Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          LJMMN5IwNzZ6SpuUllpHrtkTXUMNgeJeXZTdLQq9xX4=
Subject key identifier:   62:BB:8E:B1:18:1A:DC:9C:50:A8:DD:ED:6B:FF:5F:7B:91:5C:50:EE
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       01974B565607C45E1B4975B8DE236225996F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 17:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:38 +0000
Files and hashes:         1: 1TalR7Afli-hXkmIqf9328FI3Fk.roa (hash: CZU1GRNs7a/ZLVQIh1+1KE9CTeVWWUwOxmLShJ7hoBQ=)
                          2: 1rOZrsi2VH15nsMPM1hcZLORVXs.roa (hash: iSIJhNQhJCt3984hIwFcXBjIv6TT10z6x01UJ9CZjZw=)
                          3: SF3VU5SVWzi0_2Xar-2YOdcK-gc.roa (hash: AuIY2iLIo2qAdBJbw78kdAZId1WsZdROE7KvRyYurC8=)
                          4: m0Rt5yA8GGtQzeIweywdCKZ3vPk.roa (hash: 1a8qCx4A/hh4MAoCIXUYRzaVBoJjd0SdneNnyPupOv8=)
                          5: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: YkdrNoDRMjBCExeUEqg1svMJG067A5l1ZIkFc03W3Io=)
                          6: qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa (hash: FprxjmSrJVIdrJmDZ/hiSKkUv6KnjJr3J8MVoY0gd6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:56:07:c4:5e:1b:49:75:b8:de:23:62:25:99:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Jun  7 17:00:38 2025 GMT
            Not After : Jun  8 17:00:38 2025 GMT
        Subject: CN=62bb8eb1181adc9c50a8dded6bff5f7b915c50ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:60:f2:15:06:ed:d1:90:4d:ec:6c:8a:9a:
                    7d:f3:d2:e0:c2:6d:e9:4a:5a:d6:0f:36:08:cf:08:
                    41:01:ff:80:9d:45:cb:25:e4:83:e9:8b:00:45:e6:
                    9f:58:1a:b9:85:c4:ce:97:8e:77:37:e8:b4:3a:29:
                    fe:45:dc:94:c8:5e:25:c7:4f:5c:78:cc:4f:f1:c4:
                    f4:f5:27:c7:07:38:b1:a6:74:0f:da:d9:44:b6:17:
                    54:78:2a:cc:2a:17:8b:4f:aa:8b:b2:d7:2a:02:6b:
                    84:63:cf:b0:ab:e8:10:6a:ba:9d:68:a4:79:64:ea:
                    3f:09:6a:32:ba:f4:70:64:c5:08:16:47:fa:9a:fc:
                    82:bd:9b:a3:e4:7d:ad:45:86:05:9c:f2:22:7b:1e:
                    12:db:b6:6e:fa:ba:08:ff:5b:6a:ef:fc:43:ff:b6:
                    e5:ba:07:a3:9c:26:d8:71:e0:69:9c:11:0b:0d:b9:
                    4a:f4:d4:1c:90:8b:13:c1:e1:93:56:c3:55:44:32:
                    02:ed:c9:ea:e7:b8:f5:0d:cb:01:7f:b3:42:5d:c7:
                    80:8a:1c:95:e6:29:94:88:e4:c4:3a:a7:bd:c5:c7:
                    4d:85:c1:09:c8:ee:0f:66:cb:31:bb:3b:97:cc:f1:
                    4d:91:fe:9a:5b:75:24:65:4e:c6:78:7c:62:75:66:
                    18:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BB:8E:B1:18:1A:DC:9C:50:A8:DD:ED:6B:FF:5F:7B:91:5C:50:EE
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2e:86:18:70:15:cf:5e:f1:c6:91:ad:75:14:ee:96:02:93:
         fd:53:eb:ab:14:85:fe:85:5d:93:9f:8c:b4:c7:21:a9:68:62:
         09:b5:d3:55:77:2e:e7:29:55:62:40:64:04:ea:5a:2d:c4:89:
         29:94:a8:38:e3:22:9f:3d:7b:e8:06:e0:a2:c3:4d:d1:be:9c:
         43:a2:af:3d:de:54:f0:65:86:9e:b5:5f:0a:ec:43:c9:4d:ea:
         4b:8c:97:60:17:cd:e9:e3:9c:d6:37:cd:d2:53:f9:85:ea:72:
         fa:10:43:ec:82:dd:cb:7b:02:da:9c:a1:94:c9:ea:61:ea:6d:
         60:c9:2b:ef:c7:69:ae:8e:b9:cd:4f:aa:c0:40:13:df:bc:1e:
         f0:ef:38:20:de:db:e4:0a:ae:e5:2a:65:d8:c4:7a:bd:0a:75:
         d9:ef:84:ed:08:b3:ef:02:78:9d:5a:62:23:d9:e3:05:cb:96:
         f4:6c:16:f9:26:df:17:d4:75:f1:0f:af:ac:b3:24:ad:01:fc:
         aa:49:c8:88:8a:b1:7d:bc:9f:8b:70:4f:41:60:ba:ed:49:39:
         65:1f:2e:9d:aa:41:d0:ff:c2:bd:c7:8c:f4:a2:8f:12:6f:ee:
         36:0c:9d:0b:ee:d6:2a:ff:5d:32:6a:86:85:6c:ce:70:93:b1:
         0b:34:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:47:39 2025 by rpki-client