Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
File:                     btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json)
Hash identifier:          sR51TgObFbqTwTIHxMlRpj62EC52szrH3tMp63sl6OU=
Subject key identifier:   88:ED:5A:49:75:85:8C:95:F0:9B:CC:0D:72:DE:E4:D6:80:AA:22:E6
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Certificate issuer:       /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial:       0197439D0A7D0BC3A52E37114424320B429B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
Manifest number:          157C
Signing time:             Fri 06 Jun 2025 05:00:54 +0000
Manifest this update:     Fri 06 Jun 2025 05:00:54 +0000
Manifest next update:     Sat 07 Jun 2025 05:00:54 +0000
Files and hashes:         1: 9pVSMCdjQealzLgQcmqOThUhNyY.roa (hash: Za3wBMJoYZ7WrjJeJ4YGgLkdE+KKnUd40rRwXB4f/WU=)
                          2: C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa (hash: foID9Oziq5oUBAD2IoHxTCUce2E2b18q1C4lqpbtqGQ=)
                          3: QK15-i7XSCXTEVu3NNRHzRF4ezo.roa (hash: x0cfhMLQIA3M5N3d+Cnub4RrSFTx7/5hmRiMtqqMFQI=)
                          4: bSRwpXF4daZ64mmbWkichNXlbKQ.roa (hash: UI3xu+IDrHLUWFrOWnEgl/cse2lLBjv83Y/Ok1oQevo=)
                          5: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: FaMCuJUXplMFFJuuWxbG8uKejWtFaJSOtn7VPA1Du94=)
                          6: c7okVFaHlAlUexayvfgBOKFlFAQ.roa (hash: hGEyBzgSKXCjptMSFi5MLoApkRoSwE9UaM8SMZ+2CFo=)
                          7: nJiYZEpB1EgK05RNyHLNlPAVIA8.roa (hash: AlaLFQmqj+Z/cHGEWv8PdyAv4LrvAlOopVYBnZcKqZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:43:9d:0a:7d:0b:c3:a5:2e:37:11:44:24:32:0b:42:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
        Validity
            Not Before: Jun  6 05:00:54 2025 GMT
            Not After : Jun  7 05:00:54 2025 GMT
        Subject: CN=88ed5a4975858c95f09bcc0d72dee4d680aa22e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:b2:d2:79:c2:1c:2a:e0:ed:b0:25:35:b8:
                    be:e7:23:97:fd:24:24:20:20:80:de:df:7e:c2:b4:
                    50:14:2e:5d:49:52:6f:13:cf:93:ff:ea:61:c7:12:
                    f1:80:07:83:8f:19:2a:00:5a:0c:cf:0c:b0:c0:71:
                    71:a5:ea:37:0b:52:c8:b9:4a:86:19:b7:f1:1f:89:
                    12:c5:75:da:12:99:80:8c:51:04:b7:66:3b:d3:30:
                    c2:3b:95:8a:22:bd:a0:11:11:3d:48:29:1b:08:11:
                    cc:f0:e0:5e:6d:dd:6e:cd:b5:74:51:f8:2c:1a:e5:
                    7c:94:b2:c6:57:70:7d:85:c4:95:a5:d7:e2:78:f1:
                    af:0f:97:5f:ef:8f:3e:1b:a7:9e:9e:c8:2f:6a:b3:
                    b4:e4:f5:72:02:4b:62:fd:24:2f:2f:17:24:38:c6:
                    24:b9:65:cd:e6:ef:dc:dd:5a:e6:13:51:90:be:f6:
                    2d:b0:e7:22:fb:b8:c5:0d:5f:7c:c7:46:15:ea:31:
                    83:52:ed:4d:8c:6f:9e:ba:e3:50:09:ca:39:9b:cc:
                    c6:3d:0e:bc:72:30:cd:92:0b:af:e6:fb:58:5f:26:
                    05:82:cf:65:da:42:5b:20:d6:1a:4e:58:d0:e1:e2:
                    c6:a1:15:44:14:02:45:4e:55:0a:fc:ef:94:37:2e:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:ED:5A:49:75:85:8C:95:F0:9B:CC:0D:72:DE:E4:D6:80:AA:22:E6
            X509v3 Authority Key Identifier:
                keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:52:37:7c:1a:04:50:58:08:10:d4:1f:17:c0:fa:44:2f:6d:
         56:d6:2d:b7:69:21:15:e6:6b:33:1d:da:9b:9e:7b:62:9f:7e:
         43:2a:d6:af:13:6b:c4:8e:ba:23:55:5d:a6:19:5d:db:c6:15:
         89:12:3c:15:6b:56:86:3d:6f:d5:9a:c9:c5:e7:87:93:eb:6b:
         8c:1d:63:cc:43:50:b7:30:e4:ef:a4:86:5d:55:66:58:e0:2d:
         ac:4b:4f:8f:31:30:a2:88:22:66:af:b6:47:78:4f:57:40:14:
         93:e6:6d:6f:fd:9c:d9:99:3e:05:bf:f9:a6:19:4f:35:88:cc:
         85:29:a4:d5:63:14:ce:31:0a:23:f1:1e:c2:2d:c2:9e:21:47:
         c0:cc:48:4e:92:64:f9:d0:6d:5d:50:93:28:ea:87:49:e8:95:
         8b:fa:db:0a:fb:92:15:0a:19:b1:f7:cc:6c:f3:d5:a2:60:62:
         21:e5:9c:a2:53:63:70:a9:81:bc:36:8a:3d:f2:db:18:33:ff:
         31:b9:d6:d4:74:40:e9:3b:cc:49:a1:b9:1d:e8:5a:2b:96:34:
         87:32:3d:50:75:b5:f7:e5:de:10:38:e8:b0:09:d2:b8:24:d6:
         f5:da:bd:00:ad:46:f4:d5:12:45:15:09:b7:54:64:8b:5e:eb:
         d8:6d:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:53:53 2025 by rpki-client