Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
File:                     aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json)
Hash identifier:          7K7zFNeGp8LsoEMOlr48oQkNBk7AclJApqjkxkF3UoU=
Subject key identifier:   78:51:3D:BC:FA:CC:98:04:3C:AA:39:C7:31:2C:FA:96:F0:56:65:1E
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Certificate issuer:       /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial:       019748FA1827C95C78341998927E4980FAAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 06:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:39 +0000
Files and hashes:         1: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: Tw8xiW7JIR7ZwXhDKGzK/E3QyhXq3z2KVsr+MFToCnI=)
                          2: g6TmhqoG_IADwsC-GEbQq9xKePg.roa (hash: L2BybzQCICOxY6zkJoh+UHB/hV65BYdz7sNC8RSFIvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:18:27:c9:5c:78:34:19:98:92:7e:49:80:fa:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
        Validity
            Not Before: Jun  7 06:00:39 2025 GMT
            Not After : Jun  8 06:00:39 2025 GMT
        Subject: CN=78513dbcfacc98043caa39c7312cfa96f056651e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:ca:0d:ed:b5:94:62:47:8b:d4:58:87:0e:
                    85:53:36:80:3a:13:cd:3a:56:ac:97:88:54:6a:48:
                    03:d6:17:c0:71:3f:09:a1:f9:89:ea:06:8d:79:90:
                    10:36:e9:18:4b:a3:f2:cf:c5:37:51:43:e7:ae:fa:
                    d2:34:d5:81:42:41:c0:ca:19:6f:4e:5e:16:c8:f8:
                    cb:9a:9b:b3:dc:aa:48:15:3a:bb:e2:47:96:7e:5d:
                    ff:4f:76:12:46:d7:28:0c:0b:13:8f:3d:6e:56:ba:
                    fe:4f:90:d8:5f:2b:b2:0b:06:fd:da:d2:69:82:a0:
                    a6:9a:ed:e9:3b:e0:69:3b:6b:f6:44:42:bf:28:f5:
                    1e:0b:0d:18:c8:2b:f1:de:8d:74:62:46:74:9f:58:
                    e6:27:0e:1c:41:d5:f9:58:65:bf:c3:16:63:54:21:
                    09:43:80:4f:e9:6a:f1:2a:2d:1d:01:5f:cd:2d:3f:
                    70:ff:28:38:e8:89:2d:aa:f3:c4:d3:66:6d:09:c1:
                    f6:f3:d4:19:c5:84:52:22:5b:07:1d:f6:82:4a:53:
                    0b:fb:e9:7e:33:7c:36:06:01:22:3c:2b:a7:32:a4:
                    d9:fb:35:15:30:e0:8a:80:42:f6:94:c8:03:54:2d:
                    63:cd:9e:24:32:96:c5:4b:30:13:e3:f7:53:51:c0:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:51:3D:BC:FA:CC:98:04:3C:AA:39:C7:31:2C:FA:96:F0:56:65:1E
            X509v3 Authority Key Identifier:
                keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:6e:3e:7c:3c:0f:ba:33:db:a7:ec:6a:e3:74:c9:48:08:
         2d:c1:fc:27:ec:d0:63:05:a7:14:48:e3:34:18:18:c6:1f:19:
         db:c9:67:04:4c:ac:4c:07:98:08:11:8d:e4:ba:7a:a2:74:69:
         37:3d:b2:e3:52:c8:8e:98:ad:02:3b:83:ad:09:5c:9f:11:6e:
         42:db:72:53:8d:9f:30:ee:62:5a:85:de:28:77:53:35:b8:9f:
         8d:52:c7:06:26:11:7b:8c:c9:87:e3:12:db:c0:01:13:76:92:
         21:e6:25:d3:c7:b0:98:65:48:3f:cc:71:51:f6:15:87:ab:e0:
         ad:71:6f:6e:33:a4:ea:bf:9e:ab:6b:30:9b:17:37:a6:92:88:
         69:d7:e5:bc:35:5b:7b:1a:16:34:1b:59:b3:99:a5:ae:dd:24:
         2b:b0:f8:bf:8c:78:5d:ed:95:2d:3f:98:39:98:fc:01:b0:93:
         9d:aa:03:9a:6b:ea:04:f5:45:ac:54:5d:6c:dc:dc:90:c3:25:
         40:54:47:8f:08:cd:ef:86:9b:43:56:d9:f0:06:99:0d:fa:92:
         7b:05:8f:dd:ef:a2:e2:fa:e4:20:e2:b0:61:48:85:31:b2:92:
         eb:1c:46:30:51:5c:ee:39:2f:2d:7c:c5:ea:9f:1e:38:e1:6c:
         c7:a4:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:15:05 2025 by rpki-client