Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
File:                     eL0cbGiKF1q8jVmPvNEH_KUlS94.mft (raw, json)
Hash identifier:          lWBrKLLi7wXr626QwgzXYQEOCTG4V8tG3BkdrkAFRiA=
Subject key identifier:   B9:6E:5A:E3:4A:5F:3F:85:47:6E:13:51:E8:E1:A3:B9:04:B2:89:7E
Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE
Certificate issuer:       /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
Certificate serial:       01974CD6A47338C5F691F4AB6D131B451724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 00:00:24 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:24 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:24 +0000
Files and hashes:         1: eL0cbGiKF1q8jVmPvNEH_KUlS94.crl (hash: RQhvkqL5d1dkEE4n5FL+yeLFhw/5DDKleCPz1wic1Yc=)
                          2: nCGmubCJiSGpdDfmtDjyCBhbirE.roa (hash: DBvXchMzo0c+o7gBr3asd/okXNFiJinaSi6NEP9igBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:a4:73:38:c5:f6:91:f4:ab:6d:13:1b:45:17:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
        Validity
            Not Before: Jun  8 00:00:24 2025 GMT
            Not After : Jun  9 00:00:24 2025 GMT
        Subject: CN=b96e5ae34a5f3f85476e1351e8e1a3b904b2897e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1b:80:04:6b:86:4a:d2:38:f1:dc:29:de:96:
                    d3:7b:e2:ad:59:8c:c8:78:6e:5a:a3:ac:b2:c2:9a:
                    fa:a1:6d:4c:69:68:1f:77:4a:72:f6:77:c9:1a:60:
                    7d:ce:aa:05:e5:7e:2d:c7:01:46:24:92:54:b4:a0:
                    ab:2d:3c:c6:28:1d:a9:94:fa:6b:87:ba:ed:1a:b4:
                    34:c3:ca:dd:c0:8a:8e:37:a5:59:16:a2:da:39:6c:
                    b6:8c:26:13:54:26:46:f8:40:64:f3:5c:6a:0c:0c:
                    81:93:f6:e5:5c:7d:fe:22:8f:0f:e9:f4:7e:d4:ad:
                    e1:61:86:db:f3:54:6f:be:b8:b1:3a:ef:79:68:96:
                    ca:75:cb:d1:ae:0b:f2:8c:6f:f0:9a:f3:b1:56:da:
                    59:44:76:0e:93:fc:51:98:ef:05:f2:a7:c8:e9:66:
                    89:85:47:b8:7d:d3:7d:01:ef:e6:42:cb:c3:25:4c:
                    ff:ba:0e:04:bc:d9:30:11:69:52:07:bb:d3:c8:c5:
                    d5:50:f4:14:2b:3b:bb:da:47:15:70:92:e3:3d:fb:
                    f2:0e:e2:96:6a:d4:b9:3f:ca:d0:46:c2:de:fc:3e:
                    fa:b0:66:a9:86:be:9b:50:0f:1c:fc:81:e4:91:1f:
                    16:1a:77:9f:ef:9b:e4:6b:e0:dc:ac:af:f4:38:a0:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6E:5A:E3:4A:5F:3F:85:47:6E:13:51:E8:E1:A3:B9:04:B2:89:7E
            X509v3 Authority Key Identifier:
                keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:31:31:b2:6c:62:76:f8:89:df:66:87:78:43:da:32:66:72:
         fc:23:d8:2a:a9:b3:f2:51:10:62:82:79:4f:b9:28:34:21:4a:
         60:7c:8d:70:4d:96:9c:a3:33:c3:07:38:3a:dc:1a:96:d4:22:
         64:7e:c2:15:73:de:a6:e5:ee:e7:78:4b:80:e5:b0:84:da:49:
         b2:15:13:fd:b2:4b:dd:21:75:24:d2:9e:52:78:9b:62:89:d2:
         d8:f5:9c:6e:2d:2e:9b:b8:a5:f2:87:d6:85:6c:f1:2a:e4:9f:
         b8:9d:00:53:8a:6e:b4:82:69:10:55:65:3d:70:62:c8:6d:af:
         1d:48:32:ba:60:25:f2:6f:2f:28:9e:ab:68:97:de:02:21:ab:
         2c:a9:d4:cf:bc:44:4a:49:92:44:f2:7e:cf:5f:02:17:5c:49:
         0d:32:d8:fe:7a:2f:8a:d2:78:a4:01:53:73:b4:b1:23:00:eb:
         c3:54:ea:fb:d8:9d:76:37:e7:d3:b3:a2:b3:fe:9b:77:d5:7b:
         80:e9:0e:7f:64:39:3d:9e:03:3a:a2:aa:83:eb:77:c2:dd:ea:
         74:49:c4:24:75:4e:23:87:94:2b:d7:1c:51:ec:95:f0:90:33:
         70:94:d6:da:5e:13:47:d2:64:b1:1f:4d:57:3e:e1:b0:3a:c2:
         fa:d4:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:16 2025 by rpki-client