Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File:                     cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier:          KirJLkfe00m/0Uu22r5guVdvQYWX/ZF8EOEjj/zt8/g=
Subject key identifier:   02:66:85:D9:8F:12:16:3B:B4:BB:2A:1C:57:F6:8B:D6:46:9D:39:E0
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer:       /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial:       01974AE838783DB3F7D7EE89A3CFB7EE7A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 15:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:22 +0000
Files and hashes:         1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
                          2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: p2CGXLbUqoRNMLKuOwDfdBV4gL6UkiZK807xI65m1c4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:38:78:3d:b3:f7:d7:ee:89:a3:cf:b7:ee:7a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
        Validity
            Not Before: Jun  7 15:00:22 2025 GMT
            Not After : Jun  8 15:00:22 2025 GMT
        Subject: CN=026685d98f12163bb4bb2a1c57f68bd6469d39e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:42:f0:c0:fc:e2:c9:9e:31:65:75:91:98:
                    4d:2a:a6:41:84:cb:38:d2:ce:05:4c:67:86:99:4f:
                    de:31:0b:f2:af:63:84:ce:ed:03:ce:f6:28:aa:04:
                    25:3b:9a:59:fc:ab:fd:3a:f4:92:2c:be:6d:75:ff:
                    a0:9d:f1:a2:04:86:e3:86:43:5d:ad:db:d3:c6:05:
                    4e:a7:af:99:c0:ac:8a:b4:88:51:d0:36:b1:70:6a:
                    ed:e8:8d:90:58:7f:c4:b7:fc:7d:be:7a:e2:f2:ae:
                    56:70:ca:c3:5c:ff:b9:94:4f:ff:4a:b3:01:ee:e9:
                    50:5f:6a:64:a1:c1:5f:6d:e2:13:92:69:f6:1f:e4:
                    7d:64:4d:59:7e:ea:89:40:eb:4a:1c:f0:8a:35:ad:
                    2e:8c:8b:49:f2:e6:d2:27:dd:45:b5:81:d4:4f:04:
                    cd:8a:4e:c6:13:4e:71:aa:e3:1c:76:27:ad:12:e8:
                    80:08:33:35:b3:8e:aa:9c:7a:0b:02:b1:06:95:a6:
                    94:57:de:5c:37:e4:4f:5c:71:46:82:12:79:83:b5:
                    a3:8c:be:28:7c:f0:6d:9b:6d:10:6d:24:43:6c:49:
                    d3:e5:a2:70:59:eb:f1:ce:f1:3f:a0:dd:0d:e0:23:
                    12:7f:7c:83:96:82:7c:f5:74:28:98:7f:17:2d:f4:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:66:85:D9:8F:12:16:3B:B4:BB:2A:1C:57:F6:8B:D6:46:9D:39:E0
            X509v3 Authority Key Identifier:
                keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:de:31:a9:8f:04:46:9b:8b:47:be:c8:22:d8:df:f1:3a:
         0d:6b:1e:f9:0a:eb:bc:d4:19:98:7c:aa:a0:6e:dc:18:69:43:
         48:e9:85:7a:38:35:4d:82:92:5f:22:7b:ba:cf:2b:5d:8e:99:
         25:81:18:e5:ff:05:3b:04:5d:58:3d:7e:03:ac:07:2f:b4:78:
         ad:b8:96:15:da:c8:0b:07:17:a5:65:53:2e:75:90:5c:b1:c3:
         69:14:d3:35:b6:63:d5:06:8e:79:2e:fa:5d:44:5a:46:d6:f3:
         51:81:0e:c3:c6:9f:15:b1:94:50:64:1d:33:c9:06:af:b4:25:
         b6:64:15:1e:e6:2c:23:d0:e0:dd:97:1b:6f:05:a1:59:8f:88:
         ac:1b:89:e7:b0:98:82:60:a6:01:2f:5c:ec:54:13:8a:3e:52:
         6b:01:d3:e7:4f:d5:c2:d5:0d:41:bf:d8:c1:0e:d6:fa:01:0e:
         e1:e6:37:3a:79:e9:ca:5c:f4:85:8f:bc:1d:ac:c4:db:2b:cf:
         14:5a:e5:14:b5:82:85:c1:c5:49:e8:6d:74:f4:d6:b4:b7:2b:
         93:10:ef:f0:23:6b:c3:e7:51:be:69:ba:62:eb:71:e7:a8:d5:
         18:81:dd:61:ce:cf:96:94:2a:d7:4c:41:22:02:28:ac:12:b0:
         68:4c:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:28:25 2025 by rpki-client