Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
File:                     J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft (raw, json)
Hash identifier:          PXS1A/VteqwsGwk31mGuqKS09Iwfvd8a6OCK3yKhmAA=
Subject key identifier:   57:5E:DC:BB:B6:34:EE:5C:FA:71:0C:54:73:9E:80:E5:D5:0F:3E:C9
Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
Certificate issuer:       /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Certificate serial:       019747E72EC52242A0FB8612B6C3BEC25E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 01:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:22 +0000
Files and hashes:         1: F7MJ36J0uiDKy-M_vXjmJdbP4fs.roa (hash: 8zleOD6aN/r+slAEa8mt1l5gM5SF8gtFDMiJe9eHZeU=)
                          2: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl (hash: PoLXegA8W4HF7w/L5DaX+qPl2q674+XGiwxtua4yVAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:2e:c5:22:42:a0:fb:86:12:b6:c3:be:c2:5e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
        Validity
            Not Before: Jun  7 01:00:22 2025 GMT
            Not After : Jun  8 01:00:22 2025 GMT
        Subject: CN=575edcbbb634ee5cfa710c54739e80e5d50f3ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:10:b4:ab:85:8b:d2:48:83:50:4e:4d:2d:
                    3b:98:bf:f9:8a:73:df:cc:2c:82:d4:3b:22:77:af:
                    79:cc:b4:31:c1:6d:09:1e:c2:11:2b:90:8f:08:c3:
                    f6:68:e9:e1:89:d1:46:80:12:ad:35:3b:dd:34:db:
                    ab:5a:8a:fa:4e:d6:c0:10:89:dc:26:01:4b:5a:d8:
                    12:ad:2c:d5:18:b5:fd:1c:5e:25:c8:5c:98:dd:2a:
                    dc:d5:99:47:5a:6e:e7:69:7e:d8:f7:22:be:f9:8a:
                    41:3e:63:01:19:ec:1f:bd:24:d8:9a:30:5d:9c:9a:
                    df:45:18:af:a2:04:02:c5:1b:a9:a8:b2:43:8b:4f:
                    0d:21:d7:ca:47:18:d8:6b:fc:5b:b5:98:9b:a7:1b:
                    e9:77:fd:21:2f:59:a0:71:fd:f8:17:11:ba:95:eb:
                    2d:83:f2:ef:82:40:fa:28:b6:29:64:b8:24:d9:bd:
                    be:55:63:97:d4:e6:26:97:00:0e:63:d2:bb:57:d7:
                    f8:f3:e0:14:68:c5:4c:88:28:e5:7a:31:f6:88:3c:
                    5f:2d:29:e3:8f:d8:e2:23:8c:26:e7:54:13:b4:71:
                    e1:9a:95:c0:11:df:9a:93:0d:4f:9f:46:5e:b6:bf:
                    f8:75:32:a8:de:be:bf:86:3a:a2:27:de:30:d7:90:
                    81:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5E:DC:BB:B6:34:EE:5C:FA:71:0C:54:73:9E:80:E5:D5:0F:3E:C9
            X509v3 Authority Key Identifier:
                keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:51:3a:2f:77:e2:8a:42:ce:58:4a:db:65:11:19:9f:4a:f9:
         49:34:49:2a:99:c8:05:e3:3f:b3:a2:48:a0:b1:bd:45:5a:7b:
         cf:d7:43:a7:db:13:9f:d2:b4:0d:80:bd:7d:6d:b2:c0:4c:c0:
         fd:b6:6e:73:53:13:88:1c:75:67:81:6c:35:a0:c3:13:e1:f1:
         5d:be:f9:01:6d:94:0c:57:f3:49:0d:4d:04:1b:85:03:d9:26:
         d3:3b:ec:b6:38:96:ab:b5:bd:8d:e7:6c:e8:73:98:33:aa:3e:
         51:bc:05:ab:df:26:af:6d:a0:12:0f:cf:20:e0:73:59:73:c9:
         6c:16:ac:6c:cb:4c:e3:df:ca:b2:5d:2f:35:b4:10:a9:1d:b4:
         3c:fb:f6:1e:4c:b7:e9:a5:de:ee:bb:8e:8a:b4:42:ae:51:a0:
         80:65:af:5f:a0:45:f0:d9:2e:65:c0:3f:8f:bc:05:5c:50:2a:
         7f:57:46:a6:12:50:47:5a:f4:d7:40:69:33:66:d9:a6:ef:9c:
         74:8a:ae:48:0f:8d:c4:56:f0:8c:90:26:65:4a:2e:76:6a:6b:
         a7:b6:23:0d:16:d6:b6:66:fd:c0:bc:4d:5b:8f:d1:6a:ea:46:
         bd:b5:50:1d:ef:47:9b:41:45:eb:17:81:47:c0:fa:3d:b7:ea:
         d0:9f:74:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:27 2025 by rpki-client