Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File:                     c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier:          VC7uc5BGJUkTMo+6qf71YGNQ5pY3RwwpmDO8pJugl9o=
Subject key identifier:   DB:8F:28:F6:C0:F7:66:0F:77:B5:91:F9:74:FA:AE:AC:AE:FD:97:AC
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer:       /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial:       01974A0CF9CC209661E0C9346F1F3BF0F640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 11:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:53 +0000
Files and hashes:         1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=)
                          2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: EAmKMdes1yWCSHw6sS2eIsAZs2Uu9seuXoYvj+nuo2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:f9:cc:20:96:61:e0:c9:34:6f:1f:3b:f0:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
        Validity
            Not Before: Jun  7 11:00:53 2025 GMT
            Not After : Jun  8 11:00:53 2025 GMT
        Subject: CN=db8f28f6c0f7660f77b591f974faaeacaefd97ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:9e:8b:34:4c:33:d5:d4:f9:c6:eb:ff:66:
                    dc:56:50:16:a3:5b:d6:0b:c0:fe:c4:93:f9:ca:38:
                    65:ef:70:35:2c:ee:72:e2:01:9c:42:b4:2f:06:1a:
                    21:87:26:9c:77:ba:56:1c:35:b9:8e:76:1e:06:1a:
                    a8:e6:3a:ba:59:0a:c0:87:6c:16:57:09:53:44:b9:
                    21:65:fa:42:5b:58:f6:70:41:8c:ee:b5:57:ad:65:
                    73:34:8a:c7:e2:81:f9:c0:35:0e:08:dc:e0:42:64:
                    ff:70:4e:74:13:e9:b6:62:d7:2d:1c:6c:41:74:f3:
                    5a:36:27:0a:5d:ae:88:92:8c:f4:34:ec:ed:b7:d3:
                    2a:e5:4a:03:50:c4:b5:f3:6d:ea:69:bf:49:d2:2f:
                    91:61:30:28:b7:52:76:a0:1b:21:d8:1b:d5:2d:b4:
                    46:69:09:72:6c:24:04:fa:a7:41:c8:bd:65:ef:fc:
                    f7:2a:f4:a0:ce:89:31:37:50:3e:38:7a:66:52:84:
                    79:67:d7:28:e6:b3:c9:75:db:9f:06:df:85:6a:84:
                    7a:c0:11:42:8b:06:77:7f:d5:1d:9b:09:19:46:38:
                    29:41:e8:2b:a4:6f:56:0f:8d:1d:4d:62:bc:9d:44:
                    fd:ea:54:ea:04:28:8b:96:53:34:a7:a0:b8:26:69:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8F:28:F6:C0:F7:66:0F:77:B5:91:F9:74:FA:AE:AC:AE:FD:97:AC
            X509v3 Authority Key Identifier:
                keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c5:86:df:d5:47:b6:ab:7d:e7:1c:6d:cc:5b:dc:be:7f:a0:
         8d:cf:08:d4:d1:36:71:4f:e4:99:49:c5:7f:98:e8:ee:2d:e1:
         d3:1d:e1:a2:1f:f7:3c:be:0a:14:e6:e9:17:63:55:5f:1b:21:
         80:85:a7:e2:3f:9a:13:74:fe:a2:ff:b2:e9:6f:31:01:b2:7c:
         6a:fb:80:25:41:37:72:6e:4d:cc:f5:61:1a:ac:11:f6:79:80:
         8b:0c:6b:4c:33:9e:1b:72:0b:f7:d0:7a:85:f9:36:00:39:52:
         cb:4a:cc:99:2f:00:fc:5e:20:20:8d:18:f7:4c:df:d7:12:c4:
         1c:75:47:b8:d6:3d:01:cf:6b:b7:48:c7:e6:3d:98:7d:98:97:
         46:e5:d8:f1:77:23:2c:56:e0:9d:a0:5d:63:8e:b4:a7:9e:ff:
         cd:d2:99:4f:65:71:ab:5c:0e:38:5e:b7:77:9b:af:86:17:24:
         75:55:9a:7b:1b:06:a2:e2:57:8c:a9:c9:5d:7a:a0:b1:c5:d5:
         36:36:9d:e9:c2:7b:b5:3f:9f:66:97:c0:55:c3:3d:ea:2d:95:
         65:4e:1f:19:db:09:ba:be:af:2b:db:30:cd:22:08:f3:b0:0d:
         5f:b2:81:b0:7d:8e:2d:9e:60:ab:71:3e:65:82:9e:1c:43:6e:
         70:48:f9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:52:44 2025 by rpki-client