Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          I5HQnAkygEATliQNUlt2sBD031EJzfe6xDO3jfCyTVo=
Subject key identifier:   22:42:91:C6:1D:84:9A:0D:7C:95:11:23:A2:0F:A4:59:48:7B:3F:21
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       01974AE8288E9896D0B353A2B4A97051721F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 15:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:18 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: S+Rlcn1HwVwzPHK75CORZgSqoiUEzwLHNOXukmBrqxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:28:8e:98:96:d0:b3:53:a2:b4:a9:70:51:72:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Jun  7 15:00:18 2025 GMT
            Not After : Jun  8 15:00:18 2025 GMT
        Subject: CN=224291c61d849a0d7c951123a20fa459487b3f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:90:48:b7:40:a1:d9:82:50:c4:8b:63:eb:
                    ac:46:90:ab:89:39:02:55:38:cc:55:3a:e0:2f:18:
                    b8:f1:28:03:0b:87:17:e2:a9:9f:12:af:46:72:ef:
                    29:91:51:2d:2f:33:ec:3a:5c:66:b7:7b:7f:ea:d4:
                    ea:cd:ef:db:2e:1c:5a:16:29:89:ff:63:5c:b4:b6:
                    7e:f4:4d:8c:15:ed:ea:fd:51:c4:e2:3f:7e:c6:96:
                    ec:82:2f:eb:f4:8d:ce:dd:a1:13:7b:67:02:a4:1a:
                    6e:8f:c2:7a:65:53:8e:06:e6:df:8b:fd:74:c5:b9:
                    52:59:12:0e:c0:f5:bd:35:8a:37:74:39:2a:04:49:
                    7b:e1:b1:63:4f:f6:2b:c4:91:bb:dd:2f:c2:86:99:
                    6e:aa:68:e7:8d:22:f2:e3:bb:cc:e4:76:03:ad:55:
                    7e:9c:0e:1e:f8:6c:90:18:96:fd:68:3a:89:b9:0f:
                    90:85:fe:33:9d:05:67:f7:16:ab:49:36:a3:7f:44:
                    a0:12:31:56:ba:72:37:b9:6b:c1:61:91:33:79:12:
                    09:22:fa:3e:1b:de:45:81:91:ac:c5:81:54:7c:86:
                    98:82:51:23:78:65:a7:5f:0b:b9:68:33:18:d6:82:
                    7b:ae:d5:5d:aa:dc:bc:46:84:21:0c:1a:e0:6c:d8:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:42:91:C6:1D:84:9A:0D:7C:95:11:23:A2:0F:A4:59:48:7B:3F:21
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:a3:0d:cd:af:0a:6d:c9:fc:e2:93:3b:0c:8f:38:5d:cb:
         06:4e:83:dc:41:2c:f3:35:6c:71:f7:21:03:37:cb:4c:1d:9c:
         a9:66:4f:cb:ad:ba:d4:dc:a7:f6:10:28:9f:55:40:d0:d9:f9:
         ef:80:ab:db:55:ed:39:85:41:23:16:50:11:25:e1:cb:b5:2a:
         39:93:42:1d:d5:2d:fa:6f:02:94:f2:20:aa:ba:d1:64:75:b7:
         d9:2d:d1:d4:f1:35:22:3b:8a:90:92:da:39:ab:41:4c:04:0b:
         17:06:8e:36:57:18:00:f6:e0:b1:9e:15:ee:f9:8c:0a:cd:0c:
         b3:99:aa:82:ca:5b:ec:aa:b3:50:bc:58:a7:31:02:38:68:b8:
         43:8a:19:11:97:69:aa:ee:f0:d3:e2:ac:a2:71:35:10:38:05:
         6e:ca:0f:f8:f3:1b:95:3a:79:e8:88:15:bb:d3:67:1d:87:93:
         57:6f:84:e8:ef:d3:8e:da:75:b1:a2:e0:5f:3f:00:af:e0:64:
         e4:dd:61:1a:9e:8a:de:94:56:53:9f:d3:9e:96:e2:6a:3a:f9:
         be:6e:af:a0:66:e6:b5:7e:e9:6a:e0:08:3a:e9:34:5e:39:b0:
         1c:e9:ad:6f:48:07:a9:f6:a5:d1:f1:57:91:33:73:e3:2c:66:
         10:46:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:03 2025 by rpki-client