Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File:                     lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier:          Avi0FOgjf2KZJXCD8cLd9Fd77Tb8xckGkUkEAv7aThM=
Subject key identifier:   18:9D:17:C2:A4:4F:F1:CA:56:50:14:0B:78:19:AA:FB:FB:B6:3B:BB
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer:       /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial:       01974AE90F815397AE339A4A2C45EA395FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 15:01:17 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:17 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:17 +0000
Files and hashes:         1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=)
                          2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=)
                          3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: UfTn0rY4FQhtYBQzYXEjJDPgGu3LyU1OqYL90vVwraM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e9:0f:81:53:97:ae:33:9a:4a:2c:45:ea:39:5f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
        Validity
            Not Before: Jun  7 15:01:17 2025 GMT
            Not After : Jun  8 15:01:17 2025 GMT
        Subject: CN=189d17c2a44ff1ca5650140b7819aafbfbb63bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:e8:5d:02:f3:30:75:41:e1:f7:de:39:3f:
                    0d:18:70:94:e0:11:78:31:26:fb:f2:85:8b:61:14:
                    d5:02:00:7c:42:2e:af:4c:df:88:48:1a:54:c9:c3:
                    e2:12:1b:fc:b0:8d:75:53:d5:b4:1e:a7:d7:ff:d5:
                    3c:db:1b:7f:61:41:e6:b8:fe:d0:e7:f6:c7:df:5c:
                    6c:03:a0:07:c1:41:a4:f0:89:ff:d0:75:58:16:38:
                    c4:0a:a7:9e:67:d1:72:4b:38:5a:ce:5c:4d:b9:76:
                    a4:57:2c:e0:92:d9:8f:42:af:a4:21:8c:18:df:0f:
                    61:f5:92:ff:d7:8e:5b:ce:ec:c5:d5:4d:98:cf:8a:
                    00:11:82:ba:37:dc:b1:29:79:e5:f6:d6:21:3b:0c:
                    22:a1:2f:00:66:30:46:fb:08:dd:de:15:d4:8f:ef:
                    ac:89:0e:44:c8:1b:73:f4:d2:fa:ad:03:45:74:d4:
                    ef:51:ca:1e:4c:17:75:a0:9c:58:05:5c:04:ba:ad:
                    60:d4:3e:80:3a:71:ad:91:92:dc:1d:8c:bb:2d:dc:
                    e9:99:a8:60:72:05:76:c8:2c:4e:4e:0b:a9:6d:e7:
                    d6:4c:55:b5:19:ec:1b:be:ce:9c:ec:06:57:80:25:
                    41:6e:c0:e3:08:4f:37:76:88:03:96:08:39:65:24:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9D:17:C2:A4:4F:F1:CA:56:50:14:0B:78:19:AA:FB:FB:B6:3B:BB
            X509v3 Authority Key Identifier:
                keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b6:e7:00:a8:27:60:40:1a:eb:86:6f:7f:d1:7b:54:17:87:
         65:8a:d6:dd:a2:48:32:03:5c:3f:70:51:08:70:ee:cb:99:34:
         9a:c9:c1:c9:f6:9b:19:de:23:95:e9:3b:64:9e:8d:0e:30:51:
         f5:51:a9:a1:9b:9d:a2:22:9a:06:ed:19:a7:35:36:4f:02:06:
         c3:6a:e6:d6:9c:77:98:c0:8b:8b:c0:49:51:65:54:a9:b4:d6:
         04:06:fd:af:cb:c7:cb:a5:49:48:61:68:12:b0:fb:23:16:15:
         b2:4c:b1:a0:5f:f7:c0:02:62:32:76:6a:cd:0a:a2:f4:02:5d:
         e5:6c:91:d1:49:2a:5d:3d:09:da:74:0b:81:d4:e8:fd:de:ac:
         3c:c6:8e:0e:4e:8b:91:b2:d4:ec:84:59:94:f4:85:94:46:8b:
         da:09:33:53:24:e5:02:ce:72:68:b3:1c:a4:42:9b:7a:78:93:
         d9:04:6b:89:c4:2b:e0:ef:5c:e8:93:17:98:75:24:73:87:07:
         2f:68:53:d6:eb:8c:37:f3:e5:7c:2a:8b:f7:e2:64:b8:70:7e:
         cf:57:17:ff:8c:78:d2:04:bb:0f:bf:62:8f:4f:8d:3a:1b:e7:
         74:d0:bb:c9:eb:ec:7b:42:7c:6f:0d:37:1c:e9:41:2b:7c:45:
         07:76:d9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:01:14 2025 by rpki-client