Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File:                     4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier:          9Bp/DuSchSJL4uXSF7doK6MYGsPYmKV6JyGBJ5kSU3Y=
Subject key identifier:   0F:82:2B:98:D3:CC:20:3D:BA:32:11:C4:5D:62:2B:C7:FE:6A:BF:B2
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer:       /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial:       019748FA237790C193BE756B2DD5B44F6B6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 06:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:41 +0000
Files and hashes:         1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: dZFq1VRlyrWavd/YJrsHCEdCnnOs0jwLBHzvIog0/0Y=)
                          2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:23:77:90:c1:93:be:75:6b:2d:d5:b4:4f:6b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
        Validity
            Not Before: Jun  7 06:00:41 2025 GMT
            Not After : Jun  8 06:00:41 2025 GMT
        Subject: CN=0f822b98d3cc203dba3211c45d622bc7fe6abfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:24:40:03:31:15:4d:b4:3f:b2:e6:b8:ad:
                    6d:46:49:18:f6:30:62:df:2c:1d:b4:ce:2e:93:2b:
                    fd:a5:5b:89:4e:a5:23:48:1d:8c:3e:57:f0:7a:95:
                    b1:54:26:1b:53:fb:cb:c2:6d:5a:3d:47:fe:00:97:
                    36:74:1b:a4:3e:fd:91:91:66:e7:48:8a:65:ff:32:
                    0e:ed:a2:b5:ac:2d:a2:80:3a:1a:3a:bb:dd:fb:09:
                    be:31:26:f1:99:3b:de:31:fc:12:25:e9:ae:e4:9a:
                    22:93:c1:17:8c:32:10:d0:c6:3b:58:92:15:f3:de:
                    f2:ce:3c:7a:f3:c5:45:3c:91:1b:e1:6b:1b:90:46:
                    ba:ab:f3:24:fa:8a:52:4a:ad:9c:d2:92:3c:40:1c:
                    ba:95:a3:fc:35:46:d6:b4:23:8b:91:32:be:f2:a7:
                    56:1a:87:9a:a7:d5:b4:df:f5:a9:da:ab:c4:de:7a:
                    60:d7:25:18:65:39:c8:25:6a:79:25:4e:91:01:95:
                    7d:7b:d2:63:18:86:ee:05:91:8a:0e:8b:93:cd:1d:
                    69:2e:18:43:56:4a:a4:d3:6f:84:93:d2:48:c1:1a:
                    be:cf:01:d6:9c:1c:71:d0:39:50:23:a6:22:dd:a8:
                    82:5f:b2:28:2f:52:44:5b:35:1e:b4:31:d3:f8:8e:
                    82:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:82:2B:98:D3:CC:20:3D:BA:32:11:C4:5D:62:2B:C7:FE:6A:BF:B2
            X509v3 Authority Key Identifier:
                keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2c:28:4a:26:c3:da:50:bc:58:3a:9a:b8:70:37:89:ad:ef:
         bb:90:f4:7d:7b:dc:5c:72:2d:c0:ae:79:64:e4:83:e0:c0:cc:
         ba:6b:cd:26:f0:67:a8:76:8a:b4:e7:72:e6:25:76:5a:1b:d7:
         7e:21:78:c4:de:f3:b9:63:38:36:7e:ed:cb:22:d4:5f:5b:a5:
         4b:b7:ed:ca:b1:a9:8a:32:28:5e:79:82:09:14:d7:47:2c:6c:
         7c:52:54:c8:74:b2:f2:df:34:12:f3:15:6f:d7:f0:bc:15:0d:
         84:2c:ad:dc:fe:1d:35:a6:1b:54:19:c3:0a:5a:3a:5d:d7:8d:
         42:2c:7c:bc:b2:aa:c0:02:69:77:7d:57:6b:78:86:4a:84:b4:
         17:eb:91:bc:8d:e2:2b:01:50:ea:7f:3d:3f:a6:43:87:df:15:
         9f:66:d9:84:be:ca:80:f5:76:a4:8f:2e:a8:9f:f0:cb:6e:e0:
         79:73:f6:86:0f:5e:02:21:56:8f:98:95:30:9b:15:12:7e:ff:
         f6:54:73:4f:47:ac:30:80:e5:28:78:34:dd:0e:0b:4a:47:c4:
         91:2e:42:da:96:be:10:43:fa:b6:d5:ea:a3:30:c7:ac:88:f4:
         03:a2:3a:e9:d4:47:27:6e:fd:e4:5d:89:8b:88:74:65:15:e5:
         ed:b3:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:35 2025 by rpki-client