Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
File:                     tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft (raw, json)
Hash identifier:          wp1xJ2HjjHnBnGkOTUWo1bXZiIq31uhK1iUyO4uB9jU=
Subject key identifier:   D9:97:FD:5E:B9:59:77:7D:71:72:F2:1F:CF:10:B6:68:60:D8:88:06
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Certificate issuer:       /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial:       0197470C26704D852133EBECC2AC3F934140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
Manifest number:          157D
Signing time:             Fri 06 Jun 2025 21:01:07 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:07 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:07 +0000
Files and hashes:         1: tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl (hash: GdzCmcSQ8fXIhuvZyt3wjQZ/FkuAmJFvO9WF/0juqjs=)
                          2: y75cXyuDLpcYexdmkwYwYU3Mg-w.roa (hash: x/UMSX0QI4HQrUWQqpp/rIJY0lp7ztidnsmz2QLBnXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:26:70:4d:85:21:33:eb:ec:c2:ac:3f:93:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
        Validity
            Not Before: Jun  6 21:01:07 2025 GMT
            Not After : Jun  7 21:01:07 2025 GMT
        Subject: CN=d997fd5eb959777d7172f21fcf10b66860d88806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:84:5d:f0:00:6a:ad:43:49:ce:a7:3b:29:
                    a5:8f:4b:e8:1f:6d:a8:19:65:08:4a:75:3a:38:96:
                    f3:54:92:18:34:76:01:8b:ad:24:03:5e:d8:32:27:
                    61:79:59:39:f0:29:6f:c7:94:59:1a:68:8c:32:5e:
                    64:30:ae:96:a3:9e:22:8c:25:62:3f:f9:b9:8a:fc:
                    c1:8a:7d:1a:b6:5e:bf:9d:ad:dc:a7:97:01:e0:31:
                    a0:50:4c:63:7e:eb:07:d9:cb:8a:72:c1:d3:37:ec:
                    c8:72:df:b6:e6:6a:6d:6e:6f:9b:d7:8c:2c:46:75:
                    8d:4e:ef:4c:92:dc:93:b3:e3:db:21:ba:7a:e4:12:
                    7e:b9:18:08:12:79:74:fc:44:b0:b0:74:df:78:76:
                    4b:09:75:b6:24:be:8c:20:98:0c:a1:3e:08:ae:2a:
                    98:02:73:44:2c:fe:7f:17:40:8e:3a:1e:c1:e7:67:
                    3d:6b:48:76:14:82:18:47:14:15:34:cf:38:7c:d0:
                    19:91:b2:fc:1f:d4:11:3b:fc:9a:f8:fb:45:03:d8:
                    ff:37:aa:b8:44:b8:5f:01:ed:16:c6:59:a5:00:f6:
                    8c:43:e8:9b:bf:b4:89:2c:f3:03:e0:25:22:9a:c4:
                    2b:a9:6d:c7:42:5e:a2:1c:f8:c0:fe:69:d4:ed:e5:
                    3d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:97:FD:5E:B9:59:77:7D:71:72:F2:1F:CF:10:B6:68:60:D8:88:06
            X509v3 Authority Key Identifier:
                keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8b:59:f7:fa:0b:75:93:38:b2:23:61:16:20:18:d1:66:d1:
         c0:58:96:a5:5c:0d:7b:5a:3e:0d:88:84:9a:09:ca:28:7a:e3:
         2f:80:ab:81:2d:18:fa:c1:af:47:fd:23:26:11:2c:e4:d0:d2:
         ce:66:ec:39:19:76:86:ac:72:91:1c:c2:81:0e:c9:ea:54:95:
         84:e3:d6:d2:f4:dc:68:10:32:7f:a4:7d:5e:8a:63:67:2c:d5:
         32:73:19:39:76:7d:7e:fc:4e:2d:c4:35:be:ec:76:08:d6:3c:
         47:e9:9b:dd:eb:3a:cf:a1:43:fa:e1:60:cd:9d:3c:8e:30:08:
         4b:a3:06:5e:19:62:d9:01:77:ad:be:a9:e9:9e:ab:19:eb:6d:
         6a:c1:d8:34:12:9b:b8:2b:a1:da:d5:e7:78:73:43:82:1d:a3:
         b8:b4:44:c1:a5:4e:ec:a8:21:dd:77:cf:a3:e1:1e:fc:15:ce:
         1f:33:6f:93:85:94:37:5e:bc:32:0b:dc:90:c9:2e:3e:06:7c:
         64:d4:de:9f:b1:76:a6:dc:0f:83:cd:93:30:55:8d:4b:94:e2:
         ed:b7:9e:84:1b:5b:57:8f:05:87:43:7c:87:fa:bd:8c:31:14:
         f8:a5:2b:1a:33:8d:93:27:57:ca:f0:db:71:b9:dd:2c:06:a5:
         41:68:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:36:22 2025 by rpki-client