Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File:                     ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier:          dkUmEhuSpWz3ByYiFESSW1HbpD4V+pwFxDgM0kWKGU0=
Subject key identifier:   63:9B:0C:8E:D9:84:E3:9C:C7:DF:0B:4A:65:BD:A7:8E:51:86:09:96
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer:       /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial:       01974C6A0C0A094E048CDEC4D8CF227F373B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 22:01:47 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:47 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:47 +0000
Files and hashes:         1: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: vpu34djQv7E6/KXaJHN0VG3M/vL6J0MaCUQJSW/GJ08=)
                          2: n-jYW3TtB-3xqB2bSX1FBgJznUA.roa (hash: o6wnmb3KQIJ7ZwCfbyHPmnS166j6EiJX08Afnad5JbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:6a:0c:0a:09:4e:04:8c:de:c4:d8:cf:22:7f:37:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
        Validity
            Not Before: Jun  7 22:01:47 2025 GMT
            Not After : Jun  8 22:01:47 2025 GMT
        Subject: CN=639b0c8ed984e39cc7df0b4a65bda78e51860996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:82:c2:c9:54:d9:2c:97:ce:f6:33:cc:50:
                    e9:14:89:39:62:4f:29:31:dd:52:f8:eb:f1:3f:0e:
                    fa:ba:62:4b:45:59:08:3b:0e:87:d6:0c:34:d3:49:
                    7f:1b:a5:94:d1:91:30:cf:77:e5:77:07:16:ff:0f:
                    dd:e8:09:ca:a5:a7:cd:ce:2b:1b:cb:4e:d2:13:43:
                    48:e2:96:d4:7c:66:3f:a9:74:70:80:77:c7:2f:bf:
                    78:6a:7a:6e:1a:23:51:68:1e:3a:81:08:b2:7f:f0:
                    4a:87:ad:33:65:68:c1:6c:eb:bf:e4:bd:23:2f:a3:
                    86:63:b7:b9:9b:40:7c:6c:d3:dc:36:69:de:cc:dc:
                    4e:a8:74:4a:5c:08:06:2b:20:19:22:f5:ec:9a:e4:
                    a3:ac:96:48:90:20:3d:21:fe:b5:88:b3:d7:57:cb:
                    4a:06:bb:d1:cd:48:be:89:e5:9e:ed:81:89:ba:0c:
                    d6:6b:da:23:5c:68:73:eb:d5:48:46:18:e1:de:3b:
                    20:ba:68:76:c2:cf:14:64:31:82:bc:ef:2c:0d:e1:
                    a7:c1:8c:05:b0:cc:5b:a2:e4:fc:6e:9c:91:f2:6e:
                    36:1d:0b:35:b7:6a:83:93:37:9c:a3:b2:9a:25:d6:
                    a2:e9:89:1d:1a:f7:04:d0:b0:59:ab:21:11:8b:00:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9B:0C:8E:D9:84:E3:9C:C7:DF:0B:4A:65:BD:A7:8E:51:86:09:96
            X509v3 Authority Key Identifier:
                keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e5:20:65:c1:42:b4:96:87:f8:07:fc:da:99:84:f7:d0:39:
         d3:e3:bf:8d:07:69:8f:87:a1:21:a6:d3:b1:31:40:41:10:78:
         93:1d:39:af:04:48:a1:d2:a7:4e:63:ac:86:7e:a4:79:3d:36:
         7d:f6:73:d0:3f:9c:92:3f:cd:c1:55:8b:1b:98:9c:1c:b2:07:
         0c:84:70:78:1d:69:83:5c:8d:5e:ff:eb:b3:b7:f3:db:41:98:
         d0:c7:82:4f:09:52:13:4a:25:7d:76:b2:86:55:60:f2:fb:a0:
         9d:73:d7:6e:ff:9b:f1:28:02:94:21:a0:d8:03:aa:93:f6:65:
         b6:34:1b:2d:18:10:14:b7:ef:5e:36:e4:90:5f:c3:9d:18:9a:
         de:3e:30:a8:5b:5b:d3:0b:df:64:e2:b9:b5:d7:8c:89:f5:54:
         aa:ac:48:5e:53:39:bf:29:44:62:ba:3a:82:1e:17:b0:d4:ea:
         94:2e:3e:37:51:6e:3c:8e:d6:67:1b:02:4c:3c:d4:16:71:66:
         1e:c0:2a:ef:8c:ba:73:34:b0:b0:24:73:25:9c:36:e0:b7:e5:
         80:e7:14:69:10:68:c9:0f:95:c9:42:29:b0:01:7c:0a:ed:9d:
         c0:1b:ae:21:01:94:47:0e:70:ab:ba:e4:27:1d:18:c7:46:6b:
         40:39:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:11:02 2025 by rpki-client