Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
File:                     6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft (raw, json)
Hash identifier:          KyrU36oZJhZGiIzQFygfhT9wrafmmPkv+DeSqcY1KcI=
Subject key identifier:   D8:5D:6F:A8:BF:26:3D:4C:DF:73:E5:01:F6:3E:D4:C4:38:53:BB:FE
Authority key identifier: E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13
Certificate issuer:       /CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
Certificate serial:       019748FAB5C3070693281D968AC6ED5676B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 06:01:19 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:19 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:19 +0000
Files and hashes:         1: 6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl (hash: LPJRbEkHy1f5138q/FV7QWqEp+MYvuA26GHj0zWrklo=)
                          2: tseR8GP4Fbf261yqYCNjj9fDV1M.roa (hash: fi4QggPDU2QjSa/CfYSOVM8ZVKWF4rBk1jBf4sgMqBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:b5:c3:07:06:93:28:1d:96:8a:c6:ed:56:76:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98dc5e78258e426739bd88c2d4c200aadf3bf13
        Validity
            Not Before: Jun  7 06:01:19 2025 GMT
            Not After : Jun  8 06:01:19 2025 GMT
        Subject: CN=d85d6fa8bf263d4cdf73e501f63ed4c43853bbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:47:8a:f8:a2:95:b6:87:62:d3:51:4c:78:
                    60:1e:ef:05:08:b0:21:e0:65:ae:7a:12:87:e3:ea:
                    b8:f2:ff:43:82:25:2e:a3:eb:f8:e6:68:62:be:40:
                    34:a3:63:56:ae:57:10:2e:19:92:b2:b4:e8:af:4e:
                    ef:aa:c2:a6:80:29:69:04:fe:02:59:38:fc:61:4c:
                    a4:00:d6:ef:b5:d1:21:68:c3:69:fb:0c:d7:0a:f4:
                    87:4c:23:0d:3f:62:73:56:d8:91:10:73:c3:6b:9c:
                    78:02:fe:56:5e:ef:3d:ac:e7:68:1e:1f:7f:3b:48:
                    b0:12:91:87:15:b9:80:39:11:cd:99:75:a7:02:e4:
                    c1:07:66:61:86:07:7c:e8:1c:ae:95:1a:de:fc:94:
                    c8:92:fd:92:f4:33:99:7a:ec:b4:66:67:0c:93:fa:
                    81:bb:5a:66:77:f1:bf:32:65:6d:3f:49:1a:50:4e:
                    5e:f5:0f:9d:72:a8:d4:8e:2c:1f:f4:a6:61:61:49:
                    67:33:c0:2b:aa:fe:93:40:dd:09:a0:bb:dc:08:18:
                    63:ab:10:dc:31:ff:53:43:4c:df:c5:c7:ad:6a:2e:
                    80:0f:60:1b:e3:d5:d3:fd:9d:90:f9:5c:77:f3:02:
                    8a:f4:b5:69:c2:6a:fe:c4:a3:e8:a5:8e:45:13:e9:
                    66:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5D:6F:A8:BF:26:3D:4C:DF:73:E5:01:F6:3E:D4:C4:38:53:BB:FE
            X509v3 Authority Key Identifier:
                keyid:E9:8D:C5:E7:82:58:E4:26:73:9B:D8:8C:2D:4C:20:0A:AD:F3:BF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y3F54JY5CZzm9iMLUwgCq3zvxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4d7f6e-c6df-41d7-8ffd-5089b602bfc2/1/6Y3F54JY5CZzm9iMLUwgCq3zvxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e6:19:15:60:98:74:71:c4:1f:96:13:54:20:c4:74:df:a7:
         f5:34:63:fc:e9:99:b3:9a:ef:4f:69:80:5a:f8:84:94:3f:d1:
         73:e7:8f:cb:1f:88:90:47:66:4b:02:16:12:75:db:ec:27:1f:
         49:b4:2b:cf:dc:01:a0:c1:84:f7:2f:7e:c5:1f:86:d9:30:05:
         fe:f9:05:e6:2f:08:bb:14:db:8f:1a:55:67:48:de:ea:0c:72:
         79:56:a5:cd:40:68:d2:a0:36:c2:de:38:3f:e7:32:18:2b:fd:
         30:88:28:01:fb:5d:f7:34:95:a6:6b:b6:cc:89:23:08:39:59:
         b6:38:2e:7f:b0:de:d7:4b:5d:b0:9f:fc:c4:b1:cb:2c:92:52:
         4a:ab:6c:64:29:ce:bf:a0:93:bf:69:b0:05:6a:68:78:d0:cb:
         11:8f:41:f6:83:bd:9d:83:50:e5:d0:3b:0d:30:dd:38:9a:a8:
         19:91:d1:1b:2e:a0:d8:d2:54:8a:a4:2b:dd:9b:31:e7:07:53:
         50:ef:75:52:25:f7:9c:df:e3:f0:47:83:86:f1:2e:c1:9c:4e:
         1d:36:24:a0:31:58:c3:8f:36:ad:55:ac:35:2f:d3:a1:d9:5e:
         1c:7b:b3:c3:ae:8b:36:25:17:6b:29:7c:aa:f2:b9:79:71:74:
         24:c9:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:23 2025 by rpki-client