Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
File:                     6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft (raw, json)
Hash identifier:          N/VrpcIlBUXmgrK6QbXcME1by7cg5xeWdCsftsq40Mo=
Subject key identifier:   33:C4:46:05:0C:4B:24:46:A1:B5:1C:E9:D9:46:5F:5D:25:D1:60:1D
Authority key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Certificate issuer:       /CN=ea827b9556d540da536b8046c65ff95b06ee4963
Certificate serial:       01974EFC7C7C0FBDFC1CC8F17E514DE130A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 10:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:59 +0000
Files and hashes:         1: 2p40Nc2xaHE8kZlDDAIZtTe36X4.roa (hash: Gggun6qomuBE+OhHHJ4qJm9ChIbCJjaRrYY7HesQ4j4=)
                          2: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl (hash: wwDJ+e6UUmgIFYtoBlRoqpQWukHqldyGGbzIYPZ/5tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:7c:7c:0f:bd:fc:1c:c8:f1:7e:51:4d:e1:30:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea827b9556d540da536b8046c65ff95b06ee4963
        Validity
            Not Before: Jun  8 10:00:59 2025 GMT
            Not After : Jun  9 10:00:59 2025 GMT
        Subject: CN=33c446050c4b2446a1b51ce9d9465f5d25d1601d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:8e:65:d3:c0:5c:a0:ac:e5:f8:c7:7c:e8:
                    23:58:48:ed:bd:39:4d:0b:af:05:00:24:c6:94:fc:
                    d5:27:13:cf:6a:fa:46:13:9c:ea:fa:c1:0f:4d:b9:
                    c8:29:f1:b9:5e:98:64:8c:b4:86:39:45:54:00:23:
                    3c:23:bc:27:e7:13:b2:23:0c:33:86:c9:95:35:e8:
                    6d:e0:52:f1:60:ff:29:11:b9:76:5b:6d:7f:e6:d3:
                    3a:e5:ae:75:4e:ae:20:42:fc:9d:24:a4:38:07:02:
                    b6:41:62:6f:ed:92:fb:93:77:e6:8c:1e:03:df:6a:
                    16:1f:8c:4e:de:25:3d:0f:08:90:13:f6:7c:4f:24:
                    4d:67:44:44:3b:d2:26:85:dc:96:45:70:eb:89:7d:
                    f1:f4:87:b3:6b:b7:ab:61:fd:53:39:bf:83:39:62:
                    f0:31:da:62:15:01:73:74:5d:da:46:7e:d1:d4:0d:
                    fc:6c:50:29:1d:10:5b:d9:7a:20:69:e1:c9:3e:04:
                    b7:40:84:01:b6:6d:3e:c0:f5:df:10:aa:82:d9:3b:
                    a8:8b:b4:cc:8a:91:0f:f3:04:e5:05:4f:3e:82:b3:
                    3e:7a:b4:2a:91:35:1e:f8:6d:3c:f7:20:a6:91:bc:
                    3b:f8:4b:1a:fb:aa:bf:52:27:cf:63:1a:82:cd:c4:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C4:46:05:0C:4B:24:46:A1:B5:1C:E9:D9:46:5F:5D:25:D1:60:1D
            X509v3 Authority Key Identifier:
                keyid:EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b3:26:dc:81:b7:8d:8d:bb:e7:f1:51:53:47:c3:8e:21:ee:
         60:f1:ae:ce:ac:c1:21:7e:ba:2a:eb:4b:67:41:5e:d4:93:07:
         43:81:7f:2f:c0:03:fb:78:c0:cd:09:22:28:bc:7e:75:b6:21:
         5c:9e:76:7b:99:0b:80:e1:cf:e6:39:d4:35:ef:14:35:e0:d4:
         bd:c9:6b:b0:a3:89:40:38:2d:4a:d4:6d:37:a7:25:bb:e4:6e:
         18:f3:19:54:89:d2:42:78:24:70:45:20:8b:47:19:80:04:59:
         fe:34:bb:95:82:63:77:25:27:70:47:01:8b:ca:c9:0e:08:d6:
         c5:1a:a0:f1:61:c5:30:95:29:c0:37:ab:33:98:bf:92:f8:5c:
         bc:4a:84:75:5d:3b:4c:96:58:c8:8c:f8:86:f3:61:11:45:49:
         62:e0:58:b3:72:c4:47:8b:23:e2:a5:65:d0:ed:db:37:73:8d:
         66:f6:71:61:bd:a7:84:dc:1e:bd:b7:ef:d4:8f:f4:b1:4a:f0:
         42:4c:ae:17:09:f7:02:d8:36:1e:19:66:83:88:fc:79:df:10:
         5b:f2:8d:9a:86:59:b6:89:1c:b3:94:23:73:91:2e:ab:e9:e0:
         ec:49:36:ec:eb:f7:54:25:b6:e9:6f:c5:d0:3a:e6:68:74:d7:
         6f:bf:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:36:15 2025 by rpki-client