Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File:                     kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier:          mxX12SFTjpmEFFiPNKbctqg+1gxc6FOVOR8SWrS3B24=
Subject key identifier:   6D:3D:CE:7C:A4:CF:4A:76:48:B8:EF:5B:23:A0:66:47:21:D0:4D:2E
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer:       /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial:       01974D7BAB27A32513068B4CAB6A34190E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 03:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:39 +0000
Files and hashes:         1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=)
                          2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: cnH71jzOdSe8dyiS+Egg8Y/2y9Y5FCNbX364h22ijVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:ab:27:a3:25:13:06:8b:4c:ab:6a:34:19:0e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
        Validity
            Not Before: Jun  8 03:00:39 2025 GMT
            Not After : Jun  9 03:00:39 2025 GMT
        Subject: CN=6d3dce7ca4cf4a7648b8ef5b23a0664721d04d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:74:b5:42:f8:84:12:fd:15:c0:31:2f:f8:
                    ac:90:4a:f6:df:44:ca:60:89:aa:3f:5a:8b:7f:44:
                    5e:18:d1:bc:c0:7d:32:3d:3b:e5:a6:05:c9:c7:87:
                    15:44:8b:cc:48:a9:37:14:74:16:e2:d3:0d:d1:2e:
                    de:74:70:1d:04:bf:6d:e8:00:36:aa:03:8d:28:e6:
                    aa:db:20:1f:63:bb:51:29:b0:a9:a2:f8:4f:3e:c1:
                    0d:2c:7e:b2:4a:f4:40:6b:fc:ee:9f:fa:41:04:4a:
                    2a:af:bf:ce:c9:07:a7:6f:9a:91:7a:af:cf:35:73:
                    19:5e:ed:d4:8a:2d:97:61:a2:3b:05:00:31:69:d8:
                    1a:71:b4:05:bc:9d:4e:e7:7b:34:9f:87:46:cb:a4:
                    c3:7a:8d:88:b5:32:06:8a:8c:c0:a6:81:dd:b4:5a:
                    8d:89:99:a2:96:62:5f:b8:d2:35:0b:ea:48:f1:cb:
                    20:6f:6f:04:a0:fb:c9:d6:c5:33:d5:a6:b4:0f:ef:
                    b2:39:61:b5:e0:89:65:27:55:0a:20:9e:f4:c8:aa:
                    60:d6:03:21:4d:99:39:f7:e0:59:cc:eb:85:9c:42:
                    6b:ca:c2:67:28:6f:a5:4d:ec:0e:56:6f:86:7f:d1:
                    88:c8:cc:06:0f:a7:ff:64:ff:8d:a1:fc:43:fc:ec:
                    5f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:CE:7C:A4:CF:4A:76:48:B8:EF:5B:23:A0:66:47:21:D0:4D:2E
            X509v3 Authority Key Identifier:
                keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9a:8a:91:77:47:d1:a9:4b:4e:40:ee:f8:56:18:3b:8e:b6:
         a8:e0:c8:79:0b:01:7d:11:2e:1a:fd:ab:1d:a4:53:9b:f8:32:
         f0:f1:82:87:74:6c:68:3f:58:fa:cf:5b:41:fe:51:55:d5:a3:
         9a:29:f1:9e:2c:88:fb:a1:b4:68:b3:c5:7d:92:e5:9e:9e:87:
         b3:3c:98:16:07:37:f8:ba:f3:e8:9e:b1:79:72:e7:18:6c:9d:
         b2:b2:5e:fc:cb:7c:9c:fe:bd:1f:df:55:57:0a:c4:dc:86:be:
         b6:0d:e5:7f:0f:09:8e:99:f4:3e:27:49:3c:e5:b4:7b:c2:89:
         17:02:76:f2:ac:5b:9e:66:e9:33:21:9a:e8:b5:c5:04:7f:cb:
         3c:09:c3:5e:22:d7:ce:53:9f:be:75:da:65:d7:0e:4d:e9:95:
         5c:05:89:9f:cb:08:56:89:63:82:d2:e3:00:2c:6c:06:b7:5a:
         15:aa:d3:b1:ec:7d:f6:24:3e:ce:af:66:66:a2:e4:8a:07:d4:
         29:5e:a8:13:e1:5a:78:d5:76:c7:09:29:fb:e0:81:fc:e6:2f:
         c7:80:d0:20:5b:c9:73:52:fc:e5:4d:c3:e9:26:d7:3e:fb:17:
         95:12:f5:b9:4c:55:8f:08:1d:f9:6a:d4:43:62:ea:79:15:ec:
         3d:53:49:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:11:47 2025 by rpki-client