Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
File:                     6HFybEwQPg60LC8Oi12ocz-n7-0.mft (raw, json)
Hash identifier:          b+PeC3Jc7QsUCLBSQmXlwkwM17XPY9ZA2ZsH0qUg540=
Subject key identifier:   11:D0:D2:B9:A7:14:98:C3:EB:FF:03:A2:D1:0C:74:B0:85:34:FD:BF
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Certificate issuer:       /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial:       0197488D1FB172858D14C7B88970856C0434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 04:01:37 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:37 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:37 +0000
Files and hashes:         1: 6HFybEwQPg60LC8Oi12ocz-n7-0.crl (hash: bKWCND+uqmtUURXq4Wz9CaaqNEFP+8HJU0L5uoxD2bQ=)
                          2: G6m36SSucA1UgGO9o5M5kLYkkg4.roa (hash: eR6QiaUE2YBEvPQTI4qKJi+HqbeIzWqvNHB7ykDHvY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:1f:b1:72:85:8d:14:c7:b8:89:70:85:6c:04:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
        Validity
            Not Before: Jun  7 04:01:37 2025 GMT
            Not After : Jun  8 04:01:37 2025 GMT
        Subject: CN=11d0d2b9a71498c3ebff03a2d10c74b08534fdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:8f:04:f3:f0:98:f3:bc:6a:31:b0:1f:71:
                    2a:91:39:a6:7d:80:de:05:ae:9f:96:1e:cc:4a:74:
                    ce:6d:c6:26:7a:24:2e:ec:7f:39:50:c6:ec:06:ab:
                    9b:33:2d:ca:49:8b:a7:38:28:d4:0d:27:dc:ec:e8:
                    80:83:88:be:22:c8:5b:26:58:f3:ff:6b:e2:fd:18:
                    7e:74:b9:8c:c4:8e:1d:9f:6d:ff:ac:d4:ba:36:bc:
                    8a:32:f5:2d:b5:51:91:4f:45:75:a6:e3:cc:c5:98:
                    9b:00:55:74:04:dd:17:1b:96:4a:54:1f:13:1c:9b:
                    ce:8c:9e:ad:41:f1:8c:4e:e8:5f:af:45:dd:3c:bc:
                    5c:47:aa:07:42:e3:da:97:47:86:39:82:d6:4a:fb:
                    84:e7:21:10:bc:a1:03:8e:9c:8f:11:1e:e5:8d:d6:
                    26:13:1a:92:c0:78:e4:b1:cb:bd:14:a0:85:4d:de:
                    21:46:e2:fa:87:74:1f:61:0f:eb:c8:23:17:23:c1:
                    50:94:d7:88:8b:e8:f6:60:e4:8d:6b:c5:c9:d0:99:
                    29:06:66:a8:18:36:e8:0e:96:e7:8f:02:89:b8:91:
                    f6:8f:99:9c:a7:f7:4a:fb:81:ae:85:6f:df:fb:5e:
                    b7:6d:f2:e7:ae:b1:ee:d9:d6:bc:cf:f5:36:93:b5:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:D2:B9:A7:14:98:C3:EB:FF:03:A2:D1:0C:74:B0:85:34:FD:BF
            X509v3 Authority Key Identifier:
                keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:66:15:5c:41:6d:5c:30:55:54:0b:ef:d2:f4:96:83:68:
         7c:3f:8c:b4:ca:f3:e2:42:b9:41:c3:10:51:12:b9:3a:d7:e9:
         97:53:0f:64:12:c9:7f:0b:4b:eb:6c:a9:56:24:e7:e2:55:cd:
         26:62:0e:57:52:e3:ee:84:40:2e:45:b8:57:11:51:de:74:b2:
         b6:dc:50:38:74:7b:c5:47:fe:bf:cd:db:9b:72:93:3f:73:20:
         38:e0:57:70:0d:ce:df:1d:20:26:c4:8a:75:49:7a:49:ec:57:
         96:29:2b:75:0a:29:2b:ca:19:dc:de:c1:67:dc:12:66:bf:6f:
         d4:2d:83:d3:bd:d8:44:a8:68:ff:d9:08:d3:4a:70:47:61:de:
         d2:10:c2:f6:93:89:d1:39:52:77:1f:76:0c:da:a2:29:55:26:
         ce:57:c2:b4:7e:c2:1c:dd:92:c4:4b:69:1c:e9:c0:39:bf:8e:
         67:ff:92:77:57:76:e1:ae:3a:88:e5:6a:ec:d8:86:2c:be:74:
         87:02:f2:38:3d:45:d0:51:23:ee:dc:cb:af:72:fa:cf:97:a7:
         48:80:86:6e:a4:7d:32:ce:81:84:5c:75:62:df:e2:9d:c3:dd:
         f0:0b:f0:95:e7:1c:d8:30:65:9e:f7:8b:af:31:da:08:d3:55:
         1b:b4:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:57 2025 by rpki-client