Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File:                     68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier:          o6VZzwIJ08kNQZhCekA1dXG0R3fW1iHALVA5jpKnO+0=
Subject key identifier:   C3:CF:65:8E:56:50:80:29:C7:55:3A:19:C3:1F:D5:F8:D0:3F:67:96
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer:       /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial:       01974630143D877473E0B8750CD4622BBCE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number:          157A
Signing time:             Fri 06 Jun 2025 17:00:45 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:45 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:45 +0000
Files and hashes:         1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: cHISBovq4NgNFaD159tl26p1gTAoMqZp2b9RgBrrU00=)
                          2: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (hash: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:14:3d:87:74:73:e0:b8:75:0c:d4:62:2b:bc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
        Validity
            Not Before: Jun  6 17:00:45 2025 GMT
            Not After : Jun  7 17:00:45 2025 GMT
        Subject: CN=c3cf658e56508029c7553a19c31fd5f8d03f6796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:e9:43:d1:05:1c:5a:a9:3d:5e:d4:b4:70:
                    be:ca:c6:45:07:6a:d1:8e:2f:55:b0:7f:f5:e7:c3:
                    73:bc:1a:2a:fd:d9:3e:4b:5b:08:b2:0c:ba:b6:ba:
                    6b:df:8c:d1:1f:fe:72:bb:d6:7c:32:f0:90:76:50:
                    e9:66:16:ee:3c:bb:16:54:da:10:12:e6:f9:3f:b7:
                    0b:54:38:e7:fb:dc:1a:d0:12:96:62:1b:24:c9:fa:
                    1a:14:18:fb:45:ef:26:a6:7a:5b:98:32:28:09:ed:
                    16:47:25:3a:2f:47:d4:6e:c1:77:6b:c5:9c:1e:d3:
                    e8:26:a6:d8:7e:cc:0a:13:60:1c:c9:ce:5b:47:3b:
                    80:50:ff:2f:82:9e:b5:ba:56:79:a6:26:f0:b5:87:
                    1e:d0:d6:c5:c8:21:b9:34:60:2e:fa:82:a8:62:fd:
                    29:0d:22:bf:07:60:75:b3:a9:14:18:1f:90:97:2b:
                    84:ea:01:f3:54:b5:70:51:ca:e7:5c:03:a1:50:26:
                    e6:e9:61:b2:36:96:cb:a1:70:ed:ac:65:3f:e0:28:
                    6a:66:59:6c:c8:ca:56:28:77:be:f6:59:a0:98:a9:
                    4a:4b:53:d4:4e:ae:39:8b:28:f9:41:32:d0:39:d1:
                    00:5f:e7:b3:b4:ec:57:bc:18:8c:d5:f5:aa:81:f9:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CF:65:8E:56:50:80:29:C7:55:3A:19:C3:1F:D5:F8:D0:3F:67:96
            X509v3 Authority Key Identifier:
                keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:60:6b:8b:d6:b1:62:a2:20:2c:8c:79:52:02:e5:b5:52:90:
         7d:21:02:ce:5c:18:07:f6:24:a4:f2:6b:bb:d3:64:4b:b0:45:
         9c:d4:86:6e:66:29:92:bb:07:ab:7b:36:5d:0a:61:e4:92:b2:
         15:0b:b0:a8:8f:c8:fb:22:7e:27:98:e7:8d:95:6e:91:c8:fa:
         05:32:a9:09:d5:a3:0d:ea:93:e3:61:fd:18:7a:c8:81:7d:48:
         99:16:8d:d6:9e:66:06:cb:5a:a6:32:f1:f5:85:9b:8d:41:04:
         57:9e:c9:a6:b1:ff:1e:75:e9:86:89:6c:ee:f0:8a:eb:be:69:
         bf:9d:68:6c:ee:f6:71:b6:4c:81:b3:f0:6f:d1:ac:4e:a7:45:
         3c:34:13:b1:54:62:32:f5:ac:b5:73:fc:2a:51:16:7e:47:fe:
         0f:b0:aa:fc:47:e9:6a:1a:8b:ec:b6:26:cf:55:05:0e:eb:4d:
         45:2c:ac:b3:23:ca:2a:41:c2:77:ed:6c:90:ec:80:33:9f:39:
         e1:f1:d5:7a:73:3b:9d:65:e0:51:9d:93:ab:cf:ea:dc:e6:ad:
         5f:bf:5c:71:ec:0d:41:95:f8:6d:45:db:12:82:fc:ba:e2:0d:
         1c:15:61:0f:7d:4e:6f:16:7c:20:6a:a1:16:66:ae:d6:3e:e1:
         40:9d:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:46 2025 by rpki-client