Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File:                     hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier:          fSPQpQ+fUWj2kUNMTyPX38ndyq+KokERFb50COkc3Mg=
Subject key identifier:   B0:4E:53:94:46:12:94:A9:77:D3:A5:23:B7:5E:41:66:E4:61:80:19
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer:       /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial:       0197458B595444D2A0C548B9812F06EEEFD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number:          157D
Signing time:             Fri 06 Jun 2025 14:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:49 +0000
Files and hashes:         1: 1-DR1I-0Q86yRegJRW48TcU9jkak.roa (hash: BbaoF4QpKICKvF2DFJvuoi1HekvHPPg57x8hdzzKsN8=)
                          2: QRsEK7Mm82AysiVwrsI0fcQwGZk.roa (hash: +14a6gbAtC3j39lO1seQMdbzRZUzjrGGX9KqhXCRQaA=)
                          3: bMolsew2aNfnwVEKpwDy2jyM58c.roa (hash: 6E9s83W/T6d5cC26/y3n1N8eAzWZSpgeiiEyiR8AjmM=)
                          4: exOJgZWKhs3CfxljzDJO3y7m_kg.roa (hash: sLEFa7RsALBhT6NfAUon7unSxy37m3yVXscXWcoyxvY=)
                          5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: Jfk6Z6W2DabRNjwQdrFZ4ubRYd3rcTDB0+HwjdWUwI4=)
                          6: nfEFUPm3YqGp7FQGkGbFir0VX4k.roa (hash: wcnZ1tdaEqbHq23LSrQJa3uBDPQRdB3Kf9OV1V7J1L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:59:54:44:d2:a0:c5:48:b9:81:2f:06:ee:ef:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
        Validity
            Not Before: Jun  6 14:00:49 2025 GMT
            Not After : Jun  7 14:00:49 2025 GMT
        Subject: CN=b04e5394461294a977d3a523b75e4166e4618019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fd:79:20:d9:39:ef:86:05:3b:f9:04:bc:79:
                    93:83:bb:73:ac:fc:0b:30:10:bd:03:e1:e9:42:76:
                    4a:62:ff:ac:5e:11:3a:da:49:4c:d2:d5:39:bc:6d:
                    85:25:dc:9b:bc:68:4b:c0:50:38:16:6c:e6:aa:60:
                    63:8f:84:4b:77:dd:3a:3c:73:47:55:46:31:04:26:
                    29:9c:d1:bf:5e:72:1b:0f:9c:5d:ce:54:7a:18:6d:
                    de:4a:73:0a:ee:96:5d:a5:75:97:d1:83:91:57:19:
                    82:a1:72:73:b1:9a:f8:df:2e:76:12:37:8d:86:de:
                    db:26:af:44:2f:85:44:14:b8:75:56:32:3f:ce:a4:
                    c9:2d:fb:aa:b5:96:c5:ca:a1:17:31:cc:1e:c3:b2:
                    45:1f:5d:44:50:41:44:54:da:ca:27:d0:05:5d:da:
                    33:10:63:4e:33:47:2a:1d:27:84:12:c6:3a:bc:bb:
                    3e:d1:1d:32:1e:6b:d5:76:ca:3e:50:d2:bb:58:e1:
                    a2:06:b3:b8:42:ce:1e:ae:b2:e0:40:eb:2b:79:14:
                    40:4b:f6:d0:b1:cf:2f:c6:af:e6:e1:66:a1:cd:37:
                    81:e3:00:1a:a3:1b:a7:cb:0b:b7:49:e1:fb:81:a5:
                    3c:ac:dc:90:45:08:14:af:67:80:fb:61:9c:d2:49:
                    d1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4E:53:94:46:12:94:A9:77:D3:A5:23:B7:5E:41:66:E4:61:80:19
            X509v3 Authority Key Identifier:
                keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:32:92:4b:ff:64:8b:aa:c2:89:6b:46:3a:35:41:70:25:24:
         7d:a5:58:4a:3f:ad:27:05:c1:1b:3c:91:c2:58:9d:71:85:d7:
         34:02:29:8e:e0:54:55:f7:60:35:0f:15:2c:62:1e:ed:40:9e:
         04:24:f9:70:2a:83:4b:72:1c:d9:e1:f6:45:bf:a7:cf:5a:cc:
         86:ef:4d:77:45:e5:3c:ec:02:1c:fa:29:b6:ce:fe:22:84:55:
         7f:67:3e:36:39:74:df:f7:3b:20:93:78:f4:80:cc:11:05:eb:
         2c:f7:8d:af:79:fb:0a:90:c9:9e:1d:cc:53:ba:ab:c5:da:9b:
         e1:ee:87:57:1e:99:16:fd:03:78:62:2e:d2:64:b3:f4:19:33:
         9f:5e:7d:99:93:71:ad:bb:46:7a:6c:61:5e:8e:0c:fd:06:d7:
         96:40:77:48:26:e3:dc:1b:61:ce:03:46:5d:88:21:1d:ed:84:
         e7:6d:52:3c:29:0e:49:95:76:f2:da:55:aa:ba:4c:0e:e1:a2:
         32:f3:0e:72:e9:fe:b2:8c:c5:ea:b4:8f:74:66:63:15:a0:d1:
         1a:40:c3:8f:33:61:e6:12:bc:70:b4:06:75:40:ec:39:d7:a1:
         37:c4:fd:86:8d:f7:38:94:16:33:f9:2c:55:f7:b4:47:14:cf:
         f3:b2:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:04 2025 by rpki-client