Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File:                     unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier:          MbgaqchUFlJrSHxMC7SfN6TUc3RI9zyp+QcmIq2Q5mI=
Subject key identifier:   BD:6A:27:C2:B5:A9:68:3B:97:CB:A2:83:6A:56:02:FD:DE:1E:4D:C4
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer:       /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial:       01974CD6BF81242F51DC589A4C9C9F60E4C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 00:00:31 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:31 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:31 +0000
Files and hashes:         1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=)
                          2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: XJNTeGyxsLVTHo6JCjyFe07in74NSzTCc+dlCrSXTJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:bf:81:24:2f:51:dc:58:9a:4c:9c:9f:60:e4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
        Validity
            Not Before: Jun  8 00:00:31 2025 GMT
            Not After : Jun  9 00:00:31 2025 GMT
        Subject: CN=bd6a27c2b5a9683b97cba2836a5602fdde1e4dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:cb:a9:f7:fd:02:15:c5:73:7f:b9:df:55:
                    59:d2:99:db:e3:5f:32:58:73:7d:ba:fb:5b:cc:85:
                    48:70:a3:66:61:bd:c0:a5:a0:a2:c9:26:f9:f9:c4:
                    f3:34:5b:6b:c0:81:20:6e:b1:5a:a8:6c:15:4f:f4:
                    02:60:2a:b6:43:af:83:8f:a1:5b:b9:8c:0a:59:14:
                    d6:15:0a:94:66:44:62:ac:b4:a2:45:82:5e:65:00:
                    7d:89:38:06:63:2a:25:00:b5:91:76:e2:ca:61:cd:
                    35:ef:91:eb:2c:5f:f4:b9:09:4b:e5:1f:1a:8c:63:
                    89:20:f8:05:4f:6d:b0:79:b3:2a:d3:a9:45:c3:f2:
                    1e:bd:5d:fa:64:a0:f2:96:87:f5:e9:9c:74:c1:9c:
                    21:83:d2:fd:07:26:7b:cb:4b:0b:b4:29:05:b1:68:
                    d6:98:02:28:b2:90:31:d8:90:a4:21:48:53:f2:75:
                    69:2f:72:de:1f:e2:d8:4e:fe:49:6b:e9:2a:47:4f:
                    60:70:9c:35:f7:06:b2:6a:fc:a3:a3:43:d5:a0:94:
                    43:00:76:ae:59:ec:13:8f:58:e4:33:9c:1a:27:1f:
                    8c:41:99:74:70:58:0e:5d:05:7c:39:9a:34:a2:00:
                    94:a3:87:6f:32:00:ee:1c:a6:92:a9:1e:af:9a:3b:
                    1c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:27:C2:B5:A9:68:3B:97:CB:A2:83:6A:56:02:FD:DE:1E:4D:C4
            X509v3 Authority Key Identifier:
                keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3f:f0:65:58:6b:f6:dc:0d:a9:58:4c:7f:34:1e:1f:ef:83:
         94:eb:cf:ec:b5:35:27:24:24:98:fd:f5:87:fd:e1:87:a5:91:
         08:90:bd:db:cc:91:b4:5d:16:24:9a:5f:40:5b:9e:97:5b:4b:
         a1:53:83:b5:05:58:6b:23:fe:38:23:7d:ae:2d:30:69:77:fb:
         27:94:63:e5:ec:58:82:78:7d:46:dc:03:d2:6c:6d:68:f6:ae:
         03:f0:90:44:57:06:91:7e:03:69:12:aa:a7:2f:bb:59:56:5f:
         89:76:d3:d1:aa:25:46:68:19:72:b8:f9:83:e2:9d:cf:c1:39:
         e8:9f:28:f9:75:41:32:99:9e:ae:29:af:6e:45:e9:3a:04:e7:
         6f:91:83:8b:1b:6d:ad:df:89:ed:4f:9b:44:da:ff:6c:bd:75:
         b4:4f:30:43:6f:ed:9e:15:4b:57:0a:ea:ee:b6:a7:1f:8a:16:
         f5:2e:ac:df:7e:2c:f0:04:32:42:70:21:a7:b6:2c:bb:7e:d0:
         91:f1:6c:95:f4:39:14:f0:9d:b3:e1:29:80:9a:b7:c6:85:be:
         40:37:5c:c6:f6:30:80:cb:8e:54:1a:2d:e2:0c:2c:08:34:53:
         06:02:fe:c5:c7:db:dc:1e:92:98:a0:b4:db:73:c2:db:fd:16:
         81:fc:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:23:19 2025 by rpki-client