Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
File:                     ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft (raw, json)
Hash identifier:          M3IMA/lsAZJ2qgrOlE7qp/dIBmG2gda3cpyvh/HkXus=
Subject key identifier:   AD:E9:29:97:F9:ED:86:F9:0E:80:12:E0:24:19:E6:17:69:26:CF:20
Authority key identifier: 10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
Certificate issuer:       /CN=1024e66d7cba77b977685559c2481bb9044c5b75
Certificate serial:       01974742C368E060E6AA2F2438C5E952D80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
Manifest number:          157D
Signing time:             Fri 06 Jun 2025 22:00:47 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:47 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:47 +0000
Files and hashes:         1: AqNcisECeia8r42sdVkCO6MArLA.roa (hash: 18o7z7bmdzyzqumEyVAcE9Q6zGKgPT0KV/iWQ82M7jg=)
                          2: ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl (hash: ED7/qK8bv/rn1nzqMECjq49t4ZAztS7Ku4j5iFkkyuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:c3:68:e0:60:e6:aa:2f:24:38:c5:e9:52:d8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1024e66d7cba77b977685559c2481bb9044c5b75
        Validity
            Not Before: Jun  6 22:00:47 2025 GMT
            Not After : Jun  7 22:00:47 2025 GMT
        Subject: CN=ade92997f9ed86f90e8012e02419e6176926cf20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:5d:96:f9:88:11:10:2a:c9:9a:9f:9a:60:
                    94:17:99:70:1f:fd:90:11:9a:d2:30:a0:53:ea:1d:
                    ff:b6:d8:f2:e3:f0:e1:a9:d6:43:47:a0:73:54:09:
                    1a:75:1e:12:9a:d0:b7:e0:1d:f2:1b:92:2f:e3:ea:
                    e7:b7:ac:b6:d6:3c:4c:49:4e:2d:b5:45:80:68:e7:
                    c6:75:e0:78:6d:1e:49:95:c3:b4:f7:b8:f1:16:27:
                    9d:45:f2:28:0b:1f:45:7f:76:ef:74:7e:40:da:94:
                    f6:de:79:10:cd:a9:40:72:e0:da:7f:45:57:63:f0:
                    78:1b:f7:dd:ef:88:4a:28:e6:b1:ad:5b:cc:12:d9:
                    74:77:fa:40:f0:35:1c:b2:69:25:21:c0:3d:ed:a4:
                    61:ab:91:e5:9c:0d:2e:5a:07:be:5f:e0:2a:23:07:
                    38:29:72:0e:de:2a:b3:5a:af:bb:08:a8:f5:38:20:
                    fb:38:2b:11:9e:52:12:62:02:8b:2a:1a:39:cd:7d:
                    83:a0:03:42:1b:35:28:b9:51:51:80:79:40:e3:0f:
                    55:cd:c7:ac:49:57:7d:e9:ad:01:23:0c:6e:af:b1:
                    3d:d6:7f:c9:23:48:fe:88:65:85:ea:f9:1e:ab:84:
                    02:57:88:65:65:d6:6b:ff:92:53:f5:6a:e7:74:57:
                    2b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E9:29:97:F9:ED:86:F9:0E:80:12:E0:24:19:E6:17:69:26:CF:20
            X509v3 Authority Key Identifier:
                keyid:10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3c:9d:02:88:2e:35:81:1d:93:50:55:3c:89:d0:79:fd:b7:
         23:6b:78:d4:9d:d1:e8:ed:09:ca:e2:8d:8a:50:0f:1e:01:d6:
         f7:7a:44:ff:43:72:cb:ab:48:0a:ac:07:c2:d9:7a:9a:cd:0c:
         85:cc:bb:23:36:c9:85:ff:4e:53:94:e1:b4:13:4d:08:bf:20:
         0f:1c:0a:3b:db:44:15:18:ce:d6:eb:e1:cb:a0:8c:0d:6e:56:
         54:06:f9:1b:48:a7:4c:9b:4d:9d:d9:61:93:97:17:51:40:e7:
         55:cb:30:08:2c:32:16:d8:d1:ef:48:09:c6:2d:1b:42:fd:8d:
         98:18:af:db:6c:f0:d3:cb:c9:ca:53:79:3f:07:f6:29:98:88:
         84:f2:d9:0e:9b:e2:9e:d5:e8:34:2a:65:4b:a1:ca:6c:c1:3d:
         b0:ea:c5:29:1b:cd:83:18:8a:74:3a:09:30:aa:ac:a5:d2:77:
         e6:77:60:3a:00:37:a9:6b:25:37:8d:2d:ab:e4:5c:1d:ce:3a:
         81:98:b5:eb:01:6b:7a:e4:2e:bf:62:64:70:89:6e:f1:c1:3a:
         0f:c3:40:fe:a5:2f:0d:b0:19:4d:ee:0c:05:03:aa:8e:15:57:
         1b:be:b6:36:5f:77:ec:97:7b:82:74:14:17:19:01:8d:1e:32:
         a7:eb:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:07 2025 by rpki-client