Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          O1VfTdNikzZXnew+JdYwRx2hJlDc4qxjeLsQunTzXG4=
Subject key identifier:   EA:28:2F:DA:1B:BC:60:B8:64:23:62:18:93:AD:4B:40:BC:F5:BB:D8
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019745C20C750E84590EFD324DAEC87360E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          157D
Signing time:             Fri 06 Jun 2025 15:00:34 +0000
Manifest this update:     Fri 06 Jun 2025 15:00:34 +0000
Manifest next update:     Sat 07 Jun 2025 15:00:34 +0000
Files and hashes:         1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=)
                          2: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=)
                          3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: SK/wltbPPnSiS0MkHIl86I/QnKiTP775AsAJVg4OPfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:0c:75:0e:84:59:0e:fd:32:4d:ae:c8:73:60:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Jun  6 15:00:34 2025 GMT
            Not After : Jun  7 15:00:34 2025 GMT
        Subject: CN=ea282fda1bbc60b86423621893ad4b40bcf5bbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:9e:ee:0b:65:c2:53:b8:9d:89:d8:64:09:
                    af:f9:4a:bd:fa:21:fa:87:4e:ea:23:3f:9d:12:7d:
                    64:1c:d5:e6:69:d5:99:80:f9:b5:6d:4b:60:a3:1d:
                    57:5b:a6:db:7b:db:5f:44:f9:18:77:9c:e1:fa:39:
                    a4:6c:44:0f:8b:7b:0a:71:46:f1:8d:47:bb:31:76:
                    4a:b6:20:60:ba:51:04:62:72:a7:f5:33:c1:01:38:
                    ac:eb:8b:d7:e6:31:eb:3c:5e:29:d4:73:78:33:04:
                    17:7b:67:88:2d:30:98:30:4c:88:1f:cf:a5:68:13:
                    37:8d:c0:80:3b:7a:8c:3c:24:61:c8:53:89:2c:c3:
                    5b:06:4c:d7:8e:32:d1:59:b2:91:40:f1:eb:16:07:
                    57:32:0a:2e:73:5e:58:28:60:6f:95:26:35:40:3c:
                    85:07:b4:9b:b6:ff:14:98:e6:4e:83:c2:1e:bf:7c:
                    7a:4f:46:74:89:db:8f:6d:2f:f7:ba:71:eb:2a:5f:
                    c7:63:47:24:25:ae:bf:af:2a:02:9f:04:c7:04:b4:
                    19:80:83:11:f0:0f:3d:8b:6c:d7:57:84:a9:66:07:
                    ba:2a:c0:c7:49:c9:11:19:28:ac:ad:2c:29:f7:42:
                    9a:85:67:27:d6:5e:37:54:c6:31:d0:f7:5f:53:c1:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:28:2F:DA:1B:BC:60:B8:64:23:62:18:93:AD:4B:40:BC:F5:BB:D8
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f3:2a:bb:9b:f1:c2:9d:60:c5:00:5c:05:29:8b:7c:14:0e:
         1d:0d:58:8f:4f:c8:56:ba:7b:f0:5d:b1:49:26:6e:66:b5:93:
         0f:ed:cb:bf:fa:26:66:6e:5c:a8:a9:b4:26:bc:57:bf:d6:fc:
         c6:c6:dc:5f:26:8f:67:7e:b4:31:74:70:85:65:5f:27:76:28:
         c9:9e:1e:ad:6a:2d:ae:aa:85:50:db:6c:38:f7:0c:e1:ed:37:
         53:08:f9:2e:db:39:5a:de:06:53:ce:94:4d:0d:8c:10:00:9c:
         de:1b:ff:e4:59:92:9b:d3:11:11:d6:47:c7:52:e0:77:9b:49:
         2b:b4:f6:76:99:32:bf:30:45:30:54:53:07:c9:71:0c:38:4a:
         7d:d1:c3:e1:82:fe:dd:ff:c3:f6:b1:f7:c7:da:d6:1b:b6:77:
         b9:de:a1:e2:b7:bc:30:46:8d:99:e4:d5:d4:1a:f9:62:dc:50:
         34:46:19:57:41:e2:db:01:98:c4:81:65:53:5e:88:12:52:b8:
         11:2b:6e:ec:ca:54:73:8e:fc:40:57:94:09:32:13:47:5b:4f:
         5e:80:c5:f5:20:ad:79:74:51:0f:19:c3:f2:5e:33:cc:63:d0:
         49:23:75:5e:04:c9:7b:d6:44:2f:cc:ce:5f:cc:24:e9:1b:21:
         e9:24:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:24 2025 by rpki-client