Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
File:                     FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json)
Hash identifier:          B+BDO4DnUBd24CaCvB14uHebTIEN9DN1rXC4uMCLzEE=
Subject key identifier:   1F:32:DE:05:E6:03:B5:54:7A:DC:94:F7:98:09:FE:8D:A9:C2:0E:F5
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Certificate issuer:       /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial:       0197488CDFA62254D74F75AC78F769A343B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 04:01:21 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:21 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:21 +0000
Files and hashes:         1: 7avwX6wLfCubdHbZyz0nLS_e-eU.roa (hash: pGwwGuIWJ6QSCg6gVVG8woBK5kghKUCbnUTlff7iqb8=)
                          2: 9DMJzw07rRfF-igR7wqKT9KeDa8.roa (hash: ABLdTL2q0KpCPDDFSNDGIpACFRfb6QE136WIpKW4qXM=)
                          3: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: vuphd26dGuedYI1+q0dZwGLNK7jOIp9O1iQxRrg4S/Q=)
                          4: UT0I3-20WjgyE861B6nG5TG1yMk.roa (hash: YUnPY3ov9u17ugGwQgEKlldHoKyzjUpe3RRFSJYdmsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:df:a6:22:54:d7:4f:75:ac:78:f7:69:a3:43:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
        Validity
            Not Before: Jun  7 04:01:21 2025 GMT
            Not After : Jun  8 04:01:21 2025 GMT
        Subject: CN=1f32de05e603b5547adc94f79809fe8da9c20ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:7f:ae:4a:40:be:3d:0a:e0:69:08:ff:16:
                    65:be:a6:99:5a:84:61:2e:99:13:63:ad:b5:13:81:
                    9c:3d:c8:2d:21:ad:b8:01:52:b6:70:28:96:41:72:
                    04:85:af:bf:02:80:05:4f:24:c0:35:74:34:12:97:
                    c6:c3:a9:31:09:e5:92:91:a8:22:ff:34:f6:30:a0:
                    c0:8b:33:2b:a5:ef:fe:07:fd:a3:90:17:63:8d:3a:
                    1d:ea:bf:a6:24:80:83:bb:1a:e8:66:1b:50:23:1f:
                    17:b2:e7:79:a6:50:93:37:46:05:89:13:ff:f8:bb:
                    ab:c6:76:8c:86:ce:5a:8d:07:e9:77:de:ab:65:f8:
                    bd:0a:23:3a:b1:cd:30:41:11:7c:14:47:e4:9a:6d:
                    d4:02:92:6a:a7:2a:0e:f9:46:5b:d5:25:d4:92:8f:
                    53:b5:da:a4:c4:48:73:5a:0e:de:e0:c6:16:e2:10:
                    57:f2:3a:2a:fc:1c:f1:af:5c:d6:84:aa:90:fb:58:
                    34:6f:4b:81:e0:6b:04:0a:0e:f2:ba:c8:fb:5b:39:
                    56:5f:3f:e8:c5:44:61:9d:0e:59:2f:4e:e1:67:8d:
                    9d:45:3a:af:dc:23:13:44:1b:1b:8f:20:6d:b1:b5:
                    4a:2d:d4:2b:e1:ca:98:6a:88:d2:5d:16:2c:64:93:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:32:DE:05:E6:03:B5:54:7A:DC:94:F7:98:09:FE:8D:A9:C2:0E:F5
            X509v3 Authority Key Identifier:
                keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f9:0f:de:b3:8e:0a:24:a6:7a:6a:7a:03:4f:ac:45:0f:96:
         fc:c8:04:ee:29:37:98:ad:cd:63:63:80:0f:d2:2b:4b:1a:db:
         e7:fe:90:9d:a1:67:dc:ad:02:3a:96:6b:4b:85:d9:4e:bf:d5:
         8d:37:10:48:f5:91:2d:4c:82:9c:91:73:80:0b:d1:7e:63:94:
         b7:42:38:19:76:17:cd:1a:45:b0:bb:89:e6:b1:4a:b9:52:8c:
         06:3e:8d:8f:bb:14:89:11:90:d3:13:81:96:d4:7f:33:45:1c:
         11:94:1a:91:15:a8:2f:d1:2d:c2:6a:67:55:51:d8:8c:09:3d:
         f5:d2:ee:44:e3:31:60:58:57:b8:9b:82:27:61:7e:20:a2:55:
         fc:06:0d:da:5c:71:55:25:27:2c:8b:5d:af:ea:a2:09:45:f6:
         54:7f:7f:79:2d:3d:be:9a:3b:6a:35:8c:64:13:d7:0b:f8:2c:
         65:56:6f:71:5a:a3:dc:3b:2c:f0:ed:6a:10:16:16:0e:bd:91:
         f0:fb:a4:6a:d9:bb:3c:32:78:1c:b5:2e:2a:4d:7f:e5:f8:3b:
         9b:a4:5b:f0:45:6a:a6:e7:5a:3a:c8:8e:90:70:47:09:18:41:
         23:81:65:63:f9:2c:31:c2:a7:ae:21:cb:97:35:82:cd:a5:ae:
         a2:44:93:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:29 2025 by rpki-client