Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File:                     CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier:          PoFxRhnlPNHeThREE/muT0rkFA1XM0EA9ejiXZex3QQ=
Subject key identifier:   EB:F2:E2:B0:4F:1F:27:36:0F:3F:39:74:D0:30:02:2F:BA:F5:F4:3A
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer:       /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial:       01973D9A7DBFABEC6D20702FD14C05023778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number:          157A
Signing time:             Thu 05 Jun 2025 01:00:24 +0000
Manifest this update:     Thu 05 Jun 2025 01:00:24 +0000
Manifest next update:     Fri 06 Jun 2025 01:00:24 +0000
Files and hashes:         1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: L/fYw7pOvnsXsgjkkQghPmQ6SQn86SSS6oL9uoL9sUY=)
                          2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3d:9a:7d:bf:ab:ec:6d:20:70:2f:d1:4c:05:02:37:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
        Validity
            Not Before: Jun  5 01:00:24 2025 GMT
            Not After : Jun  6 01:00:24 2025 GMT
        Subject: CN=ebf2e2b04f1f27360f3f3974d030022fbaf5f43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:69:ac:c6:1d:82:7c:1b:ea:ca:76:2b:cd:
                    b0:c8:83:4b:12:10:2b:32:41:c2:c1:ff:66:1c:5c:
                    ed:5f:45:95:93:21:90:80:51:30:ee:ff:0a:fe:dd:
                    78:cb:97:5a:4c:70:88:0c:7d:37:60:7c:45:9d:0d:
                    68:e9:b5:9b:09:e0:eb:7b:5e:2e:f7:a6:c5:1b:08:
                    96:fb:2e:79:68:1a:3b:f6:5e:dd:77:d1:ad:c7:ef:
                    57:18:f2:3a:f1:e6:10:69:95:8f:b6:3a:6c:49:0e:
                    86:28:f5:be:02:03:46:bd:6b:24:64:b2:34:73:a0:
                    f2:2f:86:44:43:3b:b2:90:60:74:ed:28:67:c0:75:
                    7a:45:25:b5:22:03:54:12:9f:a3:ff:37:19:04:84:
                    e9:bb:5d:b7:5e:d2:9b:83:5c:b8:f1:2c:d8:9f:d0:
                    c0:1f:4d:2e:43:56:14:89:37:09:7a:b8:09:f4:ba:
                    ef:a7:19:6d:77:59:54:8d:82:b5:47:a9:fb:8b:8b:
                    c8:56:f7:b4:e7:e6:24:38:c0:cf:07:69:51:dd:c6:
                    74:c1:95:a2:1c:52:71:87:dc:f4:a9:b9:d1:27:fc:
                    ba:24:d2:34:12:5b:be:69:ff:87:44:a5:ac:c7:9f:
                    4c:04:9f:a8:72:2c:bf:10:a3:c3:2a:2b:10:da:21:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F2:E2:B0:4F:1F:27:36:0F:3F:39:74:D0:30:02:2F:BA:F5:F4:3A
            X509v3 Authority Key Identifier:
                keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:29:ab:d4:c8:0e:57:52:2e:e5:5e:af:a5:20:51:13:da:0f:
         20:12:00:39:5c:43:83:12:0d:53:65:13:24:be:80:14:10:d5:
         b7:c0:bb:ab:f8:36:1d:25:d0:db:85:c9:69:24:ec:bf:b7:cc:
         b9:4b:47:85:5e:29:2d:6d:93:c8:2b:ca:9f:f7:c3:54:41:49:
         15:8d:03:b8:aa:00:94:84:1a:bb:2b:11:73:8c:06:de:af:ef:
         f9:6f:d3:44:f9:f0:76:3a:bc:3e:09:a6:e5:38:54:49:0f:89:
         de:0a:04:7f:08:25:3b:3a:83:b7:f2:7b:94:9d:0b:c6:23:64:
         b3:9d:dc:4b:04:4f:bc:b5:7c:f5:43:9c:da:4d:d7:a7:ad:a6:
         07:c4:21:d5:64:8c:11:cf:0d:30:31:d7:d3:79:67:b9:db:33:
         46:d0:61:99:fc:b5:9e:95:1a:0d:f1:3d:ac:47:97:05:66:1b:
         9e:98:1f:bb:57:c8:6b:3a:dc:96:f5:0b:ed:b7:76:d2:12:12:
         8a:71:09:86:b7:14:20:66:67:ac:bd:af:38:04:ba:58:c1:b3:
         13:93:5c:63:a8:7a:49:2c:ad:46:fb:15:de:ff:8d:62:95:66:
         70:94:a6:e3:76:0b:48:4a:22:3c:f8:86:6d:df:0b:47:6e:05:
         7c:63:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 08:11:26 2025 by rpki-client