Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
File:                     RJsY4ylteV06nJWb4lxwqqs2UgA.mft (raw, json)
Hash identifier:          /T5QPhU4zWcZgVWV9hsjsRKW1gowMPVqQL0Ma5zr+OY=
Subject key identifier:   36:B7:AE:B0:F0:06:92:BF:00:3B:10:81:C5:7A:75:E1:52:A2:BD:E2
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Certificate issuer:       /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial:       019745F917F8E5A31DE70FE68F51B183D0EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
Manifest number:          157D
Signing time:             Fri 06 Jun 2025 16:00:41 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:41 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:41 +0000
Files and hashes:         1: J8QjZax-mkvPxfZhhHMPCwubpys.roa (hash: rmal6rcTiDBRBlMMyLquXrrXQpuz0JgUekU0ozpEKqs=)
                          2: RJsY4ylteV06nJWb4lxwqqs2UgA.crl (hash: 49o9CV72A3+oBeNL+lmmQhsUM32+GXy7yTbla0FTM/4=)
                          3: SoB8_0B4GOtYomyJQxt0uZ0Oeww.roa (hash: OQVaFQPCwhrwCF+WYF+druX/sOmGI/9eo2Z2LvF9GLs=)
                          4: leAAH4rGishsnZoufTD0XzRz9UE.roa (hash: XYLINiTCGoUfisGhej9/jS2otE2Loul2nvXuv/CwfdM=)
                          5: x0AcTRasjy0qWZOIGUnT1Kbz4uk.roa (hash: zaM3VnNG9RVFofm3T8ZoNUTLDhK3X/kEUyA6UhvyMf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f9:17:f8:e5:a3:1d:e7:0f:e6:8f:51:b1:83:d0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
        Validity
            Not Before: Jun  6 16:00:41 2025 GMT
            Not After : Jun  7 16:00:41 2025 GMT
        Subject: CN=36b7aeb0f00692bf003b1081c57a75e152a2bde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:30:d2:9c:bb:16:44:47:0c:dd:47:1d:7c:
                    f3:4b:95:32:54:5b:17:06:28:7b:37:83:e4:fd:7d:
                    7b:7d:f0:c5:1a:28:64:11:f0:1a:b5:57:ab:f4:6b:
                    2a:8e:14:ff:c1:98:f1:f2:4d:98:b3:64:da:b2:24:
                    ea:76:99:1b:f9:3c:f2:4a:6c:32:b9:6c:bf:ef:d8:
                    15:24:5e:2a:0c:fc:f3:ac:3a:e1:f9:79:f6:63:8c:
                    0d:df:cd:40:98:bf:68:6d:03:55:88:d0:80:57:8b:
                    a6:c4:25:26:0d:2b:58:eb:93:f9:99:66:3a:0c:c4:
                    a1:a5:47:da:10:83:4e:81:60:d6:e1:41:c4:7d:60:
                    62:ce:ff:bf:62:b5:64:db:aa:fe:0c:ca:af:40:f6:
                    23:46:86:49:55:bd:94:78:39:a6:8e:98:f9:22:30:
                    10:3a:b9:2a:ab:ef:5a:b6:e7:db:e2:9f:0a:9e:96:
                    59:8d:5f:59:4b:e2:ac:88:67:94:c4:a9:3b:7d:c7:
                    c8:54:19:cf:b0:e0:a0:5f:e6:d1:66:c3:bf:1a:ae:
                    0a:54:ef:64:6c:44:b0:83:da:89:aa:60:4f:8c:7d:
                    63:6a:06:2e:4a:21:44:5b:7c:ee:f1:f7:53:de:70:
                    47:35:c8:74:14:fa:93:d7:8b:a4:33:b9:24:1c:da:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B7:AE:B0:F0:06:92:BF:00:3B:10:81:C5:7A:75:E1:52:A2:BD:E2
            X509v3 Authority Key Identifier:
                keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f4:71:a3:2e:63:35:5b:63:3b:f1:b5:1a:5c:46:e1:08:8a:
         73:6d:ab:6f:eb:86:d4:c0:a2:90:37:2d:b3:65:f9:b4:e2:02:
         40:b2:e9:2f:4f:8b:96:72:d5:09:12:5a:73:fb:5f:0f:cd:14:
         74:3c:38:0d:74:eb:70:20:65:82:eb:02:72:00:b9:75:ee:ea:
         31:3f:51:d7:72:b2:81:02:23:3f:1a:89:59:43:ba:c5:31:4b:
         b4:ee:5b:44:b5:4a:ae:db:66:ea:d4:95:20:e5:63:51:77:23:
         ba:ed:86:72:51:48:5e:3f:3f:e9:7b:23:64:e9:9d:06:a8:ec:
         07:bd:1c:e1:49:7b:e1:91:bc:93:2e:bb:51:7f:3f:bf:e6:f4:
         ec:be:65:87:3d:88:b8:cf:e5:c1:43:48:6f:37:6d:07:72:b3:
         63:2d:f3:1d:a4:e6:1f:f1:88:02:6a:34:49:1d:6f:f4:ff:be:
         3e:a1:51:6b:a6:c9:22:51:7f:72:02:f4:f0:b3:8a:64:25:61:
         60:52:f8:0e:ae:35:ba:0d:ff:98:b3:f1:89:af:26:5d:fc:71:
         4c:6a:cf:7c:93:61:4d:f4:32:52:af:bc:15:42:f2:5c:fd:d3:
         94:af:40:62:7a:9b:54:39:1b:53:23:5c:1f:d5:70:bd:78:ee:
         1d:2c:93:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:18 2025 by rpki-client