Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File:                     E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier:          lmHbr8XicmXE/M3OG0Kg+MWu9a4/2XnqW4FnsRwMAeE=
Subject key identifier:   82:20:F8:DF:BF:31:C3:41:32:FD:DF:7F:5C:92:AA:DE:AA:BF:D7:0D
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer:       /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial:       01974A438DFDF1CDB472021B6CE3262018F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 12:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:30 +0000
Files and hashes:         1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: KCzaNUvrbNCJDXv1piazofXSKxhl84BgSJKqlxzmMXY=)
                          2: GRNWR16Ds5mVAEzQkJ8f4EpHdoA.roa (hash: OkjXTbnHRtbFuWzt8SkmqNTl7djjfQ2D/Z/mnZbORFo=)
                          3: iDJMZTn0ZQsbFebdZO8EqvngV-M.roa (hash: DFTmsPgWe97cJSGWeErnYcp9qELmEJE971RJTfF9FUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:8d:fd:f1:cd:b4:72:02:1b:6c:e3:26:20:18:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
        Validity
            Not Before: Jun  7 12:00:30 2025 GMT
            Not After : Jun  8 12:00:30 2025 GMT
        Subject: CN=8220f8dfbf31c34132fddf7f5c92aadeaabfd70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:89:8f:80:e2:1b:8b:93:e7:f4:ad:fa:8f:
                    6f:b6:e2:ab:24:9f:35:1b:63:75:c1:93:7a:6a:e3:
                    5c:fc:19:d9:ae:5a:03:cb:eb:a5:c1:15:6e:69:2c:
                    e3:bd:c7:9c:11:b1:15:cd:35:ed:ac:41:11:fa:c4:
                    b0:d8:50:98:d7:cc:bb:75:58:d7:f1:6f:b5:8f:d2:
                    ba:c1:9d:96:f2:2f:e5:db:b6:7e:b3:1d:6f:16:71:
                    b3:21:fe:6d:07:d8:c6:3b:d4:c3:54:17:3a:6f:4e:
                    f9:78:0a:e9:01:20:1e:ee:da:e9:1e:29:f3:04:a8:
                    b8:3f:1a:ba:9e:7d:24:1d:68:55:ef:d1:88:c4:6e:
                    cd:32:d9:b0:b9:6e:14:4e:f4:ff:3e:d2:3a:16:03:
                    c8:d2:0f:7f:33:f0:58:43:4e:67:00:53:67:3e:f1:
                    c9:90:e4:7f:fb:14:e2:38:58:7b:9e:52:dc:f5:dd:
                    b4:3b:22:8b:5d:bc:c3:00:77:cc:3e:06:90:0f:12:
                    01:dd:24:cd:34:db:28:38:22:08:24:fb:bd:2b:f4:
                    ef:91:77:84:3c:f8:e6:00:0d:a6:a3:5a:2a:a0:40:
                    99:4c:c0:e3:87:9e:05:db:6a:47:d2:2c:8a:e4:4e:
                    09:fa:a8:86:1e:c7:7a:07:ba:56:cf:7a:37:fc:9c:
                    d3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:20:F8:DF:BF:31:C3:41:32:FD:DF:7F:5C:92:AA:DE:AA:BF:D7:0D
            X509v3 Authority Key Identifier:
                keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:12:76:d5:a5:97:59:49:0f:05:82:53:c8:21:f1:55:b1:c0:
         36:84:08:d7:08:4f:33:e7:c3:1e:de:7a:80:40:e2:e6:ac:6b:
         b6:8b:30:fe:dc:97:0b:21:3c:6c:bf:5f:5b:40:c8:07:33:d9:
         34:f8:31:4b:6b:b6:06:36:07:21:07:18:c1:ee:f3:e1:26:bd:
         fa:16:37:c1:49:e7:da:8a:c0:d5:a2:93:eb:d8:a6:01:88:bb:
         61:70:34:ef:82:d6:b3:20:59:45:e6:18:c9:b5:e6:8d:1c:19:
         48:6e:b2:db:1e:61:a9:58:82:2b:3e:f6:9f:be:4b:fc:dd:58:
         c9:ba:0f:07:eb:00:37:f7:f5:6c:9f:92:fd:22:51:76:58:b3:
         bc:aa:24:f0:b3:85:d8:46:5b:a3:97:65:80:b0:1d:ba:d9:8a:
         5b:87:24:5a:95:29:78:9c:25:ea:31:6f:f3:21:0a:c9:0e:ba:
         84:4a:2c:1c:05:59:a5:3f:ee:4e:a1:bb:a6:f9:72:d5:79:54:
         87:8f:b6:ae:85:87:c3:d1:55:9c:1f:f0:39:5a:db:b1:be:fd:
         5d:5d:b5:bd:d8:0f:98:2b:36:0a:74:aa:63:fe:f4:d3:31:cb:
         6c:c3:e5:d6:c1:78:74:76:fc:2b:dd:70:24:6b:63:6b:b3:c1:
         0c:91:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:06:42 2025 by rpki-client