Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
File:                     jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json)
Hash identifier:          9+YZHk6IrIqhGdzQZrGMMIzKjm2v2CXe2MY7N7uaXI0=
Subject key identifier:   56:22:FB:B7:E4:02:85:49:47:CD:E3:09:FC:4F:DE:13:C5:F4:E6:8B
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Certificate issuer:       /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial:       01974B8D9062AC03947E70B0143D8787C924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 18:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:58 +0000
Files and hashes:         1: ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa (hash: E10KwVeqHj4J7myzFFX6atSdaz21CXH8tahheXJigm0=)
                          2: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: 05AFAr6UevzuBS/2Co+Y6gcz6KI+NdsjVm4Mkv5P4DM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:90:62:ac:03:94:7e:70:b0:14:3d:87:87:c9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
        Validity
            Not Before: Jun  7 18:00:58 2025 GMT
            Not After : Jun  8 18:00:58 2025 GMT
        Subject: CN=5622fbb7e402854947cde309fc4fde13c5f4e68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:27:98:06:e1:b8:6b:c4:99:44:90:e0:46:
                    14:6b:88:f4:88:64:cc:03:b0:72:14:53:69:36:d9:
                    41:98:d9:56:ea:68:91:21:7f:9d:cf:df:23:7e:b1:
                    6c:10:29:02:fd:f4:8f:40:ce:4b:ca:96:33:40:63:
                    17:70:c0:76:f5:fc:7c:a7:15:a9:e2:18:3e:53:eb:
                    ca:2f:5a:24:e6:b6:c4:4a:c0:0d:dd:e7:eb:69:7a:
                    4d:26:4a:8e:4a:0c:04:06:45:6e:2f:b4:e1:ba:fa:
                    c6:13:4b:d0:18:4a:97:23:db:ec:30:22:59:f3:26:
                    fb:2e:04:99:82:73:0d:bf:8c:d0:33:fd:f2:45:c0:
                    c8:fb:c1:4c:7c:22:37:0f:49:68:a9:5f:63:23:1b:
                    db:7a:2c:ea:dd:0b:7d:24:ce:ce:47:10:64:8d:10:
                    9c:b3:3c:d9:d2:5a:ee:25:48:21:d8:4b:2f:60:9f:
                    90:52:4c:44:2b:78:e6:3a:32:c3:37:f6:da:ca:f1:
                    69:58:59:2f:3c:aa:31:45:86:5d:b0:c3:f8:03:ae:
                    54:f9:dd:90:fb:10:8a:2c:46:a2:97:31:47:4e:6d:
                    15:e2:60:e1:a4:03:b8:ba:29:5f:e8:7f:e8:2e:9f:
                    c1:86:a3:53:ae:1f:73:f1:51:a2:0f:36:e4:db:51:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:22:FB:B7:E4:02:85:49:47:CD:E3:09:FC:4F:DE:13:C5:F4:E6:8B
            X509v3 Authority Key Identifier:
                keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bd:73:5f:51:33:44:27:5c:b1:5c:f2:e7:2e:ca:f2:7d:f1:
         43:ba:96:51:83:b7:3c:99:ac:2b:68:ea:af:8c:e7:1f:d7:25:
         67:bc:86:e7:39:69:9a:00:68:e1:7c:ee:5e:4b:d0:40:84:85:
         13:0b:e4:82:31:7e:3c:c2:a9:6b:8f:b2:0e:f8:a3:11:d5:b2:
         85:ad:2a:78:4b:13:13:10:ce:91:b3:29:3c:d0:55:5b:96:39:
         a3:e9:56:78:25:eb:ca:46:d3:ec:83:ee:15:9a:a9:b7:0f:5f:
         e1:24:54:8a:f6:eb:00:91:d8:83:e4:bb:12:9a:5b:a8:51:d1:
         cb:63:2e:cb:6d:99:6d:58:4c:54:91:28:6e:2f:00:51:47:e9:
         6e:29:b1:93:e6:b8:de:81:b1:2a:cd:fc:ef:70:e7:3a:97:e2:
         5d:35:be:bb:0e:c8:56:cf:2a:45:c1:ee:6e:a9:08:53:76:27:
         5d:6e:bf:ea:86:4a:ee:9e:99:56:1e:3c:7c:20:51:7a:49:1d:
         90:7a:6a:4d:d9:5c:55:01:09:80:e3:20:56:ee:49:12:dd:a4:
         8c:e2:4c:2c:d2:52:d4:77:e2:6d:c6:a8:05:23:44:a5:94:72:
         04:bf:e6:fc:98:7f:d4:f4:aa:c7:ea:44:7b:57:85:e9:93:0f:
         d2:62:57:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:06:51 2025 by rpki-client