Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File:                     1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier:          DiW5eTXG6I712dtS3ucjdJ+hTzEanCWDRh1smij+fmg=
Subject key identifier:   51:9F:91:AC:68:43:3E:51:64:7D:64:A9:EA:1C:A6:5C:8B:BA:DD:9B
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer:       /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial:       01974AE8FF0E1B2A972535B0301950903C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 15:01:12 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:12 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:12 +0000
Files and hashes:         1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: 9hV+JZaUlHuMXE4Wizwwf4D8s5P80MHGSK6c+BC/aLE=)
                          2: kM09o73dWvN-pIf-j5VVGqnFs3E.roa (hash: 1NF2t1HFyA9I2wGXRPo18jluITzSgbYTlyBY51pRw6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:ff:0e:1b:2a:97:25:35:b0:30:19:50:90:3c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
        Validity
            Not Before: Jun  7 15:01:12 2025 GMT
            Not After : Jun  8 15:01:12 2025 GMT
        Subject: CN=519f91ac68433e51647d64a9ea1ca65c8bbadd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:b9:a9:f6:6e:20:47:f6:be:66:5c:94:a7:
                    59:b3:71:27:e9:09:6b:26:1d:15:9f:07:c9:6c:ff:
                    b3:26:9e:1d:98:1f:bc:ed:1a:a7:8d:f6:c1:85:eb:
                    de:30:68:00:cb:92:fa:4e:be:d3:cd:97:e2:91:2e:
                    b4:08:07:b6:41:54:e0:a5:97:8b:8d:e8:d7:9c:4e:
                    63:cd:9f:af:f2:91:1d:02:80:46:59:88:3f:84:2f:
                    8c:d4:44:63:97:94:d3:69:95:70:94:3c:d8:9f:77:
                    64:ba:5b:bf:de:f7:41:94:7a:62:c9:6a:8a:12:ba:
                    7f:12:9e:99:55:19:7e:73:43:78:04:15:c9:10:79:
                    5d:ad:0d:93:cb:df:ed:6b:45:ab:d8:46:2c:56:6f:
                    91:bf:e6:09:fc:f6:c1:c3:ae:3c:6a:1f:10:2c:8a:
                    58:59:eb:d8:6a:ed:bd:bb:4e:6e:e6:fb:b4:f5:b0:
                    be:79:bf:dd:0d:86:6c:20:bf:60:62:99:fd:99:94:
                    ab:ac:7a:5c:15:ae:40:93:52:b3:5e:ef:2d:77:c3:
                    37:74:ef:7c:12:0d:6f:47:b6:69:f0:fd:b5:f2:37:
                    bf:da:a5:a5:76:0a:6a:81:a5:5d:00:25:c9:c4:0d:
                    b5:14:4a:d2:81:87:52:cf:c1:6c:c5:09:61:66:8d:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9F:91:AC:68:43:3E:51:64:7D:64:A9:EA:1C:A6:5C:8B:BA:DD:9B
            X509v3 Authority Key Identifier:
                keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:02:44:ca:dd:f2:88:d1:39:26:83:8d:5b:25:c4:6d:eb:01:
         96:d2:d5:7e:e6:e1:75:f3:81:d2:89:53:a3:7e:35:03:f1:08:
         31:9f:4f:45:e0:82:4c:e7:5e:fe:89:ae:5d:a5:2a:f4:3f:db:
         17:f3:e1:4c:d6:04:b5:72:15:79:7b:ef:cb:51:e6:f2:d9:c3:
         ef:88:36:ef:46:e5:c2:c3:b0:ba:3b:f9:d3:52:6b:83:bd:1c:
         97:c8:d8:f7:e3:b5:80:cc:fa:62:70:a4:cd:0d:60:84:fa:df:
         2f:b3:a1:32:18:51:2e:8c:80:88:dd:e4:e9:bc:aa:db:e2:7b:
         86:4f:a8:45:63:a4:6c:15:2d:12:23:24:cd:d8:dc:52:e7:11:
         85:ca:60:89:36:3f:4e:8b:93:28:b0:fc:b0:2f:0b:9a:3e:39:
         14:a0:29:79:b7:32:1b:ca:63:ef:ff:18:5e:4b:e6:54:2b:ab:
         b3:22:f0:bb:a5:cf:e5:3d:2a:28:75:87:86:95:0e:c8:c5:d2:
         96:4b:69:fd:b0:b6:f4:b1:33:78:39:27:b4:1e:ca:51:bc:a2:
         5b:00:ee:cf:ae:cc:6a:2b:50:00:11:53:62:b4:4e:f2:f9:a4:
         18:e3:76:71:13:da:59:99:3d:e2:1d:10:5f:5d:fa:a1:0b:5a:
         9f:93:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:10 2025 by rpki-client