Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File:                     RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier:          k2sQqizjrnIaGDKAfrQPx6VolbYkK18WodTOr/8FRk0=
Subject key identifier:   93:A7:73:26:0E:2F:02:13:A4:C8:C6:DC:42:62:4F:3D:45:9C:94:D0
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer:       /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial:       019764A8343313379F740702D0AE7BACB481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number:          151C
Signing time:             Thu 12 Jun 2025 15:00:34 +0000
Manifest this update:     Thu 12 Jun 2025 15:00:34 +0000
Manifest next update:     Fri 13 Jun 2025 15:00:34 +0000
Files and hashes:         1: 1-2BRV4sfO38uFELp8sV79L0B1lw.roa (hash: APyNfY72IzRC6P6hQGMuA+VkTRyCwcNbDRlCp4K0Vjw=)
                          2: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: KkQKBNTlx/nTMkEc05o1pvE8rOHIZ/TearmbCuL7xgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:a8:34:33:13:37:9f:74:07:02:d0:ae:7b:ac:b4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
        Validity
            Not Before: Jun 12 15:00:34 2025 GMT
            Not After : Jun 13 15:00:34 2025 GMT
        Subject: CN=93a773260e2f0213a4c8c6dc42624f3d459c94d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b7:e4:a8:f6:c8:f2:cb:e0:77:23:6d:43:94:
                    c4:90:f9:a1:ad:d2:bc:a5:76:bf:5b:95:67:59:33:
                    bf:1a:b9:5a:82:6b:00:e3:62:d3:ac:88:79:36:96:
                    0e:12:a7:fe:09:76:11:46:24:95:2f:b7:4b:d9:86:
                    a0:9b:68:a0:e3:7e:81:fc:da:6c:47:62:4d:46:db:
                    77:de:87:55:d8:01:33:33:0f:a2:1c:3c:88:c5:26:
                    5f:27:b1:18:95:9f:22:f2:53:5c:f4:c5:88:81:21:
                    b9:07:96:c8:b6:df:2d:0c:be:b5:e9:58:f4:67:ed:
                    09:41:f4:88:8b:28:bb:61:86:73:53:5f:1d:16:44:
                    f8:33:e7:6d:38:d1:b4:17:ef:61:48:3f:aa:37:cd:
                    1a:f6:34:83:13:09:32:e7:77:1c:19:2a:8e:a3:8a:
                    a3:a5:af:a0:bf:f2:b1:4c:83:d5:52:03:fa:5d:d9:
                    22:48:4e:80:bf:57:c3:3b:53:12:ed:e5:81:9c:e2:
                    28:af:43:ad:23:10:63:e0:35:15:cc:87:af:1c:f9:
                    13:17:91:44:7c:91:85:b7:f3:b0:70:e8:cb:95:8f:
                    50:47:ba:34:6c:a6:74:ad:f0:09:b3:70:ef:e7:8c:
                    fb:00:bc:3a:6e:6a:7a:13:e2:b7:4b:d3:12:b4:84:
                    5d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A7:73:26:0E:2F:02:13:A4:C8:C6:DC:42:62:4F:3D:45:9C:94:D0
            X509v3 Authority Key Identifier:
                keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1f:62:a7:d0:8e:76:49:56:a7:e3:7e:ff:5d:f1:53:56:fb:
         f8:2e:ac:9b:41:b4:d0:54:4a:66:99:9a:a9:8b:93:e9:55:ac:
         ff:1e:29:57:0f:1e:ab:0f:a7:8b:94:a0:04:a3:20:84:d5:b4:
         96:e6:b1:f5:55:cc:60:2e:67:07:cb:fb:bd:d2:61:b6:fe:72:
         88:9f:83:6d:76:e9:a6:0d:d7:21:94:0a:e7:e7:96:8c:5d:57:
         e5:d7:4f:9a:de:8b:1a:d7:12:e5:78:79:f2:9d:de:af:71:80:
         bb:0a:23:fd:ef:c9:5d:67:25:eb:ea:28:f5:13:0e:a2:6b:3c:
         b7:aa:01:7b:a3:81:9b:da:23:8e:ad:35:b3:f0:3c:a9:e1:17:
         e1:97:8e:50:ef:f9:f0:15:b7:ff:e0:15:ba:3d:af:53:54:50:
         7e:82:d7:76:04:16:a6:67:07:89:9c:f7:d6:5a:7c:69:83:b8:
         aa:4c:d1:f5:fb:2e:ad:24:35:1d:ad:e2:9e:cd:67:56:b2:ab:
         fc:5b:c7:39:e6:10:fb:d7:a6:ce:4f:6b:d1:a7:8b:34:f9:fb:
         9c:13:d6:e7:b9:d3:ee:b0:59:d4:b9:06:8a:a4:86:b2:47:79:
         86:86:db:76:6d:b8:f1:c4:8c:67:51:00:e2:2b:01:e2:bf:41:
         b6:ee:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:37:18 2025 by rpki-client