Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
File:                     AnTQhnltTXea0WTCTCI_JrMoTtQ.mft (raw, json)
Hash identifier:          pj/yD4JeedFSYIgHhhwsSgcFnL6+Dt6xoNFFX3H6/iE=
Subject key identifier:   FA:CC:9A:71:59:B7:97:A4:36:D7:C1:6B:9E:7E:02:4F:8D:50:40:00
Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Certificate issuer:       /CN=0274d086796d4d779ad164c24c223f26b3284ed4
Certificate serial:       019749316CCD6188EED44D2A371912422F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 07:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:05 +0000
Files and hashes:         1: AnTQhnltTXea0WTCTCI_JrMoTtQ.crl (hash: nBkjxKxfO4GqTvZJz1pFzNJ7yfufX+GSHbimwUN3r8o=)
                          2: t14W6NV1DIvb11EAZ4XUA2ovVHE.roa (hash: zVqRh34b+6mC5A8sW6DvCRtqqP+h65EGfBsPI/G1bUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:6c:cd:61:88:ee:d4:4d:2a:37:19:12:42:2f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4
        Validity
            Not Before: Jun  7 07:01:05 2025 GMT
            Not After : Jun  8 07:01:05 2025 GMT
        Subject: CN=facc9a7159b797a436d7c16b9e7e024f8d504000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:2b:fd:99:05:4c:25:e6:c7:6c:06:b6:1d:
                    77:44:62:60:56:a0:ed:af:6c:88:95:01:ae:00:f6:
                    b4:e3:99:58:e4:67:0f:92:de:cb:ef:27:65:dd:23:
                    0d:de:f1:06:46:87:f2:14:7e:1a:64:d6:a8:56:5b:
                    20:59:a6:a5:d5:b1:48:56:ae:16:c3:28:a7:a9:eb:
                    f1:c9:44:16:23:09:ac:fd:3a:7b:dd:1a:b6:20:ab:
                    c4:4d:98:06:b2:6b:1f:e0:70:10:ca:a9:8d:46:b6:
                    29:8f:ad:b1:b6:07:3c:67:c5:50:dc:e9:dc:f4:5c:
                    b7:fb:6d:5e:95:6e:70:d5:cf:59:de:12:be:ff:2e:
                    2e:a6:fd:dc:86:97:19:fe:ab:21:ff:44:81:0c:45:
                    98:04:30:d0:d7:e6:f3:51:92:f2:1d:b3:a6:f4:9f:
                    95:7d:da:c3:ad:6a:f9:2f:1b:ab:c9:af:72:af:89:
                    40:4d:4d:16:01:02:ed:f9:5d:29:18:8f:9f:ab:46:
                    48:e4:7a:08:82:90:80:2c:94:05:aa:7f:8c:b6:30:
                    c9:a4:b3:8b:65:cf:15:29:47:fb:ab:6e:af:a2:1c:
                    62:2e:4e:53:82:73:e8:55:b8:83:a6:db:43:82:48:
                    8c:e0:bd:40:9f:63:93:ad:91:fe:ce:8b:dc:97:08:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CC:9A:71:59:B7:97:A4:36:D7:C1:6B:9E:7E:02:4F:8D:50:40:00
            X509v3 Authority Key Identifier:
                keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:a8:18:3f:04:dd:34:48:10:e7:1d:5a:f1:e5:6f:0c:00:
         d9:1b:c1:2f:87:88:37:4d:13:32:fa:08:8f:6d:9b:42:b0:b1:
         e1:6c:7b:5d:35:ea:f0:fa:16:16:e8:c5:ac:df:13:74:5a:0d:
         d0:1a:59:e5:da:55:59:6f:9d:66:ac:4c:29:57:af:ea:07:64:
         da:f4:52:9f:e7:f5:f1:a2:a8:8e:b3:87:15:59:22:1f:ea:a3:
         c8:3d:40:3e:d6:12:fd:7d:cb:0e:1f:91:31:98:4f:dc:ac:db:
         c3:d7:f4:ec:cd:65:4e:68:f7:7e:cb:92:f5:33:d8:cc:64:1c:
         14:d3:29:eb:b1:a8:4c:65:5f:c3:44:84:59:ae:c0:7c:0f:5c:
         8f:26:d0:33:c1:93:2f:10:40:46:c1:03:c4:d3:77:b3:1a:e7:
         68:40:d0:14:05:85:86:74:ee:64:b1:a9:40:46:e5:8e:cf:4f:
         9b:f3:cb:48:60:36:f9:df:be:da:dd:66:30:d9:13:16:f9:e4:
         dc:f2:7f:62:72:1f:62:d5:9f:4c:c1:52:6a:fe:04:c5:3b:47:
         a9:dd:0d:5a:2e:57:b0:fc:67:79:92:94:94:0e:8a:21:10:85:
         48:94:e6:f4:c6:4d:40:84:3f:6e:b8:6a:84:3c:4b:3d:71:fb:
         15:63:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:40:01 2025 by rpki-client