Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
File:                     7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft (raw, json)
Hash identifier:          GAe7BcISxwNQmMh8MDldbGkFx3Ufuh6JId8EkjM0vZg=
Subject key identifier:   63:8D:EF:3C:2B:07:61:9C:9F:2A:5F:7D:64:78:7A:2E:C6:6D:CE:A7
Authority key identifier: EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Certificate issuer:       /CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Certificate serial:       01974E583DDEAFF97C3965591C203702A202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
Manifest number:          157B
Signing time:             Sun 08 Jun 2025 07:01:35 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:35 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:35 +0000
Files and hashes:         1: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl (hash: OioUCmu5DTvrCvhLpbbqVd7tqVTXEHVri19zEEUT0iE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:58:3d:de:af:f9:7c:39:65:59:1c:20:37:02:a2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
        Validity
            Not Before: Jun  8 07:01:35 2025 GMT
            Not After : Jun  9 07:01:35 2025 GMT
        Subject: CN=638def3c2b07619c9f2a5f7d64787a2ec66dcea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:76:6e:7b:19:98:cc:8c:f7:9a:14:5b:9d:
                    d6:ec:45:aa:0e:3a:78:a6:dc:d9:34:5a:07:19:3d:
                    70:42:d4:04:55:95:02:b5:c2:c2:92:b8:3c:b6:e6:
                    42:63:4d:50:82:2c:f7:a8:9a:47:94:dc:30:bd:fc:
                    3d:14:09:b9:d5:27:50:c6:d1:b7:4a:ba:6e:15:b8:
                    1a:c9:da:52:61:10:1b:8d:6e:cf:1b:30:a5:6e:b2:
                    ef:c1:c7:8a:7a:6d:fa:2a:b8:7a:d9:f3:23:05:26:
                    bf:56:ea:e4:c6:06:3d:ae:51:00:b3:6d:ab:e1:17:
                    ed:2c:8e:79:80:f0:ac:d3:1d:ac:58:82:ba:0f:7b:
                    83:5a:0c:5a:16:6d:18:ff:cf:fe:c7:b8:c6:ec:64:
                    7b:0e:d9:71:f1:e3:8f:ad:f1:15:51:85:ea:f1:0e:
                    1c:72:e3:ca:4d:30:be:9b:fe:f5:8c:e3:12:9a:bf:
                    fc:8e:e4:ad:71:de:0f:53:60:3b:cc:bd:43:8b:ff:
                    82:ca:b1:4f:99:42:c8:a6:ce:5f:1d:9f:e7:91:f9:
                    73:9d:c0:5a:af:0d:4b:2b:4c:68:ba:8c:b6:f4:8b:
                    16:bc:b8:27:7c:4b:e6:df:5d:d9:c4:69:98:d3:db:
                    22:d2:a3:e7:6a:3c:52:e4:05:48:fe:e0:aa:47:06:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8D:EF:3C:2B:07:61:9C:9F:2A:5F:7D:64:78:7A:2E:C6:6D:CE:A7
            X509v3 Authority Key Identifier:
                keyid:EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:af:1f:54:b6:7e:07:96:8b:aa:e6:69:be:d5:6f:e5:b7:19:
         53:23:4f:8d:f1:69:69:3e:6c:e0:1d:8e:3f:1a:90:83:7c:37:
         ae:93:cb:3b:2a:3d:d2:a8:82:5e:49:79:cd:f5:55:bd:2a:0d:
         3d:8c:3f:09:f2:42:44:4a:9f:6e:1a:76:65:25:ee:a9:c3:b9:
         32:10:96:77:df:df:48:f9:44:47:11:25:60:32:8e:98:54:8e:
         43:a4:14:3d:56:ab:28:48:99:39:aa:ae:ef:c2:46:27:c9:b5:
         83:04:e5:3f:b2:23:dc:b1:61:5e:22:c3:15:f8:cb:9a:40:bf:
         52:66:fe:11:a2:6d:3e:2d:73:e4:b3:a5:ec:bc:1b:d0:e4:07:
         bd:92:c4:5a:97:01:42:b6:ed:8b:09:ec:bd:98:22:85:85:f8:
         38:f9:8f:6c:2c:85:96:0c:23:8b:b9:92:7e:b9:9c:bc:50:d2:
         ee:e9:ea:69:73:7c:e9:52:24:b9:02:a4:61:c7:a1:d0:73:fa:
         de:0a:c4:76:d4:4f:ce:52:4f:0e:6e:69:92:9c:7a:49:f1:51:
         a7:f6:78:0c:72:d3:18:74:9b:f2:a8:8d:e2:9d:b0:2b:db:4d:
         ed:bb:3c:d4:31:47:74:ef:65:8c:e7:3f:23:8b:39:76:16:d6:
         98:c0:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:49:29 2025 by rpki-client