Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
File:                     odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft (raw, json)
Hash identifier:          rPqb9nTll58MV9aBbigYa4kUq+QBgTHCsITHqghIlXQ=
Subject key identifier:   4C:4E:0F:0F:C3:74:A2:2B:2B:EB:6D:C7:9C:10:DD:3F:F3:0E:28:28
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Certificate issuer:       /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial:       01974B8D76E0A16C3E6F2E214805FECE24C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 18:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:51 +0000
Files and hashes:         1: FGv164p9oNmasj4tz9FMT-yTJe8.roa (hash: 2RdxitfGw59b2KF3BO+RbESKDdD8hgmB641at2eVQlk=)
                          2: odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl (hash: 00LM4gugnPK9wlFKCNkKRhGdc7vak7otSZjCvkXXldQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:76:e0:a1:6c:3e:6f:2e:21:48:05:fe:ce:24:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
        Validity
            Not Before: Jun  7 18:00:51 2025 GMT
            Not After : Jun  8 18:00:51 2025 GMT
        Subject: CN=4c4e0f0fc374a22b2beb6dc79c10dd3ff30e2828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:a2:87:21:b6:cb:d9:13:f4:9f:2d:5b:dc:
                    9e:88:7f:f2:ff:1b:85:95:d5:cd:2e:cb:90:5f:04:
                    06:98:51:07:48:6e:aa:70:f6:63:f4:bf:9c:25:7b:
                    2a:61:6b:e3:4d:67:99:29:fa:cb:0a:09:a1:80:2c:
                    ac:06:3c:3e:b9:20:10:f8:2a:1f:6d:0c:a1:b0:7c:
                    20:32:4b:fb:1f:6f:52:e4:72:7f:8d:f1:a5:be:0f:
                    00:ae:19:43:9b:68:f4:d9:32:e8:e4:9e:a3:6d:37:
                    f1:4d:7c:ea:21:f2:7a:d5:81:03:6b:a3:bc:91:bf:
                    fd:7b:d0:cd:40:d9:24:90:ca:4d:54:0d:c1:fa:ea:
                    06:7a:f3:4c:f8:4b:fc:ed:b0:8a:67:e3:1d:1a:96:
                    19:94:8b:13:a2:ac:8f:e7:35:8b:a4:04:1b:d1:1c:
                    c0:20:50:71:e3:75:73:db:a0:ba:57:a7:8f:7f:d6:
                    6f:41:4d:31:48:ef:43:51:44:0e:fa:48:c3:16:0c:
                    46:45:7c:ff:20:4c:3a:f8:70:73:21:52:d5:bc:fd:
                    f4:59:99:49:ee:82:1c:9b:b0:61:6b:68:94:61:16:
                    e3:83:1a:28:5f:1a:84:cd:40:ce:46:8a:86:5a:c3:
                    d8:2b:8b:35:73:3e:95:d0:42:66:66:58:43:88:45:
                    04:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:0F:0F:C3:74:A2:2B:2B:EB:6D:C7:9C:10:DD:3F:F3:0E:28:28
            X509v3 Authority Key Identifier:
                keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1a:37:62:4b:fc:ac:c6:e2:8d:a0:da:5b:fc:de:ef:56:0c:
         03:58:5b:ee:c2:61:5e:e7:8b:09:3c:37:18:ba:57:66:2c:cf:
         4f:32:ef:1c:f6:8f:1b:58:a1:de:41:b8:ce:eb:e7:a3:2c:c6:
         45:c7:fa:98:ef:67:3c:9e:d4:a2:f2:7d:bf:44:2b:31:3a:0c:
         a4:d2:f5:e9:b7:61:d6:cc:67:34:44:1d:fb:7d:05:4f:23:9b:
         6d:28:6d:57:da:48:16:b8:6f:ac:7d:69:09:93:37:7d:f1:89:
         c8:00:c9:b0:82:2d:d8:72:a9:9f:0e:49:6c:dc:c1:63:cc:7b:
         f0:16:7f:e6:5b:d0:5f:81:52:e7:3b:9a:35:46:8a:ee:9e:ca:
         0c:ab:c5:cf:64:47:24:15:86:0b:46:42:64:fd:bc:5a:e9:7a:
         da:93:18:f0:07:24:a6:fb:c2:93:94:19:69:67:d4:ce:3e:15:
         a9:59:5a:df:3d:2d:8d:c2:a5:5e:d4:63:22:b0:60:c6:e1:75:
         db:3f:37:d3:87:a6:8f:eb:87:c8:b1:01:be:92:0c:a2:44:6d:
         9c:08:8e:ef:b7:34:08:8a:96:51:f5:c3:8a:46:43:e3:e5:8f:
         0f:33:86:14:bc:d3:69:55:9f:3a:a8:1f:a7:eb:c2:e1:dd:bd:
         2a:0d:e5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:20 2025 by rpki-client