2f:ba:35:ba:36:79:b7:31:d1:6b:
                    30:b6:7b:35:76:93:cb:33:ac:7f:9a:e7:bc:bb:1d:
                    14:4c:7f:ce:f8:ae:fb:78:1d:a1:5d:a9:1a:4d:61:
                    99:17:74:a5:0a:8a:f7:59:3a:b4:3c:45:5a:fd:73:
                    7c:89:cf:6b:dc:0f:bd:3b:ca:b3:3f:ec:f0:35:8c:
                    4d:b6:e5:d1:03:dd:f6:97:5e:93:9d:48:e5:8f:7d:
                    54:53:57:db:b7:2d:4e:c3:61:cb:1c:9c:00:cd:e3:
                    2e:16:8e:49:0f:bb:82:27:b1:f3:2d:b4:6c:e6:72:
                    d3:a7:55:fb:23:d2:1c:47:bb:ee:51:c7:10:4d:63:
                    a9:33:35:57:6b:2b:46:4a:b6:21:0e:0a:52:77:61:
                    a6:1d:25:b4:f8:7c:b9:ec:66:f2:49:7b:d5:a9:6e:
                    4d:3e:76:d2:48:81:08:d9:38:2c:78:19:ad:a4:e2:
                    3e:a8:c3:28:71:bb:f5:86:ad:f7:e3:50:2d:1f:94:
                    20:1c:b0:01:3a:c5:02:ee:c1:a0:f7:f8:fb:a8:e7:
                    cb:dc:82:32:23:d8:f7:4f:41:59:65:0d:09:f8:d3:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A2:C8:48:EF:F2:9B:75:3F:C6:19:25:03:80:32:28:B1:1F:62:3B
            X509v3 Authority Key Identifier:
                keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:11:7e:8c:9c:89:1e:f1:bb:96:10:87:c6:d2:8f:68:c1:
         46:61:9c:91:57:b4:a2:2c:67:88:60:33:8d:03:90:ba:e6:45:
         40:9a:50:0d:fc:f3:2e:d3:e8:2b:7a:91:3f:13:5a:27:9a:29:
         57:c8:5c:f5:60:fb:6e:22:a1:76:15:75:4b:f0:d1:d4:51:3b:
         b8:fa:ab:24:2e:f4:c2:e5:3c:f3:3d:25:fb:8c:98:9e:56:1a:
         27:b7:f3:c8:1f:53:ca:68:35:b8:40:17:43:b3:91:5b:84:5a:
         b2:b7:ff:a1:a1:10:15:36:52:a8:f6:49:fa:c1:02:2f:bd:1c:
         2c:df:7e:5c:c4:cd:8d:d6:c6:ee:72:79:1f:d4:ea:23:78:2c:
         0a:27:5a:11:94:0e:d0:56:af:7e:c5:f5:78:b0:08:7f:f9:2c:
         ff:c3:8e:b3:04:bf:24:b8:bb:ef:3b:92:07:7c:3f:72:83:71:
         a5:7a:60:c4:f6:fa:5d:a7:55:f8:7b:82:55:0e:1d:ea:ab:88:
         dd:00:2a:ec:33:3b:6d:f3:de:80:20:68:10:b1:4b:88:38:cb:
         85:c5:f7:d0:d9:70:54:52:67:e5:99:d4:5f:05:2d:d1:d5:10:
         5a:b4:cc:d4:2b:13:a9:20:a8:e4:96:b9:6e:89:38:8d:9d:65:
         f4:eb:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:09:04 2025 by rpki-client