Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File:                     x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier:          JOtJzPj11CaTUH0xGi6fF0gwvLAkK65lTwK22w7lDMM=
Subject key identifier:   A9:B9:20:F1:73:76:AF:4E:FE:C9:33:86:67:4D:98:8B:4F:CE:D0:BE
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer:       /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial:       0197462FD7806E7B54368775868520CA7ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 17:00:29 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:29 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:29 +0000
Files and hashes:         1: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (hash: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=)
                          2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: qAu9Vmq/gbFj9if0P/bNtwIShzRdYH3g4+mxVsgmut0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:d7:80:6e:7b:54:36:87:75:86:85:20:ca:7e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
        Validity
            Not Before: Jun  6 17:00:29 2025 GMT
            Not After : Jun  7 17:00:29 2025 GMT
        Subject: CN=a9b920f17376af4efec93386674d988b4fced0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:09:6d:5b:ee:89:e5:cf:6c:c1:2b:8a:93:
                    04:55:b2:c5:3d:b8:a9:f5:6f:b4:72:f6:ed:f0:de:
                    69:06:28:18:b5:0f:b5:2f:05:ff:54:0d:39:44:93:
                    4f:18:1c:cf:60:c2:e2:cd:4d:07:26:43:e4:21:d4:
                    51:ca:aa:80:61:01:49:a7:55:71:11:b6:17:1a:4f:
                    ef:06:61:16:5c:b3:6e:12:ae:e0:ca:ec:af:85:e4:
                    9a:4e:7f:d1:76:3c:2a:e0:e5:10:7a:d0:c5:53:4f:
                    8c:a6:d4:56:16:6f:a4:f3:ff:0f:11:2d:d7:3a:4e:
                    cd:6c:e4:d9:a3:cf:fa:d7:aa:d3:bd:8f:d5:4f:b8:
                    62:79:13:20:5c:bd:25:32:d2:85:48:b7:1c:2c:9c:
                    85:a3:bc:3a:5a:72:5b:21:f4:d8:df:fb:e6:0a:12:
                    5f:0c:fe:88:31:d6:fa:54:3f:2c:5d:44:c1:c5:04:
                    15:23:07:dc:86:dd:c8:c7:70:a5:99:9c:58:83:ed:
                    33:d2:a4:dc:d0:2f:d6:89:2d:a5:5a:2b:d4:55:9d:
                    ce:9d:75:41:95:cc:97:63:37:29:5c:19:39:d3:ff:
                    c9:db:d1:6f:30:68:8e:b1:24:f3:d3:cf:4e:23:23:
                    6c:e3:36:c8:5b:be:f8:99:a5:c3:64:47:74:d4:44:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B9:20:F1:73:76:AF:4E:FE:C9:33:86:67:4D:98:8B:4F:CE:D0:BE
            X509v3 Authority Key Identifier:
                keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:02:ed:ee:ae:0f:23:66:f1:c9:99:53:3a:84:5a:5e:d3:6a:
         8f:84:18:b1:4f:b6:6f:3f:f0:5b:0e:2e:62:ec:14:de:52:5f:
         e6:58:b4:b3:59:1c:13:56:a8:8c:3d:c7:3f:e3:4f:75:7d:93:
         c8:5d:48:1e:5e:28:21:ef:aa:d4:0f:c4:92:28:3c:98:9b:cb:
         bb:18:98:fa:d4:0a:e0:86:49:0f:37:ef:43:5f:16:e5:83:b9:
         df:dd:78:1f:97:d3:3d:ab:1f:b4:73:eb:40:6d:7d:b4:f4:4d:
         40:b4:0a:b2:cc:5f:b5:81:3c:4a:65:41:11:41:dc:b0:0d:42:
         7c:d9:f4:58:38:53:8f:11:6a:c3:fb:d6:87:1e:60:8b:0d:3b:
         2e:7b:fb:d0:58:58:1e:74:49:eb:d5:e0:b9:00:2c:40:10:99:
         4d:ba:5c:db:37:dc:3e:91:0b:c7:ba:5d:0f:52:48:ac:47:cf:
         d1:ea:31:96:41:4d:2a:ff:11:b9:6f:12:c8:4c:12:02:34:30:
         df:e9:26:47:e2:81:a1:29:ab:91:81:22:e2:19:4a:83:47:fe:
         f7:9b:76:e4:d1:52:1a:53:6b:a2:5b:66:37:ee:f8:7e:62:98:
         cb:26:27:2f:47:06:6d:6c:99:5d:78:4d:1f:cd:63:ba:d9:58:
         4a:f9:e7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:19 2025 by rpki-client