Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File:                     ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier:          +a5OXrlUedJJFFcdEuTTz1ydmH16v+7DW8myRpEp6PM=
Subject key identifier:   3E:5B:EB:16:62:45:AB:3C:BC:29:26:C6:33:FA:47:FE:63:4A:0A:2E
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer:       /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial:       01974D7BE6C315C744DAE7BB0B17B516AE60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number:          157D
Signing time:             Sun 08 Jun 2025 03:00:54 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:54 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:54 +0000
Files and hashes:         1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: IpRLvluVV1GcdfFfcFv5MTNhkHpWsenJ9ZHewWH0Lt4=)
                          2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:e6:c3:15:c7:44:da:e7:bb:0b:17:b5:16:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
        Validity
            Not Before: Jun  8 03:00:54 2025 GMT
            Not After : Jun  9 03:00:54 2025 GMT
        Subject: CN=3e5beb166245ab3cbc2926c633fa47fe634a0a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b2:87:2f:66:60:4c:53:8e:b5:39:9d:16:b2:
                    6b:66:4f:57:d1:c0:12:4f:a0:80:dd:dc:f4:e5:ab:
                    b4:bc:5a:b4:a6:80:43:75:17:23:5e:1b:0a:2f:0a:
                    22:6a:1f:91:14:2b:cf:66:b3:4f:d5:38:bc:3c:e5:
                    4d:fa:0d:46:be:f8:83:43:a1:8b:45:d3:aa:42:92:
                    ae:7a:e4:54:b0:c0:eb:b7:77:78:a0:a1:b4:4d:ff:
                    43:a2:92:be:b7:1d:d6:38:e8:ba:8b:85:38:03:eb:
                    4b:37:cd:7f:1e:c0:51:8a:8e:fd:f1:5f:dd:59:98:
                    cd:88:03:b1:33:a6:26:6d:92:30:4d:8a:3f:c5:5f:
                    89:31:aa:41:37:0b:16:85:51:71:1f:79:26:83:b1:
                    53:74:49:df:0a:1a:af:31:57:52:0e:57:2a:45:98:
                    76:03:b6:3d:df:98:de:8b:9d:c6:22:aa:b4:99:4b:
                    0b:7d:f3:93:79:78:23:b5:8f:20:dd:eb:85:74:3d:
                    90:ae:78:37:c2:ea:5c:22:61:23:5a:8f:35:2b:08:
                    51:cf:47:0b:14:b5:8e:bc:85:b0:bd:84:f9:de:55:
                    d1:27:5a:63:8b:a7:14:f0:fd:1d:0a:43:6f:5f:c6:
                    87:8f:55:17:3d:e5:92:9f:ef:36:e9:30:13:22:4e:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5B:EB:16:62:45:AB:3C:BC:29:26:C6:33:FA:47:FE:63:4A:0A:2E
            X509v3 Authority Key Identifier:
                keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:12:6c:1d:03:4e:2c:01:14:e8:62:72:23:dc:5e:74:86:
         92:c8:04:45:2a:ee:0c:6f:4f:02:a9:6c:6b:9a:2b:23:4a:fb:
         cc:f0:ba:b7:af:ab:40:e1:4d:04:f7:df:7e:38:72:37:8d:15:
         bb:e5:f9:9a:3f:7c:c9:13:dc:f3:fe:50:bc:50:fd:06:83:1e:
         27:23:34:92:62:5a:ca:91:b3:4a:d3:50:eb:c0:b3:46:1d:7d:
         68:8a:55:f8:5e:43:ab:01:80:a3:a1:70:c1:45:bb:57:19:11:
         a7:89:ba:b0:f1:1a:36:13:7a:d5:5e:88:d4:89:c7:dd:70:07:
         68:76:64:c6:5f:74:ff:cf:61:e0:0f:05:1c:42:1c:0b:5d:01:
         2f:13:d8:f8:70:70:1b:8c:a3:b4:cb:92:5c:1a:68:d6:d6:d7:
         ec:df:49:4b:22:45:0b:ca:ad:bb:fe:38:58:37:5a:7b:a7:db:
         63:5d:55:d6:1b:19:8f:ce:32:02:47:61:84:4a:3c:f0:c6:0f:
         eb:1d:ab:37:15:0a:e1:24:24:43:85:a4:d0:d8:22:62:57:00:
         9d:ab:2e:b4:39:0b:b3:2a:46:c3:a2:c1:6b:e2:34:67:02:89:
         ae:cc:35:b5:42:1d:dd:81:cb:e5:09:5f:e3:b7:c8:1e:ed:9f:
         80:52:a1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:27:39 2025 by rpki-client