Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
File:                     iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json)
Hash identifier:          BXaiJCcSZHiA4224rY/biXj1wclYGdswq17y6KqI4ZQ=
Subject key identifier:   A6:BA:7C:A9:1E:42:A1:8E:8A:27:25:67:67:5A:97:56:14:A3:07:7E
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Certificate issuer:       /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial:       0197432F1B02F047951879995446220AF064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
Manifest number:          157F
Signing time:             Fri 06 Jun 2025 03:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 03:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 03:00:49 +0000
Files and hashes:         1: G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa (hash: z8nYleBnvbZLzPZcC36R6KcHw5MKTfcdnhsG0y6RlGM=)
                          2: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: q0F66eepHdjznyrcyvTVo8FJdbqgodofVymyqQZ+Ua4=)
                          3: shLVoHyiaZbg7eg2YqA4ky_a-CU.roa (hash: eojzTxeSDWN8wwV7q5opIiiSFcYnrY9hg5to5e5Gp1s=)
                          4: xifnCCeMNH18n0eWMqga1pgyjCM.roa (hash: apTXD8raL3qZhnZiaGrtnxJWUf2/cGGa8lnT/pZJ1So=)
                          5: ywH8wQjufiysHP5OXijDjTOBrH4.roa (hash: Kuw4rCVLsz9XQ+KOtke/DWSrK02REb1j13WO/v4sxqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:43:2f:1b:02:f0:47:95:18:79:99:54:46:22:0a:f0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
        Validity
            Not Before: Jun  6 03:00:49 2025 GMT
            Not After : Jun  7 03:00:49 2025 GMT
        Subject: CN=a6ba7ca91e42a18e8a272567675a975614a3077e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:de:6b:1d:c4:14:01:81:80:72:bc:9e:c8:
                    03:71:ba:44:2c:a8:e5:6d:1f:90:02:85:77:ca:a9:
                    17:ac:fd:a8:06:d0:4f:26:75:2d:55:19:2b:90:99:
                    ec:0f:bf:3a:29:b4:cd:cd:c4:a9:55:50:27:72:e5:
                    0c:93:b4:54:7f:89:df:ec:8f:7b:5b:e3:7c:54:a4:
                    c0:2a:7c:1c:bd:4c:ba:3e:7d:e9:e8:a8:2b:ea:7c:
                    30:ac:0d:7e:10:aa:40:18:3e:5c:ef:28:8f:a0:d5:
                    ae:2a:a5:7f:30:d4:15:0a:55:fd:27:e6:55:4f:77:
                    3f:2b:85:6f:20:08:b9:3a:67:27:72:48:b5:09:e0:
                    e4:62:9b:d6:fc:c2:e8:d5:b6:94:92:fc:dc:74:bb:
                    06:d7:b8:1b:3d:78:a3:69:8b:80:b5:6e:83:b4:4a:
                    45:5a:08:4a:78:6b:a2:8b:89:3b:fd:01:cb:9b:80:
                    ee:d5:ca:2c:4d:76:fa:e5:75:05:61:ab:af:83:05:
                    11:e5:87:e8:ad:59:c6:15:0a:a6:20:05:75:2c:1f:
                    15:14:ac:49:37:e5:77:52:29:e0:2c:eb:2b:00:1c:
                    c2:d5:4e:6b:e1:2f:13:1f:4d:66:c8:b8:49:4f:11:
                    4f:b1:92:ce:5a:4b:fd:df:b9:6d:5a:cd:95:4a:e4:
                    5c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BA:7C:A9:1E:42:A1:8E:8A:27:25:67:67:5A:97:56:14:A3:07:7E
            X509v3 Authority Key Identifier:
                keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:45:76:23:48:63:bd:d4:d7:b1:22:5e:17:41:ee:ef:e3:8c:
         b7:a4:72:26:a6:ee:43:89:3b:06:c6:e3:81:62:dd:1c:98:59:
         37:85:10:5c:c7:bc:90:36:b9:27:1b:8b:88:a1:6f:db:05:2b:
         10:fa:bc:98:a5:6f:3f:5f:a3:ae:0b:d3:21:e6:c1:58:4b:f1:
         19:46:da:0a:17:41:e5:11:ee:9a:45:e3:8a:12:4b:ed:20:f8:
         fd:17:a8:d5:dc:5a:77:e8:f9:b8:dd:62:47:08:4e:76:e0:03:
         a4:0c:0f:16:a0:b6:7c:68:fc:70:0a:fe:11:dd:3f:39:05:bd:
         88:03:e3:5b:0b:77:b3:83:a9:b8:06:a5:19:3a:73:60:cc:c2:
         c8:5b:dd:09:f8:0d:fd:52:2c:5f:19:c4:b1:71:09:83:f1:82:
         60:a8:1e:54:44:8e:11:0e:f3:e9:a4:97:26:a8:ca:72:94:bc:
         44:5b:21:ea:e6:88:b4:82:09:94:7b:59:d5:45:37:29:8a:71:
         5b:c6:b1:fa:91:f8:61:fb:91:23:34:85:d1:2d:cb:98:3e:d2:
         98:72:f3:d9:64:8f:5e:32:33:44:42:54:11:e0:a9:03:64:20:
         c3:83:c1:f4:59:3a:18:0c:4a:e1:21:e2:aa:1b:3c:13:80:73:
         06:ec:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:17:05 2025 by rpki-client