Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File:                     Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier:          ANOTfiS8YCCdcOas/ILHRyXwRSIPMevInG2nxWILsVI=
Subject key identifier:   F2:2E:C5:BD:A2:DB:84:94:A7:31:7C:AA:01:B3:10:5D:69:A6:04:EC
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer:       /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial:       01974779C730AB2C6B11A1F54C5D999CF208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number:          157C
Signing time:             Fri 06 Jun 2025 23:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:52 +0000
Files and hashes:         1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=)
                          2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: 50YMArA+OBllttfPjk963nLMlIEwKYwZRyS4T2VPxhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:c7:30:ab:2c:6b:11:a1:f5:4c:5d:99:9c:f2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
        Validity
            Not Before: Jun  6 23:00:52 2025 GMT
            Not After : Jun  7 23:00:52 2025 GMT
        Subject: CN=f22ec5bda2db8494a7317caa01b3105d69a604ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:a8:c1:50:bd:07:75:b2:05:6a:fd:5a:44:
                    df:ad:c2:62:b3:61:fa:be:94:3a:61:33:6c:5e:de:
                    8f:27:00:ae:32:d0:8f:a3:56:b8:cf:8e:e8:31:7a:
                    72:d9:a7:17:c1:88:f2:10:e5:47:ce:70:1b:d7:f9:
                    82:d0:53:bc:8c:c9:f3:87:79:10:d8:e4:5c:5c:6b:
                    10:90:bd:84:53:9f:f5:08:46:4d:7a:3b:7c:11:ba:
                    01:ff:5a:b0:a6:b6:af:2d:2e:f2:2c:f2:7d:c0:73:
                    16:82:8b:36:b6:90:bf:f6:7a:f9:bf:54:d4:29:99:
                    ec:7b:f5:0b:96:bc:98:65:c6:4a:d8:06:e5:2f:37:
                    5b:be:b2:69:b8:77:f9:cf:04:42:6a:44:9c:2d:9f:
                    5a:d7:f7:4b:28:93:6b:6d:09:fe:2d:9a:e9:20:b2:
                    cb:53:f1:5d:ae:f7:b9:68:75:fc:4c:8c:5c:7c:d8:
                    b2:95:9f:ad:6f:ca:85:0d:bb:d3:34:04:07:be:01:
                    b4:33:98:53:92:85:11:6f:29:42:2a:33:e5:45:f7:
                    0b:29:f3:80:66:40:c1:b2:9b:fb:24:b5:32:88:35:
                    a0:2d:89:9f:d7:c3:9f:0d:b6:2d:99:50:73:37:74:
                    85:20:48:dd:f8:95:91:ac:e8:ef:7e:76:c5:9d:e4:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2E:C5:BD:A2:DB:84:94:A7:31:7C:AA:01:B3:10:5D:69:A6:04:EC
            X509v3 Authority Key Identifier:
                keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ea:ac:fe:32:c1:37:b1:6d:6a:0e:89:67:08:7b:bd:4a:f2:
         9c:61:97:61:1c:83:c6:63:f6:75:e7:dd:99:9b:f2:d7:6d:32:
         43:f5:d3:a2:4e:02:ed:63:d7:7c:02:5a:f8:4d:a0:74:4c:6a:
         56:f5:16:bb:e9:e0:16:10:e4:2f:bc:25:1f:63:d0:de:a8:b1:
         ac:22:de:d9:80:1c:d7:f9:5f:5e:ed:39:66:3f:8d:81:4c:cd:
         b4:94:5a:de:33:b7:48:6e:40:d8:58:b6:fa:9d:73:2d:d7:3c:
         57:0f:31:92:d5:eb:8d:66:f1:78:f3:36:ac:bc:d4:ef:e7:86:
         a2:ca:80:b4:75:10:bb:29:f4:57:61:96:06:6a:a1:a3:ff:09:
         09:a1:90:00:26:b2:e0:31:8d:4f:f2:e6:66:27:fc:c6:b6:12:
         ef:01:35:5f:4f:3b:e8:48:d8:2a:96:92:e9:c7:79:14:e7:e3:
         d1:7d:1b:c0:96:14:a3:2b:86:15:3d:36:7e:c9:7e:45:d6:51:
         38:c4:b2:df:6a:3a:d0:fd:8a:31:5c:c0:ce:91:1e:ad:c0:81:
         2e:24:5e:96:80:3f:6c:4b:67:99:94:0b:3f:d5:27:40:43:9b:
         14:6a:90:50:21:a0:5e:86:92:81:a2:8a:8f:ee:10:06:3a:c7:
         8b:3b:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:34 2025 by rpki-client