Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File:                     fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier:          k2d27T+mLf+xmdRrrsEbhLOoaEQLkoy9F8xmOZvm4+g=
Subject key identifier:   92:1F:5F:52:4B:0B:81:67:77:AE:C6:4A:C5:C2:F4:73:89:BE:64:CB
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer:       /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial:       0197488C00CBEA725542AA87CE953ED8A2F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 04:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:24 +0000
Files and hashes:         1: 691mCGSXoSch_5n-_pfK7VBK24U.roa (hash: Wd9PO6+/FM13l9qBnW2wnUGn1u/XUolVRvwtK5oFjWQ=)
                          2: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: khp3D42k0GeZXDhGhoVEA/U+3+OurJriWpsNuTwjqCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:00:cb:ea:72:55:42:aa:87:ce:95:3e:d8:a2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
        Validity
            Not Before: Jun  7 04:00:24 2025 GMT
            Not After : Jun  8 04:00:24 2025 GMT
        Subject: CN=921f5f524b0b816777aec64ac5c2f47389be64cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:d2:f7:d5:9b:1f:3b:39:1f:3b:c2:c4:63:
                    40:7d:bf:85:8e:b0:74:1a:83:b7:66:ab:f1:77:f3:
                    5b:68:a7:ce:51:69:74:f5:21:46:5d:b3:4a:58:ef:
                    a0:3f:b8:ea:e4:7f:8b:a2:b2:88:b7:a8:8a:58:78:
                    b7:57:1c:0d:12:b1:8e:b4:cd:61:cf:20:bd:60:c4:
                    ed:18:27:42:f3:36:1b:e6:67:bf:f8:20:e6:e3:49:
                    a8:5b:1c:34:10:ea:42:5a:13:ef:40:cb:f7:e5:4b:
                    db:32:ee:af:76:c7:b1:57:12:be:49:91:1b:4f:99:
                    e1:5b:0c:a0:bb:7a:05:ed:c7:10:25:ee:d9:67:ad:
                    86:9a:5a:2a:e0:d3:3e:12:19:41:f7:f6:89:49:3c:
                    f6:de:94:e9:ec:18:ca:99:ac:17:c4:85:61:e2:68:
                    be:69:3b:e5:a3:bd:b0:d4:42:a8:8c:73:ec:ad:57:
                    59:f5:87:00:bd:9c:ff:52:1e:8d:ff:e8:08:3c:25:
                    83:50:71:9f:cd:0a:af:a9:55:54:f3:fe:58:59:b8:
                    92:e5:0f:9b:22:34:00:fc:14:64:af:71:86:ab:5c:
                    88:ca:b3:7a:dc:9a:18:62:d1:04:44:3e:50:04:9c:
                    10:cf:6a:98:40:a4:c1:5f:f2:9d:11:a1:cb:a3:f5:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1F:5F:52:4B:0B:81:67:77:AE:C6:4A:C5:C2:F4:73:89:BE:64:CB
            X509v3 Authority Key Identifier:
                keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c7:eb:50:13:3a:4f:5d:22:06:18:96:6d:0a:00:f7:95:94:
         3e:d3:ee:a1:1c:c2:25:ef:5c:df:18:68:16:04:fc:cb:47:0d:
         aa:cb:b0:f8:42:ef:2d:6d:1b:a4:8f:f0:17:3d:a6:08:be:db:
         a3:5a:d9:f8:bc:84:7c:1e:6d:50:a4:ba:4c:e8:b6:f8:69:98:
         0a:71:36:a4:45:2b:c9:17:34:3d:c3:0d:88:3b:cf:5a:26:af:
         b6:88:9e:72:e7:a1:86:d5:9a:8e:6f:63:bb:fe:9c:b0:0a:3c:
         50:21:fb:80:c6:b4:3b:f7:16:cd:d9:f1:13:ae:0b:f2:62:40:
         0b:cd:46:27:75:e1:02:5c:e1:88:c0:0f:2a:d2:b0:06:04:c4:
         d7:ff:8f:c7:15:3a:9d:81:97:d3:e4:fa:84:08:2e:d0:db:e0:
         20:2a:d8:ee:a1:fc:5e:4f:0d:57:c7:12:32:57:ad:c4:a0:1c:
         1d:1f:a0:e1:01:e7:b3:4c:0b:de:41:a2:2f:08:6f:43:8c:5d:
         77:b1:35:dd:72:53:7a:cd:19:01:98:49:76:6a:f0:7d:3f:49:
         7b:5f:ab:fb:90:7d:89:2c:4b:e1:60:72:3e:35:29:b5:38:5e:
         63:8f:48:3f:6b:5f:d6:78:2c:d2:9b:79:dc:ad:3b:bb:5c:25:
         b6:4a:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:01 2025 by rpki-client