Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File:                     1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier:          NtkoO5zQ3tpxYppgKtmEkV4jTnUVNvkDQITyIxlBq9E=
Subject key identifier:   38:5D:89:93:D3:AE:6F:B5:FD:27:2B:75:4D:F9:7C:2D:49:45:98:B7
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer:       /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial:       0197488D5E0A3F667A08F4F3E3361F8E20C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 04:01:53 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:53 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:53 +0000
Files and hashes:         1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: Nqe0DPDluDQSQo80+M0n+CZs3ZUy/EMlBe9dQ5GFigI=)
                          2: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (hash: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:5e:0a:3f:66:7a:08:f4:f3:e3:36:1f:8e:20:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
        Validity
            Not Before: Jun  7 04:01:53 2025 GMT
            Not After : Jun  8 04:01:53 2025 GMT
        Subject: CN=385d8993d3ae6fb5fd272b754df97c2d494598b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:c1:a5:b9:64:a8:3e:bf:1d:74:80:db:2b:
                    31:37:c6:19:df:6e:ed:4c:0b:9a:0b:6a:6a:49:e0:
                    46:a8:ba:b2:f3:90:4e:6b:da:d0:b2:9c:08:13:83:
                    5d:19:c1:18:3b:3c:67:4d:16:7d:2e:c4:e7:27:29:
                    dc:4e:9e:52:11:b2:6d:05:62:b8:df:6a:64:5b:54:
                    6a:59:91:ee:cf:cc:c3:14:a3:0e:9e:74:6d:32:b0:
                    7f:22:4f:b0:6b:01:88:ef:f7:91:87:15:8b:5e:4f:
                    3f:1f:e2:1f:b5:cd:05:9d:b1:57:e2:b9:64:ef:3f:
                    29:e3:fd:57:71:32:99:9d:43:0d:63:6f:d6:57:5c:
                    a1:3f:3a:8f:0c:4d:7d:46:ce:2c:fe:c5:59:b0:3f:
                    a4:76:78:ce:03:5a:42:05:ce:d9:88:ef:3c:52:ab:
                    8f:7a:77:5b:50:2b:1a:97:b3:10:f5:c1:dd:fe:45:
                    c0:09:46:63:69:91:d9:ea:25:3d:92:92:f9:f1:cd:
                    a7:60:99:b1:44:8f:ae:b7:b9:75:13:65:77:15:31:
                    3b:22:4e:03:1e:e7:55:f1:1b:9c:b4:d5:07:c3:3d:
                    7d:65:07:4b:8f:48:33:61:f8:84:d7:66:63:e6:12:
                    bf:4b:1d:51:45:3d:d1:bf:ed:b4:50:ec:a3:5e:be:
                    1e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5D:89:93:D3:AE:6F:B5:FD:27:2B:75:4D:F9:7C:2D:49:45:98:B7
            X509v3 Authority Key Identifier:
                keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:23:f4:8b:3b:85:5e:ef:7f:1e:e8:33:3c:3c:cb:b2:2a:
         5a:17:75:a7:c4:0d:b3:89:ed:4c:ee:13:80:35:81:46:2b:37:
         b2:9a:62:4f:91:42:40:62:b2:71:2a:8b:d3:b3:d5:3b:1e:ab:
         71:21:f7:e8:9f:7e:11:95:bf:89:4f:3a:a1:25:8e:b4:bd:87:
         aa:a2:19:fd:0a:a6:aa:29:76:d3:b5:b3:99:26:77:2e:bf:de:
         fa:9b:0b:3c:01:ca:a5:ba:bf:c8:ae:93:68:71:62:b2:fe:49:
         d2:69:89:0d:53:bd:2c:99:ad:fa:3f:3f:98:5f:fa:cd:89:4b:
         ef:cf:75:87:da:9e:96:d9:a8:aa:37:9e:85:56:f2:24:4d:2f:
         34:3c:20:91:6f:00:28:01:ac:21:08:83:2f:c2:83:71:0d:60:
         65:14:2c:76:f9:da:dc:38:89:54:3a:ef:4c:8d:bc:b6:5c:35:
         ea:65:d8:20:11:dd:d4:b2:22:3a:64:f9:f6:b9:17:ff:17:87:
         8f:ef:7d:ff:c1:99:46:26:48:f5:99:af:69:6a:83:11:09:de:
         8c:3b:49:7d:87:7e:fb:eb:07:d4:0d:01:b2:18:72:58:f9:47:
         e2:f4:c5:6d:b7:12:94:b7:3d:4b:26:31:0b:4a:81:ef:82:68:
         97:7c:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:26:07 2025 by rpki-client