Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
File:                     B6GfRqF7nUhp32ZJPPsF19golKY.mft (raw, json)
Hash identifier:          9MPkUKV9l/2J0JHNKDJ9UAG6MhPXVuOk1Uy1I3vc5WU=
Subject key identifier:   3D:7F:05:B1:40:5A:91:36:7A:60:B6:6B:F9:EF:92:D6:E1:B2:98:7F
Authority key identifier: 07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
Certificate issuer:       /CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Certificate serial:       0197458B5DF9EC33FA8B1ECEC3F6EE40D06D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
Manifest number:          157A
Signing time:             Fri 06 Jun 2025 14:00:50 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:50 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:50 +0000
Files and hashes:         1: B6GfRqF7nUhp32ZJPPsF19golKY.crl (hash: Tx/CJ/2hGWHYL8/P9V9totl/DU8Ch1Uv3N6RaCjMbdY=)
                          2: bWkzDjoyXp1j-qZqgWYsRC5CuDw.roa (hash: +Se3L4OH81c744mhhDr0vSFFcNI0VPir7WMuZ7dt6OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:5d:f9:ec:33:fa:8b:1e:ce:c3:f6:ee:40:d0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
        Validity
            Not Before: Jun  6 14:00:50 2025 GMT
            Not After : Jun  7 14:00:50 2025 GMT
        Subject: CN=3d7f05b1405a91367a60b66bf9ef92d6e1b2987f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:41:78:4f:39:ed:1b:94:99:64:5f:87:04:
                    b3:c6:9b:23:a2:94:5c:52:c3:14:e4:a2:50:d8:b6:
                    1c:cd:5f:69:66:d9:2d:ff:b9:58:13:ec:48:0b:7c:
                    c9:55:b8:16:2a:88:39:20:62:b6:fa:0c:e4:5c:b2:
                    cc:90:bd:c4:c2:26:70:6a:32:c9:99:fc:61:2a:de:
                    cd:6f:bd:4b:f3:3b:56:15:87:3e:be:c3:e3:d8:94:
                    4d:bd:e6:92:fa:48:90:7d:57:08:fe:3d:67:86:bc:
                    51:f3:b0:b7:25:b7:3e:af:72:fc:a8:38:c8:8e:67:
                    dd:f2:0a:2a:0c:ee:bc:c8:f5:7a:1d:28:99:7d:40:
                    82:59:14:5e:63:65:61:7e:80:31:52:51:14:dc:d5:
                    9e:02:de:8b:63:dd:dd:28:42:fb:d7:f9:1d:6b:9d:
                    e4:41:a8:26:bc:b1:13:1c:1c:37:50:53:c8:e2:83:
                    57:a0:77:1b:e1:c6:97:cb:1a:51:0b:4f:17:22:13:
                    3c:ba:56:fe:13:6e:43:d5:ff:67:00:2d:90:56:e4:
                    3d:53:6e:ea:8f:32:60:e8:5a:78:e4:b3:1f:69:da:
                    10:58:10:95:87:a4:e6:c4:8d:50:70:36:7b:0e:e7:
                    09:ea:71:79:31:07:1d:ee:2e:9e:d1:4f:22:34:2a:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7F:05:B1:40:5A:91:36:7A:60:B6:6B:F9:EF:92:D6:E1:B2:98:7F
            X509v3 Authority Key Identifier:
                keyid:07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cb:c6:13:df:36:9b:9e:52:53:5c:f2:43:75:3a:bb:24:47:
         a8:6e:95:30:89:d7:29:11:2c:5d:36:38:f9:d6:58:20:46:e4:
         d0:37:b4:1d:05:4d:f4:12:1e:27:cc:71:ba:8f:c9:6e:db:54:
         90:2a:d5:55:1b:8e:8d:d8:10:06:cd:76:4e:8f:e0:0e:1f:7c:
         d8:de:5f:81:ac:58:93:33:19:71:90:64:7c:bd:bb:53:7a:fb:
         57:08:40:35:27:d0:c0:eb:42:dd:7c:78:1a:39:4d:42:0f:dc:
         69:af:c8:84:27:4b:d7:bf:f0:29:72:d0:a1:c2:c7:d1:8e:8b:
         21:8f:45:fe:72:31:71:9c:04:ce:db:94:4b:a2:6e:32:f8:65:
         a3:02:10:04:ce:5d:be:5e:52:ac:1b:76:4c:d7:99:8e:f0:53:
         a9:f8:fb:dd:27:3e:ac:4d:f8:f3:b7:46:c6:c6:90:43:2a:6c:
         f0:8c:e2:5b:27:0e:24:9c:75:e0:5b:8d:15:a6:b7:e6:3d:9b:
         b7:0c:06:28:27:15:ca:85:f7:b8:b8:3b:ef:97:ac:4b:a9:d4:
         0d:d7:f7:e7:4c:a8:c3:4d:78:4a:43:8b:bf:d4:aa:1b:1d:69:
         82:62:0b:cb:98:ed:07:64:c2:3f:ed:9c:8b:b7:82:23:1d:28:
         bc:01:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:27 2025 by rpki-client