Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File:                     tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier:          vR5csIslJnLr45qqg7pPU0paixVqaw8u0Y9JzKXU7Mg=
Subject key identifier:   7B:8D:05:67:3F:85:9D:9A:7A:24:D4:DD:10:9C:7A:E5:D1:18:6E:5A
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer:       /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial:       019747B0DC441760EF721FB6BB49E09755BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 00:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:02 +0000
Files and hashes:         1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=)
                          2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: Hw+0HsYnjD6GIgb2gOlU/wqt6M/d9MP+o3q3ukgYRqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:dc:44:17:60:ef:72:1f:b6:bb:49:e0:97:55:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
        Validity
            Not Before: Jun  7 00:01:02 2025 GMT
            Not After : Jun  8 00:01:02 2025 GMT
        Subject: CN=7b8d05673f859d9a7a24d4dd109c7ae5d1186e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:d2:83:e5:6f:0d:d9:00:a0:c2:c9:e5:c6:
                    29:b8:4a:e0:1a:80:2d:5f:a0:2d:da:44:ac:0c:ad:
                    19:68:28:5f:c2:0e:79:98:38:d8:e1:33:0d:fe:19:
                    50:6e:84:b0:a8:54:da:b7:30:f5:95:7a:0e:5b:13:
                    af:6f:02:f4:44:5f:7f:f7:a6:37:54:e3:4f:cb:80:
                    a2:f8:16:b8:f4:58:50:3d:31:21:70:3a:fb:1c:bb:
                    ce:d9:4a:5f:d2:52:f4:76:9b:4f:34:f1:2d:55:39:
                    fe:0d:9f:fd:f5:c8:29:6e:bc:7d:37:d1:1c:cc:98:
                    2c:14:84:92:7e:15:8f:5e:57:b0:ba:b7:09:fa:a9:
                    58:78:a8:39:e9:17:11:ef:f6:19:4a:6b:56:8e:ef:
                    f9:e0:60:2a:1c:cc:f2:af:ce:3b:0d:a0:62:dd:02:
                    6a:b8:bb:96:a3:d9:af:8e:68:f1:28:84:ad:58:46:
                    f2:d5:6f:d1:bf:b2:65:ed:52:28:7d:0f:01:ec:e9:
                    f4:76:02:ee:f0:a7:a9:eb:5e:d1:4a:da:28:21:60:
                    c5:70:d4:05:af:35:26:b8:c8:04:a0:a8:5c:22:14:
                    6e:13:e1:c8:86:f1:f3:05:4d:ad:f3:f7:7d:05:7b:
                    00:7c:94:b5:32:bf:f9:de:85:cb:ae:dc:7a:8b:d2:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8D:05:67:3F:85:9D:9A:7A:24:D4:DD:10:9C:7A:E5:D1:18:6E:5A
            X509v3 Authority Key Identifier:
                keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b4:98:c0:10:2c:33:81:62:09:63:92:bf:98:3d:0b:13:98:
         bb:27:b6:40:db:6d:5e:7e:19:a1:24:6f:e0:99:65:fd:b5:e2:
         57:ca:bd:56:27:7d:3e:f3:98:af:ca:cb:6e:e3:ee:14:c1:7f:
         f3:ce:72:1b:5f:81:62:38:bb:6d:30:b7:32:91:2f:d4:4f:b1:
         2a:fd:55:8a:44:d2:75:cb:e8:ba:5e:16:5f:2e:b2:93:d4:78:
         14:55:6e:74:84:64:a0:df:9a:36:b4:34:65:b8:b2:f2:b8:2d:
         ef:d6:96:67:06:4c:f4:66:29:ec:1e:3b:ef:4b:d9:17:42:64:
         e9:ec:b9:04:2a:fa:43:18:71:62:1f:08:a0:2d:6c:78:eb:02:
         87:2f:97:9e:e4:68:4a:fb:35:35:e7:26:17:0f:76:cf:d1:ec:
         96:f4:14:da:ad:e6:43:14:08:60:73:87:a9:49:ae:95:0b:f7:
         74:9a:91:2e:cf:75:1f:85:a6:ec:c2:d6:8f:88:ef:a0:60:a7:
         dc:ed:c5:b1:2e:87:ac:5b:6c:7f:a0:b6:4f:cc:a9:6a:83:2b:
         c8:da:d3:c5:ee:ec:bd:0c:b5:66:eb:d1:79:64:29:3f:46:72:
         97:b0:69:8a:55:e4:9c:1a:56:aa:22:38:64:2e:bf:29:aa:d4:
         fa:07:a8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:07 2025 by rpki-client