Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File:                     MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier:          e97i9Ht21L3wJgJEuSqzBqqCKSMHQ5XEmzSOSioYqFk=
Subject key identifier:   68:F7:F0:00:97:9B:45:03:37:79:6B:C3:0A:94:0E:CB:26:58:1C:C6
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer:       /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial:       01974A0CA74AD3CE9FA3940EE1EA23F63DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 11:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:32 +0000
Files and hashes:         1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
                          2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: MnvmIIQynKFTLMlkKgbrDeifzOdmSvgLzyl1SZ4UVcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:a7:4a:d3:ce:9f:a3:94:0e:e1:ea:23:f6:3d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
        Validity
            Not Before: Jun  7 11:00:32 2025 GMT
            Not After : Jun  8 11:00:32 2025 GMT
        Subject: CN=68f7f000979b450337796bc30a940ecb26581cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:3a:88:4f:53:ac:38:b6:08:d9:76:5a:94:
                    b6:71:c4:df:39:49:7a:e0:15:9b:61:19:a5:92:46:
                    e7:1c:63:50:22:c8:8d:06:8b:21:ed:4a:c3:8f:e4:
                    ca:be:62:b0:c4:ba:ad:91:75:99:12:70:4a:dd:59:
                    bb:ed:e9:5d:0c:55:62:60:48:9d:52:0c:63:16:0e:
                    4a:26:bf:47:75:33:b6:29:df:db:e1:eb:a2:fe:8e:
                    50:6f:ea:a9:d2:da:3c:08:ee:0d:98:5c:2e:fd:7c:
                    b0:b7:48:59:ec:01:29:5f:d5:e9:6b:df:29:49:e8:
                    ec:21:78:8f:cd:e8:32:be:2b:22:75:c2:9f:7f:70:
                    47:b8:19:7f:34:dd:0e:fb:6c:78:16:92:4a:77:7d:
                    fd:91:95:70:46:7d:3c:a8:33:5b:71:91:57:00:9b:
                    ce:d2:a2:cc:38:21:7e:d0:04:a2:b6:11:13:6f:5f:
                    26:7b:aa:6e:7a:c8:d2:b1:0c:ec:77:2e:1a:22:ac:
                    c2:60:2d:e5:45:15:36:fe:aa:65:03:13:12:76:83:
                    91:d3:86:5f:dc:76:50:b6:f9:68:cf:d8:72:d9:12:
                    0e:c4:25:fe:ac:27:86:b9:1a:bf:71:9d:9a:65:33:
                    e3:fc:ab:30:09:ad:2b:98:66:ae:d8:10:4f:4c:f0:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F7:F0:00:97:9B:45:03:37:79:6B:C3:0A:94:0E:CB:26:58:1C:C6
            X509v3 Authority Key Identifier:
                keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:cb:6a:cb:bf:0b:b1:72:f0:38:56:b2:d9:8e:40:d0:5f:
         16:fd:d7:6a:5e:8a:84:0a:5f:b4:26:08:bc:3e:98:e4:a4:a2:
         4d:0b:50:72:33:0d:b5:c5:37:dd:fe:68:6b:c0:6d:ff:00:ac:
         4d:75:7a:fb:62:53:12:8f:02:81:fc:53:3f:e0:96:5e:13:1c:
         f5:6e:e1:60:b9:a3:a3:e1:36:d0:8e:7d:9a:c9:32:2b:24:2c:
         95:21:6e:52:e4:f1:57:42:4f:c4:e5:65:f5:3e:48:ad:56:88:
         f1:c9:40:c1:f5:5b:fc:ed:46:eb:98:a4:00:f5:d6:5c:cf:85:
         19:31:a7:e9:9b:41:78:d7:27:07:8b:11:b8:57:26:14:15:50:
         3f:4c:f6:fe:77:0a:09:9b:34:c2:58:5e:c3:00:f6:99:92:33:
         a4:47:2f:42:31:57:73:75:d1:9c:d4:42:a4:75:55:6c:81:e6:
         79:af:39:f9:95:b6:63:92:3e:f7:7d:b4:52:17:92:77:1c:58:
         f7:c1:49:ac:a0:d1:af:c5:0a:31:6a:40:0a:cc:d9:f9:8a:86:
         fa:36:9b:54:9c:15:5f:f7:89:fa:2e:04:0a:f4:96:56:bc:db:
         6e:d3:4d:26:a3:b6:19:07:e4:21:e1:40:e2:ca:cc:ba:63:99:
         c4:ba:30:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:27:40 2025 by rpki-client