Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File:                     xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier:          uykx/HnXE32WqKuuEOtVaInOT0dFo1ElcatWWXhNuCo=
Subject key identifier:   30:FD:5B:8E:1B:8D:79:11:41:00:5A:2D:13:5F:2C:14:A3:E3:FC:3F
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer:       /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial:       019745C2483ADC87CDC1BFD2802BFE22669D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number:          157C
Signing time:             Fri 06 Jun 2025 15:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 15:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 15:00:49 +0000
Files and hashes:         1: hk7Zcb_ZvfQWRDY4fRe9DXiUweg.roa (hash: fltvYaRZ7mr1q9gGvd2bmlkOO/Gg3BH7WVe78pSz7SA=)
                          2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: jUVhdVz6vlUKYR6rweXkN48lyHzDRLQ8P7IL+24PgDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:48:3a:dc:87:cd:c1:bf:d2:80:2b:fe:22:66:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
        Validity
            Not Before: Jun  6 15:00:49 2025 GMT
            Not After : Jun  7 15:00:49 2025 GMT
        Subject: CN=30fd5b8e1b8d791141005a2d135f2c14a3e3fc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e0:d2:b9:d5:45:64:97:23:da:de:a0:fe:59:
                    3f:f3:8e:d4:48:c9:40:8b:80:07:fb:c2:ec:8e:2a:
                    98:2f:89:6f:94:d5:9c:68:df:31:05:2d:77:b8:f2:
                    9b:82:3b:5d:12:a8:7d:c2:02:ef:47:ed:f8:5c:63:
                    45:15:e8:bd:3d:60:00:37:d5:eb:4e:e7:a3:5d:f3:
                    f4:7d:a7:f0:36:5e:e5:df:e3:e6:e2:39:19:0a:22:
                    4c:c5:6b:d4:30:7c:74:5e:3c:b4:eb:32:78:ab:69:
                    2e:4f:18:44:c3:20:c5:65:4a:a6:b8:d4:02:64:bf:
                    31:f4:5b:b2:38:27:7c:54:06:1d:7d:5c:9e:84:d4:
                    ef:6d:08:7f:a4:21:19:30:d3:d6:71:a0:a5:37:22:
                    a2:2a:ab:4a:80:bc:71:9c:f1:1e:8a:f0:d8:0c:ae:
                    81:92:05:ad:b5:7c:5e:3a:98:16:8d:9e:a0:5e:84:
                    87:d3:cc:52:61:65:7f:d1:b7:02:55:e5:31:fd:94:
                    76:eb:9e:60:6b:34:d9:8f:42:5b:fa:b4:13:51:95:
                    83:8d:5a:60:f3:1a:ce:f5:97:2d:60:66:14:d1:da:
                    8d:c4:fd:19:2e:a0:07:35:6a:79:11:d9:3e:df:f5:
                    e3:77:4b:bb:81:15:31:90:ee:07:7c:63:06:e5:2b:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FD:5B:8E:1B:8D:79:11:41:00:5A:2D:13:5F:2C:14:A3:E3:FC:3F
            X509v3 Authority Key Identifier:
                keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:76:21:05:0c:16:29:00:ee:e9:5f:41:29:34:ad:9e:0b:b9:
         f7:5e:3f:5c:bf:97:f9:cc:5d:18:5e:aa:c2:ca:fa:21:ad:5d:
         18:d0:f9:db:c4:6c:8a:6b:94:2a:bd:ff:15:6c:71:ae:65:b8:
         c8:4f:24:b6:9b:4d:50:72:07:1b:34:af:23:11:cc:4c:5e:30:
         c2:85:e9:c6:9a:a1:5a:73:77:fd:ef:4a:cc:92:30:0c:4d:e6:
         38:85:5e:26:16:09:68:bb:d4:25:8a:d0:94:bd:94:2f:a2:f5:
         95:d3:89:16:cc:68:d5:98:39:85:59:0d:ac:8b:cd:24:af:48:
         23:5f:07:07:ae:42:db:03:e5:50:8e:ca:d5:da:9b:74:b2:c8:
         3f:e8:a0:6f:84:cd:f3:7d:95:4e:1f:a5:09:e2:4f:48:1e:e1:
         9d:a9:2a:13:bb:75:a2:99:ba:37:cf:08:7a:85:0b:38:e0:63:
         91:b1:13:47:1d:71:50:91:f8:4c:86:fd:cf:4c:b1:5d:37:2e:
         f3:dc:55:4e:3e:45:bc:19:65:b9:cf:d2:86:27:e0:25:ff:11:
         43:f2:4e:3b:7f:1a:08:7e:86:d1:89:71:98:91:28:af:9e:4f:
         0d:46:2d:79:e6:f8:c4:81:86:92:c6:6e:3a:a7:16:aa:26:ca:
         0a:d1:e7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:10 2025 by rpki-client