Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File:                     6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier:          2iqHDNT2uTIJ7Wxcgf+Pvo1F3jluvcCHwnGA3r486T4=
Subject key identifier:   B2:EE:C7:99:93:55:EF:48:8C:7E:3D:EF:51:16:C8:B9:2E:75:81:19
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer:       /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial:       0197496874F0A22E69D03AC777DE6DC4CE53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 08:01:11 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:11 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:11 +0000
Files and hashes:         1: 5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa (hash: Nyr6wmMl755m5pBB7dzD6+3NgxbHjvOEn2wkeXz+Yqw=)
                          2: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: FGJj6odek44JKwnS770iPtb4xFFI0spdEm1s6+ZJzms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:74:f0:a2:2e:69:d0:3a:c7:77:de:6d:c4:ce:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
        Validity
            Not Before: Jun  7 08:01:11 2025 GMT
            Not After : Jun  8 08:01:11 2025 GMT
        Subject: CN=b2eec7999355ef488c7e3def5116c8b92e758119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:ee:d5:22:5f:62:d1:42:c2:14:9b:e6:2b:
                    06:09:46:71:18:1c:38:5d:1a:b1:72:64:e2:19:24:
                    e8:ef:20:8c:ac:50:8e:76:1a:60:f0:12:2a:72:f7:
                    78:91:8b:b7:ec:77:cd:4c:63:7a:46:25:9f:af:86:
                    0c:a0:b3:d2:53:4a:02:3d:60:0e:5e:7f:d0:9c:49:
                    75:05:13:74:6b:8e:78:25:32:a0:67:18:26:5a:bc:
                    22:01:8e:bc:ab:bd:eb:a1:c1:c9:97:e0:c1:80:04:
                    3f:be:f2:7b:43:12:b3:ea:8f:2d:3c:35:ce:0c:67:
                    ef:e7:9d:30:75:51:6d:81:8d:74:d9:24:d6:ba:97:
                    b8:89:9c:da:aa:c2:5d:ab:85:06:f7:42:22:b5:f5:
                    7d:9d:15:08:11:c3:2e:5b:45:38:37:9e:28:b2:07:
                    dd:12:7e:76:21:97:9e:d0:1c:17:04:5b:50:9d:35:
                    35:8b:d9:4f:a5:87:2d:6d:76:6c:ff:ff:2d:fc:43:
                    15:7f:ec:84:00:d3:99:13:9c:6d:2b:98:0f:a2:26:
                    89:64:65:5c:f4:1e:0d:7f:eb:a4:8f:c0:02:b2:cc:
                    32:16:3c:0f:09:62:dc:f6:84:df:0c:54:a5:0d:04:
                    85:cf:93:7e:a4:f6:73:09:a9:60:67:9c:b5:fe:71:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EE:C7:99:93:55:EF:48:8C:7E:3D:EF:51:16:C8:B9:2E:75:81:19
            X509v3 Authority Key Identifier:
                keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:16:5b:07:a0:7b:55:58:4a:ff:1b:71:53:e4:8a:90:4f:25:
         62:91:97:d6:eb:0d:20:dc:15:05:a1:ea:68:5d:2f:96:bb:30:
         54:f7:f2:89:a9:a6:72:19:d4:d0:84:8f:60:67:f5:c8:1c:59:
         b2:ea:68:96:53:05:0b:94:eb:0a:fc:1d:a4:ca:76:29:99:96:
         24:24:68:c6:ef:e6:6f:55:96:ea:36:8c:29:e8:5a:5c:7a:f0:
         81:d2:ec:78:74:da:57:4a:f0:ca:67:19:1a:d2:31:ae:5f:e8:
         0b:ea:ef:c9:98:00:66:36:32:4f:12:e2:0e:eb:85:96:e1:64:
         3a:72:f4:b6:59:a0:41:8f:41:29:1d:31:ab:2f:f0:bc:90:57:
         90:4f:05:ed:a3:b0:ff:f9:f8:6b:2b:12:ff:c8:12:da:b3:78:
         bf:6f:9f:57:87:16:2c:f6:b1:40:00:34:df:a0:9a:17:08:ed:
         cd:dc:d6:c1:85:d7:9d:e6:9f:a3:8b:c8:d5:f7:c4:19:99:42:
         69:72:7d:ce:bb:9d:a4:46:7a:2b:7b:56:7c:ac:29:37:37:cf:
         7c:96:eb:d5:47:f1:5c:f4:a7:7e:81:2d:34:d4:69:e2:e3:b8:
         8f:49:1e:d4:ee:34:86:2b:31:cb:d5:a5:dd:cd:73:b0:e6:65:
         88:6a:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:44 2025 by rpki-client