Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File:                     1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier:          W7+mJ4GVfTUOqB25DeTVKl1BN/lHpWzxs3t7aQnlx5A=
Subject key identifier:   E8:30:3F:24:B6:18:C9:5E:A5:F1:6D:39:37:DE:7E:2D:E9:05:86:7B
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer:       /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial:       0197499F4C7A28C5FED7030492191A19185B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 09:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:05 +0000
Files and hashes:         1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: MnIaf8WaYhPe9Mlw1zsPvwn2NMNEeev3UgRoh4/MaYA=)
                          2: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (hash: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:4c:7a:28:c5:fe:d7:03:04:92:19:1a:19:18:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
        Validity
            Not Before: Jun  7 09:01:05 2025 GMT
            Not After : Jun  8 09:01:05 2025 GMT
        Subject: CN=e8303f24b618c95ea5f16d3937de7e2de905867b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:25:29:c3:8b:e1:cb:3d:57:84:91:86:cf:
                    d1:8d:57:a1:4b:ac:e1:db:ef:ca:b5:6b:08:05:c1:
                    b1:56:33:67:7f:35:01:48:58:fe:1d:a6:c2:08:dc:
                    c3:2e:aa:72:14:98:46:df:dc:11:d4:f8:71:4b:26:
                    74:70:37:8c:d8:a1:94:37:99:f0:27:30:57:bf:fc:
                    b9:cb:0c:6f:44:a5:2e:53:6f:7c:d2:a9:5e:76:86:
                    05:c4:85:0b:9b:0e:72:b7:96:4f:60:44:2e:9d:cb:
                    84:1a:7e:54:f3:9c:44:29:36:16:fd:15:42:1f:19:
                    28:e8:f5:36:ec:cd:92:2f:5e:5c:4d:17:94:5f:f9:
                    0f:12:59:41:11:23:b0:83:9a:2e:c3:cb:ab:7a:de:
                    30:d3:60:ec:2c:e0:15:23:b2:8a:10:81:ca:ae:f5:
                    60:31:40:d3:a1:37:02:76:42:6e:04:5c:df:0a:66:
                    25:00:ca:dc:f4:ca:60:a4:d3:cc:21:27:98:e4:42:
                    f3:ae:12:6f:eb:cc:2b:7c:1a:aa:cc:75:bc:b3:ef:
                    3d:a7:a2:74:07:dd:3c:c6:c7:f1:2a:2f:23:26:88:
                    84:f2:3a:c9:d4:72:d0:1d:5f:29:f1:05:8d:8c:b0:
                    36:79:49:17:ed:4f:dd:77:c7:6b:c3:4e:05:33:cd:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:30:3F:24:B6:18:C9:5E:A5:F1:6D:39:37:DE:7E:2D:E9:05:86:7B
            X509v3 Authority Key Identifier:
                keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:64:50:eb:a2:13:26:de:22:26:4a:4e:3b:aa:db:e9:30:6b:
         1a:98:e2:65:0b:b9:4d:24:35:10:38:b1:78:e0:71:be:b2:8c:
         e1:ed:22:f9:07:17:5d:8d:37:08:69:e4:b4:cd:9f:eb:14:b8:
         48:ef:e1:3a:ef:bc:6a:2c:e1:3e:08:35:e9:61:6a:4c:d9:db:
         a3:88:3c:06:7c:9b:93:cf:a6:b5:00:91:16:b1:11:ed:ab:f2:
         bb:4b:8e:6d:4c:ab:8b:98:07:70:d3:40:7c:ea:5c:53:72:af:
         1c:9d:b6:a8:9d:d9:59:15:32:96:24:ea:b4:e9:19:d4:53:00:
         96:86:f5:f2:72:1d:5a:93:63:48:14:5b:8d:5d:ee:1c:49:d3:
         2a:1c:f6:aa:51:cb:06:bf:56:df:c7:04:e1:b1:9e:5e:47:1a:
         91:4a:22:4c:32:95:bd:1e:33:9c:65:2f:f9:63:53:4b:27:93:
         3e:d2:43:29:12:f4:38:94:6a:50:c3:36:32:76:8e:3f:d4:37:
         36:3e:9b:98:01:14:7d:ef:ad:e2:6d:e6:22:ab:2a:8a:7f:9d:
         39:cc:9e:da:70:fe:b9:20:41:af:aa:3a:99:a4:05:4b:93:2b:
         df:b0:9e:66:c4:50:b3:42:ce:ee:13:fe:ee:ea:b6:fc:de:f9:
         43:22:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:35 2025 by rpki-client