Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
File:                     MpbYU2ObwBkplCk-veCYBdLWIqQ.mft (raw, json)
Hash identifier:          fwAqsZ7nDlekiEcsMKewkbx5dufiWlP8++dPxJDp2cI=
Subject key identifier:   72:83:F6:F7:E2:01:30:4B:9F:B6:87:98:C5:39:47:09:A3:46:68:D9
Authority key identifier: 32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
Certificate issuer:       /CN=3296d853639bc0192994293ebde09805d2d622a4
Certificate serial:       01974E57E23DE809D938BE0DA7F0F4964491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 07:01:11 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:11 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:11 +0000
Files and hashes:         1: MpbYU2ObwBkplCk-veCYBdLWIqQ.crl (hash: VE0PSpRhXz9siK/L5D5PCBGkB7DE9VN1Wh+L9LP6IJo=)
                          2: hTnUv0N90doM0ZMOLyyFEOW9iK0.roa (hash: YJzqmH02+AW23mfkqCHZcxj82Owa829HDO8rFi0lEGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:e2:3d:e8:09:d9:38:be:0d:a7:f0:f4:96:44:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3296d853639bc0192994293ebde09805d2d622a4
        Validity
            Not Before: Jun  8 07:01:11 2025 GMT
            Not After : Jun  9 07:01:11 2025 GMT
        Subject: CN=7283f6f7e201304b9fb68798c5394709a34668d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:fc:cf:3a:66:ef:e4:0a:20:af:6c:6e:d2:
                    b3:1d:f6:c1:8d:80:9f:05:26:8a:9f:bd:6a:78:3b:
                    1f:ad:89:0c:1c:f5:31:03:5c:29:13:24:c5:f9:86:
                    04:60:65:d5:b3:ab:96:3f:8b:97:16:b5:e6:40:b7:
                    01:1a:c4:17:51:1a:31:3a:3a:d3:01:6f:fa:8d:9a:
                    11:7f:ec:69:58:36:af:36:6e:c9:d5:32:28:b6:74:
                    a6:43:e7:81:ea:77:14:22:65:19:fa:c0:42:b0:5d:
                    c5:0e:82:61:b0:1b:27:1e:f7:25:df:bb:45:8d:35:
                    b6:9e:e1:b8:7b:66:cc:70:99:10:66:2d:6c:8e:43:
                    f8:44:3c:94:4c:cc:53:32:e0:c6:34:f6:41:83:b3:
                    4f:13:9e:39:e5:cd:01:f8:ba:ea:8e:fe:f4:d9:e5:
                    a7:14:c0:e0:16:de:45:bc:34:27:72:17:bd:95:7a:
                    db:7f:e4:74:9d:b4:68:d8:e9:b5:ea:5b:70:68:a3:
                    c7:bd:92:c8:a0:6b:88:df:e8:b2:73:74:23:31:f9:
                    23:ff:45:9c:48:1c:f2:98:77:94:f9:c2:c5:80:5a:
                    1c:f8:31:1d:97:e8:9d:bd:82:fe:d7:36:b6:ad:19:
                    54:64:00:66:6d:ca:23:d2:81:68:34:04:1e:a4:b2:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:83:F6:F7:E2:01:30:4B:9F:B6:87:98:C5:39:47:09:A3:46:68:D9
            X509v3 Authority Key Identifier:
                keyid:32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:fc:85:65:d4:8b:64:19:d1:59:d5:c2:21:37:f7:eb:95:b4:
         0a:f1:04:2c:e5:dc:2d:64:27:78:ae:ab:1d:eb:1b:74:8e:62:
         49:b3:94:fd:04:6a:2a:f8:01:dc:51:23:c4:fa:f4:34:93:29:
         13:1c:1d:0a:3b:43:fb:0c:ab:37:83:c8:a3:16:0f:cf:a4:3f:
         c1:a3:94:4a:33:3d:1d:ce:98:f9:40:f3:51:ed:00:e5:a7:37:
         27:0f:d7:3d:5a:14:c1:bf:e5:c9:2a:83:05:3e:5c:fd:12:d4:
         33:c7:9e:bc:a1:04:02:42:4b:35:81:04:11:bc:0c:bc:9c:e1:
         73:f0:4c:2f:ab:d9:2c:8e:1d:18:4c:07:44:ba:6d:dd:6a:2a:
         0c:cc:dc:02:f2:97:f6:42:98:19:66:db:68:ac:3c:2a:76:cc:
         1d:7a:6a:76:db:ef:37:dc:11:bd:86:27:84:a4:c6:a7:8b:ce:
         80:be:06:9c:42:4a:00:58:f9:20:46:d7:d4:be:2b:a2:02:32:
         85:29:48:eb:6b:96:55:92:96:05:ba:3b:71:ce:29:34:77:ce:
         ad:d5:14:53:17:ed:25:24:40:ed:f9:bb:5e:f2:db:1d:c5:9e:
         e7:89:62:02:63:50:7a:82:17:62:25:4e:db:a4:2b:56:78:48:
         6c:59:93:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:32 2025 by rpki-client