Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
File:                     bu85c9bgdoFBm66Ge9UUVF599do.mft (raw, json)
Hash identifier:          ZY7wY0GHnXx/M/2F/D0F1Z42UqMGx3xFRHpUPzL5wVc=
Subject key identifier:   49:EB:39:98:8F:DE:F0:83:75:76:1D:31:AC:4A:A6:2D:D6:43:6B:E6
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Certificate issuer:       /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial:       019743661E733433FAC87EA3E1C47F5FC3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
Manifest number:          157E
Signing time:             Fri 06 Jun 2025 04:00:55 +0000
Manifest this update:     Fri 06 Jun 2025 04:00:55 +0000
Manifest next update:     Sat 07 Jun 2025 04:00:55 +0000
Files and hashes:         1: McJBsphQoDhzeVnNZjQXJIWaZ6Y.roa (hash: yKUH9/jSgEvNGo/3nepkm1/S5OFTD0l9/lzqCHYZgCY=)
                          2: QbMtJCyeS1UwQoNdxpT73PMGteE.roa (hash: KMhN38u0GEau5JeuxrI2EEIJMxGmIw0+9n/GLuFP0so=)
                          3: _67lsUignKt8Nnk8BSoRjTdfgFs.roa (hash: EwUQ5YdDP6IxVHJrGKIoeKh0+wuab5Kte+I8jHzRujs=)
                          4: bu85c9bgdoFBm66Ge9UUVF599do.crl (hash: +EtuKUXXWji5KBq94piyHUy7VJmWq0ct5Lio/9T2IJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:43:66:1e:73:34:33:fa:c8:7e:a3:e1:c4:7f:5f:c3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
        Validity
            Not Before: Jun  6 04:00:55 2025 GMT
            Not After : Jun  7 04:00:55 2025 GMT
        Subject: CN=49eb39988fdef08375761d31ac4aa62dd6436be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:47:9c:33:f6:55:b1:9d:a9:56:77:15:e0:
                    81:e0:17:b1:a4:5b:39:65:c3:f4:01:a3:68:c3:01:
                    9e:13:84:72:59:a8:cf:af:f7:af:2e:e6:d0:be:b8:
                    28:2f:87:2a:26:30:35:37:9f:2b:03:60:f1:e4:b5:
                    64:e2:b1:3a:52:73:54:27:71:26:c5:3a:0f:a2:94:
                    b5:90:9a:b9:c7:e4:b8:77:7c:3d:da:ee:e9:fe:ec:
                    9d:00:e1:04:3e:5b:80:0f:c0:2f:4f:e3:58:21:a9:
                    4b:ba:00:46:20:c7:f8:2a:5e:b1:00:f0:9b:4e:62:
                    0d:ef:02:c5:e5:62:aa:88:81:07:7b:f8:0e:43:6a:
                    35:25:b5:42:c2:9e:d8:80:fa:f1:24:f8:12:67:eb:
                    d1:ab:02:3a:75:0f:bb:b6:2e:38:e9:d4:07:48:96:
                    6b:eb:b1:39:4b:35:af:7b:e0:88:5f:2f:ad:d7:4f:
                    50:b8:5a:50:81:86:85:27:91:bf:b6:dc:5b:c2:ef:
                    1b:96:48:a3:15:37:b9:df:a1:b6:2e:8b:47:f6:ed:
                    9e:eb:67:ae:38:e9:7a:0b:84:c9:77:c9:f0:55:4b:
                    8b:25:cf:cf:0b:fc:c9:15:7c:c3:a4:72:3d:a8:b0:
                    23:04:a3:a1:b4:21:67:e1:8c:13:07:7c:6b:2c:1a:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EB:39:98:8F:DE:F0:83:75:76:1D:31:AC:4A:A6:2D:D6:43:6B:E6
            X509v3 Authority Key Identifier:
                keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:df:a6:42:61:59:cf:36:9f:47:e6:95:64:ee:0e:b2:3e:7b:
         99:b6:6b:59:aa:f9:4f:29:25:4f:14:98:64:17:5b:96:21:4b:
         58:12:a8:0d:e6:b0:02:90:15:4a:e6:60:91:98:bf:3a:17:ec:
         de:a3:c4:63:cc:46:67:8d:07:ac:d8:eb:b0:1e:7e:a2:b0:5d:
         ed:fe:28:03:5f:69:5b:6f:e0:bd:50:df:ca:0c:cc:aa:e2:5b:
         01:db:86:39:96:6a:29:11:cf:ee:9c:5e:c4:7a:6d:15:35:e5:
         c3:24:96:03:ca:d5:a0:23:51:28:7b:45:17:c0:f0:98:de:60:
         c4:e7:68:f7:ee:a7:de:de:73:a6:b6:ba:3c:7c:4f:1d:a5:3c:
         6e:02:52:0e:30:92:ce:46:fc:23:e6:15:df:20:40:0c:dd:cf:
         c6:9a:47:e7:a2:f5:a0:e4:95:50:d7:80:04:db:d6:dc:07:2f:
         b2:d6:1b:a3:61:fd:7f:50:10:b7:67:d1:af:b0:2f:b3:92:a1:
         c1:65:aa:68:7d:24:1c:ff:5c:25:63:63:d1:ff:b3:5a:b0:94:
         5e:d4:a1:52:c3:2f:51:2a:d5:09:25:c2:bc:2a:79:75:81:67:
         6b:42:be:90:2f:9c:ee:ae:bb:8a:94:99:39:1f:48:e5:69:a1:
         96:f7:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:01:43 2025 by rpki-client