Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File:                     4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier:          YKGYeYhY9yt4IeZ9ZxWWqAAsEnmEILLITpsWavjNVZk=
Subject key identifier:   7D:3A:62:7C:CC:A7:8B:02:A3:BB:26:C3:BF:D2:FA:E2:31:52:DB:4B
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer:       /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial:       01974BFB44204DF0B9D2752C2D8EA8388E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 20:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:47 +0000
Files and hashes:         1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: jEnHUGvGoMtiqeHpfL0IRSKBdN4pJEBn3uumEpcT/aY=)
                          2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:44:20:4d:f0:b9:d2:75:2c:2d:8e:a8:38:8e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
        Validity
            Not Before: Jun  7 20:00:47 2025 GMT
            Not After : Jun  8 20:00:47 2025 GMT
        Subject: CN=7d3a627ccca78b02a3bb26c3bfd2fae23152db4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:df:af:30:f2:42:cb:ac:7c:21:a5:0a:b2:
                    7e:74:f4:29:f1:70:5a:34:0c:bd:92:c4:6f:90:49:
                    f1:d0:df:f7:b8:27:e8:d3:29:f7:fb:cc:01:9c:45:
                    00:87:cd:d0:55:98:50:ab:8f:52:de:1a:75:44:b9:
                    cf:d4:23:e7:7b:b9:8a:68:e6:8e:5b:74:96:6c:e2:
                    a1:b9:9e:e2:e2:7d:c3:20:5c:b6:6b:bf:40:ad:33:
                    b8:00:75:13:60:f5:c8:4e:87:bd:27:ab:4a:25:d2:
                    92:6e:c4:ec:71:d6:c7:10:a2:88:a1:ae:2c:1e:30:
                    3f:70:2a:32:f0:78:3f:44:61:42:50:88:5f:e2:6f:
                    dc:ac:25:83:76:19:4b:7e:1d:71:31:49:8f:ec:ec:
                    bb:ed:6a:1d:20:cb:13:ba:78:bb:0c:7f:5d:c6:58:
                    af:22:0e:63:45:d3:59:70:7a:46:e7:6e:68:d5:e4:
                    77:72:00:1a:ef:42:03:c6:59:b0:8d:ef:d1:48:0c:
                    ac:81:20:4a:c0:b9:0c:3c:48:1e:5b:bc:b7:6f:8a:
                    83:0a:55:df:2e:ec:5d:3a:12:3b:92:0c:3c:dc:47:
                    95:05:e9:1c:a9:7b:8c:ab:52:ef:b9:7d:81:53:fd:
                    06:7f:35:5b:6a:51:99:79:ce:ce:1e:81:c2:26:88:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3A:62:7C:CC:A7:8B:02:A3:BB:26:C3:BF:D2:FA:E2:31:52:DB:4B
            X509v3 Authority Key Identifier:
                keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3d:05:a5:5d:38:a6:9f:30:a4:30:59:0d:87:9a:31:de:d1:
         db:52:11:98:1d:33:a9:e7:fe:d3:ae:3e:6c:b5:39:6b:41:3e:
         ee:f7:e5:3d:ca:9e:81:59:d8:63:dc:fd:dd:1f:88:ef:f5:47:
         30:c0:e0:2d:e8:2e:19:3f:6a:44:cf:4d:fa:7f:0e:00:b4:87:
         3f:77:ec:b5:ca:7f:03:dc:a5:f1:0f:69:7a:3d:50:6a:10:a1:
         4e:96:a0:b8:da:b1:45:54:6d:13:b4:9f:83:83:40:cc:15:1c:
         dd:eb:37:b5:08:72:b2:5e:74:aa:a8:b5:68:4a:c8:a7:0f:6e:
         2b:5a:c4:5b:fd:e1:8d:92:30:57:fc:88:c3:e0:d9:af:2d:af:
         e1:7b:d0:20:13:e2:2f:59:49:02:57:45:44:a2:96:e7:63:a6:
         dc:5b:71:9b:56:8c:17:91:29:8c:cc:cf:4c:9c:54:15:18:1b:
         24:b5:d6:36:c1:92:5a:a4:f3:c3:50:c0:ac:c3:60:ff:48:d3:
         fe:b6:e8:34:64:2e:be:ae:6a:06:b3:d3:8b:5d:0c:06:05:64:
         0a:9f:4b:a5:dc:ec:8a:63:7a:6b:93:94:a2:eb:9c:7e:63:03:
         3c:9b:9e:05:83:89:d5:bd:e6:18:fd:e1:02:9c:b3:e3:d5:1b:
         d9:50:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:25 2025 by rpki-client