Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
File:                     gO9no9w9cYRemxVVz_WtMbtCOpQ.mft (raw, json)
Hash identifier:          8Rux9rJxnx+w6hSV85rNei+c0Oi+eX4aj7QnjoRq7us=
Subject key identifier:   9F:BC:98:8A:6D:66:27:19:B7:28:3E:7C:FB:4A:EF:39:6D:45:63:00
Authority key identifier: 80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
Certificate issuer:       /CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
Certificate serial:       01974DE9FE39B91612CF164FB6082CFF0CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 05:01:09 +0000
Manifest this update:     Sun 08 Jun 2025 05:01:09 +0000
Manifest next update:     Mon 09 Jun 2025 05:01:09 +0000
Files and hashes:         1: 725G7dybLbuQKpUr5VC2q0wDs8E.roa (hash: OC0qz7BZ0oC6fOW2Sqogh+LE8Hr7cjZ2nPkrOk5rs7g=)
                          2: gO9no9w9cYRemxVVz_WtMbtCOpQ.crl (hash: OyfNfx6sJC3oNmremimXvAOnBBlJ+qHE1nmsZeK5yf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:fe:39:b9:16:12:cf:16:4f:b6:08:2c:ff:0c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
        Validity
            Not Before: Jun  8 05:01:09 2025 GMT
            Not After : Jun  9 05:01:09 2025 GMT
        Subject: CN=9fbc988a6d662719b7283e7cfb4aef396d456300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:12:42:61:33:e7:84:ca:9d:6c:a7:6b:a3:
                    d2:ae:e9:f7:e4:1f:36:e1:a8:7c:34:78:76:c7:8e:
                    84:8a:46:ac:b6:5b:bd:34:8b:bc:a6:cf:12:eb:2f:
                    bc:eb:62:23:84:a7:54:64:39:8a:63:56:eb:7d:b4:
                    12:58:bb:e1:0f:e6:2f:4d:93:3f:82:07:44:c9:36:
                    86:48:24:4f:ef:19:3f:21:b1:77:7e:2a:07:26:e1:
                    01:eb:2c:7f:7a:40:c9:e4:62:da:a8:d6:55:0d:66:
                    82:b9:c9:22:59:db:92:73:5d:cf:86:78:87:18:6d:
                    d2:5c:c5:a3:2a:30:b4:30:a1:10:0f:ac:f3:19:9f:
                    89:40:9a:c9:8c:9e:5d:67:bb:5d:51:bb:0c:96:72:
                    93:13:41:a1:b6:0b:99:be:e7:48:ee:e9:be:d6:c7:
                    21:f5:93:20:79:12:72:e6:df:d0:81:18:cb:ab:6a:
                    08:1f:22:17:8a:2f:82:71:23:5b:c2:fe:55:0c:46:
                    32:13:9b:d0:32:0a:2b:9c:c1:e1:45:94:ea:7c:21:
                    66:56:24:f3:37:a7:41:d8:8d:88:06:64:cb:93:20:
                    22:36:dd:32:6b:82:40:cb:bb:c9:a9:fe:6d:52:a5:
                    03:5f:40:bc:df:17:34:36:26:6d:da:2e:93:35:72:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BC:98:8A:6D:66:27:19:B7:28:3E:7C:FB:4A:EF:39:6D:45:63:00
            X509v3 Authority Key Identifier:
                keyid:80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:c6:0a:77:4b:f2:0b:b2:21:2c:4b:1e:f0:78:ff:3d:0d:
         b6:15:98:46:28:0f:02:b0:91:6d:a0:7c:e5:54:f0:30:b1:4f:
         f5:32:6b:5c:d8:06:e8:68:b8:72:50:90:f5:d4:75:1e:e4:e6:
         d3:28:4a:d6:a5:ec:49:df:ef:2d:f2:56:fa:ff:6b:93:5e:ca:
         b8:e8:6d:72:51:b2:91:9b:6c:11:b9:3f:cd:bb:b4:71:13:18:
         ad:f9:f2:8d:4e:c4:a3:34:20:fb:1d:86:74:40:52:bd:db:fe:
         29:61:06:81:7a:85:7a:79:cc:e8:03:7b:28:93:e1:ef:89:4f:
         49:cc:26:cb:5b:e1:d8:bf:c1:42:d2:49:0b:44:23:e4:e9:b5:
         8f:d9:15:68:95:d6:ac:05:cc:b6:45:1a:75:9c:03:57:b0:50:
         bb:9b:eb:a9:8c:97:10:79:b9:ba:db:4a:55:eb:09:33:fa:f5:
         c1:bd:f3:da:c9:de:bd:5f:03:d3:53:f5:30:cb:5a:96:2e:e4:
         9c:c6:3c:d4:e3:a4:48:38:e7:39:ff:65:bb:67:d6:2f:14:48:
         89:e1:e7:36:cd:23:30:8e:65:c0:e0:1c:39:82:af:35:a2:7e:
         55:ad:74:87:e4:47:c9:29:09:21:d8:c5:19:99:28:dd:71:a9:
         27:67:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:23:57 2025 by rpki-client