Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
File:                     6suWQTrI8sFrlHlWiRdNenIgHvU.mft (raw, json)
Hash identifier:          jLL88qbGRmMM3rddAn5VxiaZAtA30u8zp8YSXsSt0bI=
Subject key identifier:   53:39:D8:E8:F5:FA:3D:3C:DC:25:88:FA:AB:32:10:FD:D7:61:49:60
Authority key identifier: EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5
Certificate issuer:       /CN=eacb96413ac8f2c16b94795689174d7a72201ef5
Certificate serial:       01974B8D3E90E71EF116B6F74DA8F844F00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 18:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:37 +0000
Files and hashes:         1: 6suWQTrI8sFrlHlWiRdNenIgHvU.crl (hash: hnkE4FQpf2WSHTZ2+91EmZDUDhQpLWfri/Y46Uh+W54=)
                          2: XnM69Ta6XBN7hts_Rb3s8aetyF0.roa (hash: NW2wK+uGdcWDDVw4MOzLshQcmX/+Hk+W4cTpAUTOR44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:3e:90:e7:1e:f1:16:b6:f7:4d:a8:f8:44:f0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacb96413ac8f2c16b94795689174d7a72201ef5
        Validity
            Not Before: Jun  7 18:00:37 2025 GMT
            Not After : Jun  8 18:00:37 2025 GMT
        Subject: CN=5339d8e8f5fa3d3cdc2588faab3210fdd7614960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:ce:1f:a7:dc:f3:e9:b9:e5:6e:ca:1c:76:
                    c9:7f:bc:f7:28:26:a5:df:67:63:d3:3b:ce:49:bc:
                    c9:14:99:26:e0:76:32:71:d1:52:4a:37:07:23:7f:
                    58:7b:7f:09:34:35:1c:41:6f:07:49:2c:c3:e1:6f:
                    fb:72:5b:a2:d2:4e:40:21:a4:26:f9:b7:77:93:45:
                    ee:af:e4:e6:a5:98:23:3c:34:ca:9b:f8:63:00:bc:
                    ea:2d:da:e0:8c:8e:fa:b6:97:c5:b6:bf:47:26:85:
                    69:de:a7:b4:63:8c:17:18:b6:41:61:26:9f:f5:76:
                    b5:11:ef:d8:c2:72:3b:d9:65:0d:2d:64:eb:d7:89:
                    8b:7e:a1:4d:fc:1d:88:87:08:1c:00:b7:2c:37:41:
                    6d:29:7d:00:45:0c:42:5b:4f:3e:62:76:41:31:24:
                    2b:c8:69:78:ef:08:5c:6a:50:a8:c3:09:80:2b:15:
                    24:97:17:d3:17:fa:4c:17:2e:bc:06:8a:02:fb:4e:
                    5d:7b:52:66:76:34:3f:39:20:2d:58:13:b2:87:73:
                    04:4e:19:59:41:f0:b8:6d:79:47:cd:56:9c:1c:c8:
                    f0:85:84:b2:e3:1f:62:8b:2e:fe:4d:f3:f1:66:25:
                    11:cf:68:0a:f0:b6:11:7c:96:ad:f0:af:86:e4:f5:
                    39:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:39:D8:E8:F5:FA:3D:3C:DC:25:88:FA:AB:32:10:FD:D7:61:49:60
            X509v3 Authority Key Identifier:
                keyid:EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:42:8e:6f:94:59:ff:7a:f1:de:93:37:87:ef:a5:be:30:b0:
         58:c1:2e:e2:64:09:41:7e:65:4f:04:fc:42:e1:50:84:a2:8e:
         2b:b4:c9:ff:24:15:34:b2:21:95:cb:22:66:7e:13:0a:39:d3:
         90:c9:fb:56:9e:cf:82:b1:1b:b8:a1:58:69:9c:f0:66:a5:3f:
         d8:4b:35:f5:7e:ff:7c:16:8a:0c:2d:03:49:42:9a:13:11:be:
         f5:be:9a:09:20:20:66:fb:f3:4f:f2:dd:cb:b2:48:7a:a6:bc:
         b4:59:4a:9e:4b:a3:f8:8e:04:68:bb:25:ee:9c:a1:d1:77:0c:
         35:55:3b:a6:8d:ca:e8:08:e4:30:c4:d2:24:54:4f:92:19:95:
         c8:16:c6:cd:9c:3d:07:43:b4:4b:e7:32:54:ad:63:bc:b4:d4:
         f3:c3:02:fa:58:d6:64:fa:17:8f:02:ed:a7:9c:b0:91:51:b8:
         0e:7d:ae:72:a2:99:a6:40:81:a0:93:e5:bf:b1:1b:fe:c0:17:
         fc:0d:a4:55:01:93:22:40:69:3e:8e:69:a2:75:65:c7:08:a7:
         8b:e2:fb:6e:b1:39:1b:b9:f6:de:79:8a:46:0f:04:4e:39:90:
         0a:8a:52:8e:05:0a:56:9b:3b:5d:85:95:99:ef:ee:97:b8:4c:
         44:1e:43:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:05:30 2025 by rpki-client