Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File:                     ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier:          3oZNxKdlJHBLxm8GTlYohbOu+6iVuCQ9Ixvgqu4r5zU=
Subject key identifier:   97:BD:91:25:BF:14:C1:3F:D4:A2:EA:AE:95:80:75:DC:1B:6E:90:8F
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer:       /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial:       019748C36A9B0A25B262846D7B27CC9A0491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 05:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:55 +0000
Files and hashes:         1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: Ub9uITlGKlD/fYMNM3qRzm+ZiFFDVsID/OWmyJdEMHA=)
                          2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:6a:9b:0a:25:b2:62:84:6d:7b:27:cc:9a:04:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
        Validity
            Not Before: Jun  7 05:00:55 2025 GMT
            Not After : Jun  8 05:00:55 2025 GMT
        Subject: CN=97bd9125bf14c13fd4a2eaae958075dc1b6e908f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:8c:59:87:1e:8b:dd:cb:3a:7c:41:f9:37:
                    d1:6f:c1:be:93:13:6e:94:0b:bb:7d:39:1b:79:46:
                    5d:9d:93:b1:d1:7e:4f:35:39:0b:d5:cd:ac:75:56:
                    96:89:06:da:1e:20:35:23:d1:2b:3c:83:ff:55:d3:
                    cc:20:54:35:60:88:1d:21:98:b6:84:c8:04:18:78:
                    e8:5f:a2:44:e7:94:84:4c:45:57:94:f3:6a:ab:41:
                    51:d4:28:6e:ed:71:4c:be:ee:72:8a:ad:ec:39:7c:
                    47:48:42:50:60:55:73:54:08:0e:72:8e:dd:7d:55:
                    e9:1f:0d:e5:ce:cf:be:8a:cb:55:ce:e7:bf:2c:60:
                    fc:ed:e8:3c:eb:6d:6a:fe:f4:f9:d7:5f:00:05:76:
                    a0:d2:0f:a2:35:00:a5:17:47:22:13:a0:4d:f2:b7:
                    90:c3:db:a8:96:4c:3b:6e:d9:96:1a:74:4c:cf:35:
                    5c:12:15:98:b1:86:98:da:39:72:41:02:62:02:a3:
                    14:bb:97:e9:ea:9f:99:00:93:b2:95:b5:fb:78:12:
                    5b:9d:f0:dc:f4:23:ca:e0:66:4e:07:ef:af:d4:22:
                    61:3a:36:49:2e:78:78:f8:3b:2d:c2:3f:ed:59:0f:
                    a1:cb:53:1f:a9:b9:95:1f:de:83:a5:16:cf:18:f3:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BD:91:25:BF:14:C1:3F:D4:A2:EA:AE:95:80:75:DC:1B:6E:90:8F
            X509v3 Authority Key Identifier:
                keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d0:97:6e:da:8b:d4:1f:4c:b4:4f:8b:3b:de:89:6a:6d:f4:
         63:61:e6:cb:06:69:bf:30:37:59:c0:f5:9b:02:b0:44:3d:85:
         36:b6:80:14:a1:ab:c5:a2:75:c4:e8:c2:2c:9c:97:74:df:73:
         2c:9d:8e:72:aa:7e:0f:9b:ed:02:ee:c5:20:6a:89:ca:24:4b:
         53:80:34:e8:5f:47:0d:81:1a:35:08:3f:bd:9e:20:10:86:60:
         8b:19:34:25:84:5f:9b:04:2f:88:ec:78:fc:26:4f:35:02:7e:
         eb:94:04:44:db:c8:2e:55:60:30:9c:df:56:0d:bc:62:13:22:
         2f:6d:3d:88:fd:cc:2e:d0:5a:4f:6d:b5:ec:6f:5d:62:ab:f3:
         d1:30:6d:15:ff:10:fa:a0:5a:8c:04:b2:2e:6a:99:a7:db:8a:
         c5:e0:bb:50:ad:c5:e0:a9:bb:ad:48:66:35:d3:a1:0b:73:8a:
         1f:ac:50:ce:a6:8a:b2:bb:9f:b6:d5:7d:b2:3f:eb:3a:bf:09:
         c4:1b:79:dd:aa:30:b1:56:4e:56:38:f7:28:c9:e9:29:89:61:
         86:a9:db:11:6f:8a:41:8c:14:57:7a:4b:59:e4:ee:c7:3a:82:
         7a:7f:9d:2f:2a:b9:1b:63:15:05:55:c6:d7:b7:7e:74:1a:fc:
         0b:e7:11:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:02 2025 by rpki-client