Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File:                     06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier:          UXMxtZv+m8k2z7N20PYnGwfGZRUiH9OZr1XbG1YFGS0=
Subject key identifier:   FC:C7:E9:2A:68:EC:2D:58:8E:38:61:3A:03:D1:C6:0D:2E:4F:93:B6
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer:       /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial:       0197485531E683C650E717D3F4636E2AFEC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number:          157A
Signing time:             Sat 07 Jun 2025 03:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:32 +0000
Files and hashes:         1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: qAqbPOgwMZbiXPelj/Ek+AwpmyhT0M2Cwy9DjjqoiyY=)
                          2: ruzowO5hkwvsrCMVqncyR6RC2cM.roa (hash: 3UI+kEeYIksu5ENYxWY/kKHH2Zgvkj1CId+2uWMcQI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:31:e6:83:c6:50:e7:17:d3:f4:63:6e:2a:fe:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
        Validity
            Not Before: Jun  7 03:00:32 2025 GMT
            Not After : Jun  8 03:00:32 2025 GMT
        Subject: CN=fcc7e92a68ec2d588e38613a03d1c60d2e4f93b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:36:0c:54:15:1c:9c:d7:9f:54:93:c9:b8:cb:
                    95:9b:0e:a6:92:5a:e9:a7:9b:6a:a8:5e:b4:73:93:
                    71:2e:49:1d:37:98:45:ca:6c:30:d9:01:f0:14:19:
                    d9:4c:96:d9:28:69:dd:0e:e7:4c:f1:1c:4a:8b:a5:
                    79:be:d0:bb:05:ae:14:70:19:6c:2c:9b:11:19:85:
                    31:34:dd:a6:8b:9c:8a:23:ca:80:48:d1:c0:5e:40:
                    9f:b3:5d:28:fc:36:8b:f8:91:90:15:ad:da:59:20:
                    ed:42:f8:73:a6:07:77:78:45:f8:46:de:fb:1c:cc:
                    52:11:2a:1f:b0:40:3e:31:32:c8:1f:1a:d1:54:36:
                    34:9a:cc:dc:1e:17:91:89:a8:07:43:1b:ca:20:27:
                    cd:ab:4a:7b:66:1b:3a:2f:97:84:7c:ef:be:a6:65:
                    23:58:81:f9:35:20:d4:35:11:92:a0:25:ec:ab:b0:
                    c5:d2:c9:e9:78:ac:99:98:a6:63:70:e1:2d:44:8c:
                    7f:96:16:c4:20:04:cb:c8:c2:d2:4e:b5:db:d9:b2:
                    18:7a:88:7d:bf:c6:b3:24:9c:b9:11:ba:ae:9d:fa:
                    0b:6e:11:e5:f7:ba:1f:b4:1c:88:89:60:28:92:4d:
                    2d:1c:6d:ce:5d:e0:f0:7c:4b:b7:84:ad:b2:4b:fa:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C7:E9:2A:68:EC:2D:58:8E:38:61:3A:03:D1:C6:0D:2E:4F:93:B6
            X509v3 Authority Key Identifier:
                keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:56:a5:45:f7:84:f3:10:3d:5f:29:77:20:19:a8:0a:27:47:
         ca:98:ea:96:ba:0b:d9:92:17:bc:6c:85:e2:12:71:af:c2:b5:
         95:a3:4d:e8:91:e4:10:3f:ed:77:10:81:4f:ef:a2:c7:5c:af:
         46:5c:e2:62:60:50:28:03:1a:7e:bf:47:cb:e3:20:e6:84:da:
         d8:d3:51:79:d8:78:4e:e2:8f:02:65:e5:14:3d:d7:1b:6d:f4:
         b6:9c:e9:40:16:cc:f0:51:f5:3e:78:68:2a:f7:85:e7:12:6d:
         e3:30:b4:b6:ab:35:cc:b4:da:43:16:46:a0:60:89:69:b4:96:
         6c:5a:2d:2a:d3:86:9f:80:0c:d9:4a:a7:73:1e:27:81:8b:f5:
         af:e0:ac:91:40:09:72:e0:ab:ec:0a:b4:ae:2b:62:57:da:0f:
         96:fa:e4:94:91:92:9d:c7:89:26:2e:8d:38:e2:3d:04:39:a8:
         d8:9c:5f:d6:e1:60:13:f0:17:26:e3:1e:e1:e2:3a:f3:22:c0:
         5c:2e:12:ac:0b:de:fc:47:35:b6:3f:bf:29:6d:db:00:68:27:
         bb:02:7e:e0:18:53:b8:f8:27:7a:db:82:ab:6c:f2:94:fd:f4:
         c7:c7:57:5b:47:35:a4:95:b4:98:86:8b:f7:bc:7d:15:13:76:
         59:81:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:58 2025 by rpki-client