Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
File:                     rQt55LWcX82kk6IK0Y6UVYWdAxs.mft (raw, json)
Hash identifier:          SpWcd0WLcdVzHL9dIzcSgqTy0C5zne4L/1QFrRli3B8=
Subject key identifier:   7A:F7:1D:81:F4:28:C4:E2:72:72:08:73:92:36:41:BC:FE:EE:62:EE
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Certificate issuer:       /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial:       019748FA35022D8EADD4FDE1AD3819A7506E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 06:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:46 +0000
Files and hashes:         1: rQt55LWcX82kk6IK0Y6UVYWdAxs.crl (hash: F6in1q9/j+hCKvbFKN8jBNSFv5211uGYv6KLkBDDo2E=)
                          2: u-TIzzCbIsSdGOd1CtfNEcgemko.roa (hash: DN7JFzlpz7Go6ldmAhoYI+Qwq1vNoGjP9zoXjX6dqwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:35:02:2d:8e:ad:d4:fd:e1:ad:38:19:a7:50:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
        Validity
            Not Before: Jun  7 06:00:46 2025 GMT
            Not After : Jun  8 06:00:46 2025 GMT
        Subject: CN=7af71d81f428c4e272720873923641bcfeee62ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:1d:b6:ed:d9:e7:cd:4a:da:a7:6f:61:6f:
                    c4:c5:56:34:a0:2d:4e:47:bc:75:38:d1:48:35:1f:
                    4c:24:8a:6c:9d:c0:75:e5:77:3e:a6:96:fa:e5:af:
                    6b:63:f7:1c:ff:39:db:45:86:52:d1:5c:e9:66:18:
                    d3:e6:eb:9a:de:63:6d:42:61:f3:2c:94:80:6d:f6:
                    2f:35:0b:9b:ad:34:de:f1:84:7c:70:67:75:43:1e:
                    95:2c:ae:e3:31:5c:59:93:76:16:62:41:30:ff:fb:
                    ec:4f:1b:b5:bd:97:38:74:a5:f7:24:30:ed:08:a0:
                    50:49:5b:bf:77:18:20:b2:8c:d3:3b:4d:e0:6a:ea:
                    f9:f0:0f:23:1c:0c:2d:02:8d:30:6c:93:c5:bc:97:
                    a8:f5:f4:8d:81:9e:a6:2f:5f:55:44:4d:d4:60:cb:
                    ac:2d:cf:3a:b4:42:2b:a5:4c:91:25:96:05:06:e0:
                    b6:f5:7c:13:db:a7:e5:f4:5d:74:3d:d9:db:cf:c7:
                    78:c1:5f:36:b1:b3:8c:6f:84:a7:1f:b2:21:13:fd:
                    2f:c9:36:69:cf:01:4d:de:00:68:81:02:37:ec:85:
                    8e:d0:64:fe:b8:bc:a6:53:a3:65:7e:c0:d4:4f:5e:
                    6c:c7:71:b7:89:1c:de:75:2c:c8:56:81:30:fb:7e:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:1D:81:F4:28:C4:E2:72:72:08:73:92:36:41:BC:FE:EE:62:EE
            X509v3 Authority Key Identifier:
                keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7c:9d:39:96:5a:e2:cd:a3:d3:a4:b2:19:23:96:7d:ce:e2:
         e3:77:27:44:e9:e3:36:50:4d:1b:c7:53:69:5e:72:cc:f1:b3:
         01:94:f2:6f:bb:36:20:26:48:42:a0:97:4f:ed:78:20:d1:07:
         f4:43:17:de:13:a8:66:22:72:b2:58:de:2c:fc:ce:cd:c4:9a:
         54:65:bd:97:ef:ca:bb:08:16:6e:d2:1a:50:b4:4f:ec:1a:b8:
         d2:07:97:c0:71:93:68:9f:64:aa:9c:d7:3a:4a:82:cf:61:c3:
         f2:bc:4d:a7:87:4b:f7:2e:ba:e4:93:72:d8:8f:46:6d:f4:8e:
         07:7b:87:01:0d:b8:96:2e:3a:aa:05:b8:4d:c5:f2:6f:5e:4c:
         0d:8e:e4:28:0a:f3:79:13:30:24:c4:1d:ff:dc:91:8b:9a:b8:
         2c:96:66:f0:6a:eb:83:c8:ce:9d:15:17:85:ba:d1:ec:e1:1e:
         9b:13:6b:ca:57:4c:a7:fc:14:60:fd:65:13:95:6b:c3:7f:3f:
         0e:53:3e:c8:04:f6:e5:dc:54:f9:74:80:ba:ea:80:ff:c6:d7:
         f8:8a:16:cc:bf:c3:9c:88:e1:17:e9:1a:71:9e:26:ee:d0:6d:
         ae:31:e4:af:b9:00:dc:c1:75:a4:09:9b:9b:c8:1f:56:12:c1:
         dc:cf:12:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:21 2025 by rpki-client