Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File:                     lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier:          nJdtj6ioyE0kIIF8g2oc1qcM6S6jtpthEoNh72zWv5Y=
Subject key identifier:   8D:94:09:89:F6:5B:0F:08:51:BD:05:A5:5D:D4:EF:AA:EB:5B:CF:F0
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer:       /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial:       01974A7A546F928C328E478DE4265006964B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 13:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:20 +0000
Files and hashes:         1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
                          2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: DPGA3hl/YmaHln+HD/uIMz3A+9Th01XuEq32BpAw/mM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:54:6f:92:8c:32:8e:47:8d:e4:26:50:06:96:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
        Validity
            Not Before: Jun  7 13:00:20 2025 GMT
            Not After : Jun  8 13:00:20 2025 GMT
        Subject: CN=8d940989f65b0f0851bd05a55dd4efaaeb5bcff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:3d:ad:7a:cc:bb:38:b7:f8:dd:e8:d6:75:
                    34:ae:48:fd:7b:23:a2:e3:c8:e5:6c:c5:20:ab:fd:
                    15:02:3d:e2:09:3f:c4:09:53:6c:ae:1b:02:26:d7:
                    37:5a:ad:3c:6f:1b:f3:d4:62:be:33:35:82:a4:44:
                    c4:c7:8a:ab:70:1a:fc:e1:c4:30:3b:a2:e1:c0:59:
                    2d:e3:92:6e:35:9e:71:1f:08:ee:07:a1:2c:85:a4:
                    ed:87:85:1d:c9:23:0a:2d:34:01:42:72:38:0f:f4:
                    e4:b7:4a:f3:ef:5a:1f:de:4a:c5:45:02:3c:6c:9c:
                    64:ca:1a:cc:eb:64:bf:81:41:1c:2f:22:1f:92:08:
                    f2:8b:16:ba:d4:08:18:ab:cf:83:29:c3:25:3b:1f:
                    28:18:e2:d0:78:62:ed:0b:0e:5a:08:81:eb:ab:41:
                    88:86:f3:e1:09:82:07:b3:39:14:40:ee:73:9f:5b:
                    b6:c8:5b:30:64:47:e0:5e:ef:c6:ff:b7:ff:db:8f:
                    10:f2:62:5f:d8:6d:c0:4e:25:f5:4a:99:48:ec:a1:
                    96:b1:14:37:17:41:f5:0d:35:1b:f7:cb:cc:78:16:
                    ec:92:9d:97:95:cb:2d:c6:4b:68:5a:da:7b:1d:f5:
                    ff:cb:7a:4c:c8:74:5e:fa:ab:69:c2:1b:07:e7:cb:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:94:09:89:F6:5B:0F:08:51:BD:05:A5:5D:D4:EF:AA:EB:5B:CF:F0
            X509v3 Authority Key Identifier:
                keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:25:1f:88:ac:8f:3c:4d:e3:12:29:22:76:ff:96:af:36:44:
         18:20:9c:e3:ec:b3:33:f4:21:8e:2e:e3:2c:a2:e4:ab:ea:70:
         81:70:57:06:ad:a7:28:3f:c6:de:7a:fb:47:e9:8e:a3:e8:10:
         e9:3d:c9:1f:e0:d9:37:0e:e5:c7:4b:a4:5e:b6:a4:8b:53:48:
         0c:11:c8:35:36:48:23:2b:27:d6:a3:c9:1d:dc:11:48:ec:0a:
         b3:71:68:02:39:0c:e5:35:26:3c:f6:31:2e:7d:79:77:0e:fe:
         71:54:46:1c:12:1c:a8:00:e6:77:5c:91:70:ad:20:3e:85:53:
         2d:fe:24:8f:e1:e9:af:fa:2b:64:21:20:1f:8c:21:d7:a1:f7:
         45:64:07:aa:40:75:7b:bf:52:a2:ff:3e:5c:92:1e:8e:b5:5b:
         22:8c:bd:e2:e2:64:6b:96:41:3e:8d:39:b9:ff:7e:87:e4:60:
         8d:2f:72:93:d0:3e:00:ae:46:d3:f4:66:7e:da:66:93:71:a4:
         53:d6:0e:00:16:7c:99:08:9f:4b:93:b6:7a:31:04:ad:16:09:
         c2:58:40:37:ad:43:e3:70:e7:9f:1b:ea:75:ec:05:ac:ad:c7:
         d3:91:8a:cf:76:31:8a:80:10:61:95:34:9e:58:83:66:54:9b:
         78:6b:95:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:27 2025 by rpki-client