Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File:                     RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier:          T6LDXxZC3gqIktIz2BoIF4SUqsFGJuvU7/4e2mhPwHc=
Subject key identifier:   8E:5F:D3:BE:8F:49:4F:1C:BF:8A:83:7A:C5:1B:4B:23:A0:2D:58:72
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer:       /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial:       019748C342906040213DDEFDFCC0A860001E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 05:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:45 +0000
Files and hashes:         1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: V/d7G6bA7RUrOdwa1a3WttD7uotpvhgnZvTcrTGngvo=)
                          2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:42:90:60:40:21:3d:de:fd:fc:c0:a8:60:00:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
        Validity
            Not Before: Jun  7 05:00:45 2025 GMT
            Not After : Jun  8 05:00:45 2025 GMT
        Subject: CN=8e5fd3be8f494f1cbf8a837ac51b4b23a02d5872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:87:db:46:00:36:b5:4a:87:2d:86:16:e9:b6:
                    d9:00:d3:6d:21:ed:aa:39:70:e6:be:81:0f:1c:d5:
                    97:b2:bf:28:4b:e3:c0:dc:66:86:34:ab:1c:b0:b6:
                    56:1e:c6:06:82:65:de:5f:f9:2a:6c:2a:fa:07:e6:
                    2d:8f:86:6d:ca:87:bb:2f:80:00:af:78:4b:e3:d9:
                    9b:50:fa:3e:22:00:23:95:21:43:13:19:4f:82:c0:
                    7c:53:20:84:de:b7:de:e7:3a:80:05:1a:33:ba:9b:
                    a2:8c:6d:c8:ed:f1:12:13:b1:5f:e0:a9:78:3c:c5:
                    e2:d0:8a:96:d7:28:b6:c1:85:1a:63:77:79:68:c9:
                    6e:b4:c9:47:c4:91:b3:32:e3:9f:d2:76:84:4a:e8:
                    6f:29:59:c1:7d:da:38:78:f1:f7:77:5b:00:eb:9b:
                    03:b0:55:cc:50:1e:f6:89:a4:5a:ab:e8:cf:83:d2:
                    cf:dc:52:ca:17:67:64:be:2f:8e:8a:ac:96:bc:8b:
                    b6:5f:1f:ae:67:ba:ea:7b:f5:25:ec:02:7f:5e:dd:
                    1f:ec:50:99:9d:b6:c0:91:88:80:42:a1:5f:4f:c5:
                    72:37:8a:a5:d4:3c:28:68:e4:50:64:c3:38:5c:6f:
                    41:f9:53:12:a3:0c:d0:c2:9c:03:1a:6e:07:a1:88:
                    e8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5F:D3:BE:8F:49:4F:1C:BF:8A:83:7A:C5:1B:4B:23:A0:2D:58:72
            X509v3 Authority Key Identifier:
                keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:fe:fb:67:47:c7:c1:1c:cc:a5:01:5c:2f:a1:a4:4b:1b:08:
         b4:06:d6:f9:93:0b:8e:cd:04:cb:53:74:af:a0:5c:81:59:4c:
         0e:f1:c6:4d:01:7c:44:2a:f5:ba:2b:91:ee:dc:d7:af:07:99:
         c3:be:83:4f:8e:db:9b:04:3e:eb:a7:bf:32:7b:84:df:57:57:
         b6:b5:c5:7c:07:c4:1c:01:c4:41:4e:c5:da:5f:7f:2a:f7:f4:
         4b:ab:53:05:8a:bf:49:c7:2a:5c:48:3c:6a:54:5d:ed:b4:b5:
         a3:d0:a7:98:f0:3b:0c:c3:44:40:00:e4:91:ba:c5:63:00:d6:
         9f:a5:c0:d8:3d:31:ba:59:2e:c7:a9:81:e2:be:1d:a3:fa:60:
         78:af:c6:d5:8b:c5:87:0c:8f:82:e3:7c:12:ed:3b:ea:58:1b:
         ba:77:5c:8b:cd:13:07:a0:cf:55:7b:4a:f4:79:ad:19:b8:5a:
         09:f5:21:fb:e6:02:4c:25:4a:2d:0f:34:91:c6:24:b2:43:64:
         12:16:a2:ef:d1:62:d1:ea:a9:b9:ea:56:f0:4c:2c:9f:ba:80:
         5f:c6:1a:5b:4a:e6:07:7f:e8:7e:36:8c:1f:e2:5e:ea:db:19:
         85:99:9b:62:de:ac:d6:7d:d4:5a:1b:a8:2e:80:0b:c6:c5:e1:
         ac:ff:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:15:09 2025 by rpki-client