Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File:                     G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier:          KdFck1niPYfWjaTGKp8kLcH4QVA0FfY3Aivud+64vJU=
Subject key identifier:   58:EB:00:77:F6:B0:DC:C9:1D:B8:42:14:6E:68:84:8C:66:C8:49:C3
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer:       /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial:       0197485558CC20D62FF7149AB0D43566E66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 03:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:42 +0000
Files and hashes:         1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: PIdcZSEKEj/KhJIneROZJVMqKH9BfxplBtdfvq/qAL8=)
                          2: xIsbgd-1jNIqLfaxvWsXTolM4hw.roa (hash: IbSWm3FdPDBzLYRsZr3IBY9SNHNxrtPl7LMS9I121XU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:58:cc:20:d6:2f:f7:14:9a:b0:d4:35:66:e6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
        Validity
            Not Before: Jun  7 03:00:42 2025 GMT
            Not After : Jun  8 03:00:42 2025 GMT
        Subject: CN=58eb0077f6b0dcc91db842146e68848c66c849c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:cd:3a:55:fb:b2:e1:12:74:2c:fb:ff:ec:
                    23:05:16:c6:bb:55:4c:78:76:e4:ed:a4:c1:e9:de:
                    10:3f:8c:2e:17:a2:5b:54:3a:8b:0e:eb:84:19:1b:
                    f2:8a:e3:52:86:b6:87:74:db:e4:50:1a:00:67:4c:
                    3a:89:16:01:26:e9:01:02:80:5d:91:6b:db:3c:02:
                    8e:8f:57:1e:58:51:8f:2d:0d:c5:41:de:0b:d4:dd:
                    f1:85:06:61:90:47:5e:d2:e2:19:c1:8d:38:71:cb:
                    89:1c:cb:98:35:4d:21:bc:c4:c6:15:6d:6f:d9:f4:
                    bc:0e:2e:83:91:49:2e:4c:64:1a:eb:02:f8:f3:03:
                    da:c4:3a:a7:9d:09:ef:1c:2a:d0:01:07:08:41:3e:
                    f8:8d:0d:ff:a9:92:a2:3c:38:6c:94:2b:91:7f:55:
                    ed:f1:76:48:da:f2:61:2f:19:db:c2:80:f9:98:aa:
                    00:29:fe:c9:bb:8a:2d:78:d0:df:45:13:6f:f8:e0:
                    c4:95:25:09:da:16:f7:8e:3f:bc:7a:15:2a:28:50:
                    28:cf:f6:36:87:05:9d:96:ce:f7:72:d7:b6:1a:44:
                    d7:32:bc:31:7f:74:8d:9e:c7:00:11:f0:79:4a:3a:
                    54:47:f7:34:ce:bb:29:ea:51:d8:8b:b8:3c:d0:5b:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:00:77:F6:B0:DC:C9:1D:B8:42:14:6E:68:84:8C:66:C8:49:C3
            X509v3 Authority Key Identifier:
                keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:da:d4:dd:65:7c:83:71:b0:da:ce:39:09:66:a4:26:bb:ff:
         87:19:be:7b:be:87:12:7a:06:cd:82:79:b5:08:c4:76:29:48:
         af:05:a3:cd:2d:64:35:5f:fa:24:31:d8:6a:ed:07:7e:a9:73:
         d1:df:6d:a1:04:80:78:26:42:de:3e:9f:b0:31:b4:29:bf:0d:
         50:b1:bc:3c:97:b0:9d:22:19:80:66:d3:8c:9c:a9:71:4d:80:
         0c:59:2b:25:8e:6d:71:5e:b2:8b:11:58:64:67:b7:f9:3a:eb:
         86:ad:46:e2:fa:24:47:bd:96:aa:b6:40:17:85:17:df:37:d4:
         56:5a:e0:81:d4:f8:66:85:f1:79:3a:36:31:ad:b1:00:fa:c8:
         fb:66:40:d1:18:f3:65:86:5d:f7:87:98:79:3f:1e:e9:a8:eb:
         e1:c3:9e:fe:4d:f4:6a:6e:66:aa:f1:2a:ce:f5:be:29:37:b5:
         a3:1f:7d:e0:3d:e1:f0:65:35:a0:b0:9a:34:0f:38:d1:bc:01:
         73:26:be:b2:a1:d3:36:97:e9:78:55:76:39:54:47:50:ad:32:
         fb:5b:2b:33:3a:2d:b9:1e:ec:40:f1:ce:a3:ed:18:5d:3d:66:
         78:1e:d3:7f:4e:aa:8c:a3:1e:14:1e:83:d6:ee:cc:12:12:e3:
         ba:1a:b8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:56 2025 by rpki-client