Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File:                     C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier:          9ScVNReOQkWWTp/gX6K8btG1h94/QbLDz5E4df5shZ8=
Subject key identifier:   21:56:E2:DF:DD:E6:19:9E:AC:8D:0F:C0:7E:3B:A1:CA:F9:0F:07:D6
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer:       /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial:       019747B0A3F1FEE4471321E95605D1F669F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 00:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:47 +0000
Files and hashes:         1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: bmDi74EIffksg4TJB1Ud8HBgev5MU6ww+R1cufSdcMs=)
                          2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:a3:f1:fe:e4:47:13:21:e9:56:05:d1:f6:69:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
        Validity
            Not Before: Jun  7 00:00:47 2025 GMT
            Not After : Jun  8 00:00:47 2025 GMT
        Subject: CN=2156e2dfdde6199eac8d0fc07e3ba1caf90f07d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:e5:17:5d:bf:55:f4:b0:27:ad:72:3f:a9:
                    f7:50:12:89:64:ee:82:75:38:fe:c7:77:f4:2c:27:
                    5d:5a:93:db:ee:f3:79:8e:9b:d1:30:40:5e:c6:b4:
                    06:98:c9:26:58:eb:c7:4e:55:c9:e7:1d:14:43:cd:
                    de:41:f5:82:ac:7e:96:75:73:3d:0a:99:28:75:d9:
                    d8:93:bc:7d:87:57:79:de:ed:9e:3b:69:53:69:c9:
                    95:7f:f6:7f:17:b9:45:a3:93:7f:d5:0e:5f:64:69:
                    e1:d9:cb:d4:9a:b3:ce:9a:de:e4:c3:1b:4e:7f:3d:
                    b0:76:6d:80:64:c9:f3:e0:ea:00:12:08:7b:a6:38:
                    c5:64:e7:19:a8:bc:32:46:95:05:3c:36:24:a8:df:
                    42:ee:18:35:79:e1:c2:3c:44:ff:3f:54:d9:82:de:
                    35:5f:db:b3:9d:11:2e:db:10:70:0c:59:bb:e0:2b:
                    b2:f2:a0:cf:a4:07:af:69:e5:e3:79:23:2b:79:a5:
                    60:68:ab:fd:a6:1a:7f:10:24:bc:ed:06:c0:73:23:
                    76:b0:68:5a:48:94:10:3d:90:4a:ac:17:95:46:3e:
                    e2:3e:83:e3:db:75:35:7b:b2:2c:02:24:b6:3a:43:
                    e3:66:ad:02:9c:a5:ed:6a:74:c3:dc:d8:9d:01:90:
                    b1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:56:E2:DF:DD:E6:19:9E:AC:8D:0F:C0:7E:3B:A1:CA:F9:0F:07:D6
            X509v3 Authority Key Identifier:
                keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c7:06:52:90:b6:7b:58:63:e5:07:2f:b0:86:e0:9d:0c:52:
         eb:cf:56:9a:8e:12:ca:aa:53:71:27:c9:3e:9e:88:f4:fd:33:
         d3:d6:cc:7b:f4:c4:b2:24:7b:f3:42:58:f9:05:fc:95:0a:77:
         89:fc:b6:8f:6b:74:3e:9d:de:47:05:b7:ff:75:91:c4:bc:1a:
         eb:97:4e:b4:21:38:df:1e:85:0a:fb:c2:bd:60:a1:9e:0a:1b:
         20:82:d2:84:8f:38:62:df:47:37:cd:ca:ab:a3:67:ea:6b:2b:
         ea:fc:d8:96:e1:9d:30:43:b7:3b:71:bc:02:dd:54:86:8f:f7:
         d7:c6:0b:3f:7d:57:d3:dc:90:77:ce:a8:97:2f:16:73:1b:25:
         8a:cb:bf:ef:3a:22:fc:37:84:7e:2a:d8:b3:81:48:3b:5f:83:
         2a:b4:4d:aa:5a:59:b9:9a:bc:ff:82:e3:90:b7:51:dd:4c:15:
         a6:4c:15:0c:6e:71:a5:b7:20:c1:65:ae:77:45:a6:56:60:74:
         50:20:87:9a:78:42:e7:ec:f1:c4:42:25:0a:c4:3e:ac:20:43:
         5f:b7:9e:eb:4a:db:cc:6e:76:b0:69:d0:6f:fb:cb:2e:83:b6:
         34:1f:b5:bb:e0:d7:27:59:e6:ea:fd:31:7a:db:39:14:b0:c4:
         f4:5f:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:15 2025 by rpki-client