Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File:                     dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier:          nEC1gom0FzCuVOut3YdkURh+dSh+yldOLdyjqWNjVjE=
Subject key identifier:   F0:D1:AE:B0:C9:D8:07:A0:FB:6A:FB:BB:12:11:89:23:0C:5A:F6:80
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer:       /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial:       019747B11270F355958D904DC78632938B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 00:01:16 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:16 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:16 +0000
Files and hashes:         1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=)
                          2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: o4wGFRgjTyPLateItYhvMN7BRaeAwJJJIuwWkdFIQX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b1:12:70:f3:55:95:8d:90:4d:c7:86:32:93:8b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
        Validity
            Not Before: Jun  7 00:01:16 2025 GMT
            Not After : Jun  8 00:01:16 2025 GMT
        Subject: CN=f0d1aeb0c9d807a0fb6afbbb121189230c5af680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:ec:a4:55:d5:7f:61:be:8e:18:4d:88:46:
                    2d:92:b9:e7:53:77:e9:34:4a:ab:70:9e:c9:a9:5f:
                    91:1e:82:46:04:df:ca:8a:0e:98:92:fe:57:a1:38:
                    a2:95:58:99:e1:ef:e4:33:a5:4f:d4:83:74:cc:11:
                    ec:2b:f0:c7:68:3e:1f:7e:13:18:97:ea:08:f0:b7:
                    28:41:af:2d:06:d4:e9:7b:5e:38:de:b7:87:b5:e7:
                    07:92:45:dd:18:9e:92:c5:12:a2:ac:1f:c3:42:d2:
                    37:60:14:72:ae:36:11:1b:94:d1:ae:8a:57:06:fe:
                    9f:e7:6e:fe:27:f5:07:29:14:7f:7e:6b:de:b3:63:
                    e3:c5:24:90:fc:66:9c:9d:38:f1:52:77:97:13:c3:
                    2a:c5:4e:cd:77:06:29:3b:38:40:c1:d5:cc:3d:93:
                    9f:c5:7c:d8:af:be:d3:c6:b0:a5:db:c4:3f:d9:35:
                    98:7c:20:a4:e1:7c:ef:3e:7c:63:f1:17:66:28:89:
                    9e:cd:97:c7:70:f3:53:3f:ff:08:00:40:28:92:09:
                    e1:91:98:f5:f2:fa:30:75:85:98:e9:ba:e4:ae:cb:
                    0e:ea:93:b7:47:41:19:77:37:f4:4a:63:19:de:15:
                    92:2e:45:3b:94:9f:2d:61:ef:5b:1f:94:2c:0d:68:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D1:AE:B0:C9:D8:07:A0:FB:6A:FB:BB:12:11:89:23:0C:5A:F6:80
            X509v3 Authority Key Identifier:
                keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:7c:8f:b6:1a:df:df:ed:60:ce:0a:cd:11:fa:09:da:a0:
         88:7e:e8:33:1b:77:d5:48:7e:41:24:4d:a3:2c:d6:31:83:0d:
         fd:b2:95:71:39:33:b7:a6:fc:f0:10:11:ac:72:b3:88:2c:b7:
         05:c3:82:74:74:6a:89:0a:34:a1:ff:c9:86:4d:5f:0c:59:c5:
         ed:cc:75:78:80:a7:e2:12:42:e6:85:3b:f4:2f:1b:6c:87:cc:
         14:03:d6:ae:7b:4e:d3:3e:94:d7:a6:f8:6d:c3:4a:66:ca:05:
         48:a3:1f:d3:08:74:eb:2d:51:b9:5f:44:dc:a9:36:77:ff:9f:
         a5:7f:e2:97:a5:c7:bd:55:de:71:d3:1d:0f:bf:b9:bb:f8:21:
         37:c1:57:67:51:72:30:60:0f:53:ee:51:33:ba:76:b9:97:37:
         29:41:a4:f3:3c:a2:31:92:e5:c7:7d:17:58:f9:50:67:34:78:
         05:16:85:8d:00:b3:8e:36:c8:37:45:de:9b:f2:90:ee:18:4b:
         c5:6b:4f:ab:0c:1a:6b:2b:ce:8c:48:a8:6a:8f:8e:e0:98:64:
         0d:77:77:52:1a:f0:60:c5:a0:2e:f0:17:42:c9:8c:83:d3:97:
         c4:6f:be:2f:44:d9:2d:c5:11:1a:a2:30:fa:fd:b1:40:96:df:
         b4:7f:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:26 2025 by rpki-client