Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File:                     _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier:          WYOsvrk3LiLnKdXc29P/HXsYXJBXQgfD8mBhHRkOo50=
Subject key identifier:   08:78:4B:27:44:CD:64:02:36:52:3D:1A:1F:05:88:57:9B:95:AF:FD
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer:       /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial:       019748FA78EFA53107053F6DA2EA2A1DB644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 06:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:03 +0000
Files and hashes:         1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=)
                          2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: mtjMC1umV9CdpJvv7pEWJT8camxGPa10bY+7o2goHgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:78:ef:a5:31:07:05:3f:6d:a2:ea:2a:1d:b6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
        Validity
            Not Before: Jun  7 06:01:03 2025 GMT
            Not After : Jun  8 06:01:03 2025 GMT
        Subject: CN=08784b2744cd640236523d1a1f0588579b95affd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:9e:49:fa:18:65:39:45:4e:58:de:c1:f4:
                    4e:1a:e5:54:45:1d:21:62:07:e7:27:0c:61:6d:96:
                    8f:86:98:01:3e:16:65:b1:b8:ca:8e:71:1e:12:54:
                    fc:b3:51:19:c1:55:fb:b5:18:63:dc:5f:af:00:d8:
                    41:77:92:b2:30:44:ef:9c:6b:1b:bd:ac:b3:4f:7f:
                    e3:0f:75:86:3a:c3:b7:75:16:3e:7d:7c:b5:66:02:
                    ee:1f:51:6a:6d:09:ea:07:e7:ed:02:b6:14:23:2a:
                    95:1c:17:39:0e:cc:5d:9e:89:9a:50:38:5e:9b:71:
                    f5:d2:2c:7b:01:cd:b8:ba:5d:fd:f9:47:ce:bc:b5:
                    5d:cd:4d:27:69:98:33:98:95:f1:ae:c2:1a:1a:f9:
                    bf:83:59:0f:a0:30:6d:9d:12:33:2d:ef:36:ee:1b:
                    bb:b9:61:59:2a:62:f9:27:34:e2:fa:f9:6b:16:c6:
                    e3:a1:df:50:21:29:b6:1f:b3:f0:5f:cc:f4:26:69:
                    f5:ac:2f:42:37:3d:af:e1:0a:43:75:a6:c2:8b:68:
                    03:06:0b:46:41:42:40:e6:40:91:46:bc:0a:5d:6b:
                    2c:5e:53:7a:42:8e:45:72:25:b0:e0:af:69:14:1e:
                    d3:75:6e:02:e4:3d:f1:40:f8:87:89:b3:2a:a3:72:
                    01:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:78:4B:27:44:CD:64:02:36:52:3D:1A:1F:05:88:57:9B:95:AF:FD
            X509v3 Authority Key Identifier:
                keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:93:fb:f6:02:f5:44:e8:61:1b:37:83:8b:7f:0d:20:e9:
         43:d7:5e:db:ba:2b:77:50:bf:fb:6e:35:7d:9c:cb:5c:a1:63:
         be:61:4e:69:02:a2:dc:46:10:f9:5e:8a:81:61:f4:b6:61:ed:
         d2:69:f9:cf:ba:3c:9a:57:51:b0:9e:2e:37:06:94:b3:16:6d:
         5d:08:1c:47:12:d6:d6:37:07:c5:1f:ba:0a:c3:95:88:04:e7:
         4a:28:0c:a4:43:49:fd:ed:36:b6:74:5d:65:73:b4:89:bc:33:
         29:a6:2b:67:01:ab:94:1b:6a:6d:f4:fa:3c:f6:22:66:e5:a7:
         26:c8:80:47:b6:78:15:07:fc:51:e2:2e:22:28:ad:5e:d9:9a:
         72:ab:dd:b8:69:2a:e0:2c:79:82:10:c5:0e:63:ef:33:5a:20:
         58:e5:98:e9:2e:72:71:08:45:97:d8:78:9d:40:c6:1a:42:f1:
         67:b3:92:fd:a7:e9:ac:48:50:e0:1d:2d:56:cd:4b:5a:83:f0:
         75:b7:19:8b:45:b7:aa:60:85:c7:02:67:0d:8b:1b:1d:de:a1:
         ca:26:f6:e4:be:58:93:17:c3:86:fc:d5:ea:83:b5:bb:c2:e4:
         00:45:6b:93:5f:d0:1b:64:38:d0:85:36:30:4f:6d:7e:d5:7a:
         57:ca:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:34:11 2025 by rpki-client