Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File:                     t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier:          In2Jgk0YSJbIrcrAIVojt2UTReCaBfBAJhG7dvat6GA=
Subject key identifier:   BE:38:0C:61:93:2F:DB:B8:11:18:7C:CA:41:17:3E:9D:F3:96:DA:86
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer:       /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial:       019747E7DB93FB368AA1A6EC0401D656C151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 01:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 01:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 01:01:06 +0000
Files and hashes:         1: 696z34QMsC6_vR7KEfwUSvQdpWY.roa (hash: yNhDUKimDD5hTy/VhafEDO3vPLqIP7iVfa9gPXqtn9I=)
                          2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: GevA8dZqDAYWNWkYBF8e/N43NI/53d75SbXT5FDZaFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:db:93:fb:36:8a:a1:a6:ec:04:01:d6:56:c1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
        Validity
            Not Before: Jun  7 01:01:06 2025 GMT
            Not After : Jun  8 01:01:06 2025 GMT
        Subject: CN=be380c61932fdbb811187cca41173e9df396da86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:97:42:f8:60:29:23:29:80:bf:c1:18:7d:a4:
                    1d:a0:9c:85:3a:c1:2a:6b:55:98:69:96:19:0f:b3:
                    07:3d:00:09:45:6f:b6:39:2e:29:3f:d5:ed:49:31:
                    8d:8a:5c:43:75:26:e9:00:f1:fe:86:c3:5a:c0:8c:
                    ac:60:a8:c5:84:f0:37:59:56:fe:d2:f9:3d:04:2f:
                    1e:96:54:4b:61:ce:8c:13:8b:22:d9:4f:61:ce:62:
                    ba:e7:2a:5e:e6:bb:d0:8a:9c:f2:51:0c:d6:af:b6:
                    e3:e7:81:8f:a6:71:42:81:c0:76:b7:0d:64:39:e1:
                    1f:55:b8:ed:f4:db:68:4b:dd:ff:5f:a4:e1:84:0e:
                    91:3a:5e:d8:8b:c3:51:d4:60:bc:65:e1:98:1e:36:
                    45:59:2b:c8:18:9e:bb:3c:74:e1:46:c5:7f:86:bc:
                    7d:4c:01:0d:c5:29:12:71:a8:fd:09:c8:7a:70:7d:
                    21:b8:69:db:07:d3:3a:ee:60:33:10:bb:71:76:00:
                    c8:35:83:84:2a:f1:d8:7d:c1:af:08:d7:22:a8:65:
                    c7:3c:62:04:28:12:de:d9:1d:97:ac:8c:fb:84:9b:
                    02:53:a9:3f:20:e8:c0:ec:7c:c9:05:67:b8:5b:bb:
                    43:27:84:88:cb:54:67:17:90:1f:2d:68:7a:7c:1d:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:38:0C:61:93:2F:DB:B8:11:18:7C:CA:41:17:3E:9D:F3:96:DA:86
            X509v3 Authority Key Identifier:
                keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:de:7c:aa:e9:e9:ef:04:d0:b9:98:1c:78:61:c0:3c:6c:
         20:db:31:e6:ad:a0:2c:16:2f:c8:59:99:16:3b:fd:bf:d5:85:
         85:5e:39:31:61:53:ee:8c:21:9f:a4:fb:35:51:19:20:44:bf:
         1c:88:bc:4c:72:87:64:47:fa:8b:f3:dc:09:ce:28:67:8d:c1:
         0d:e8:48:f3:f7:4c:e8:d7:f5:c6:1c:e2:52:1f:e1:ca:6c:59:
         61:f5:ea:38:c2:76:0f:18:62:4f:01:34:32:89:08:dc:9f:fa:
         fa:94:b6:ac:d5:82:e1:a2:f3:17:87:5a:8e:27:74:41:dc:ea:
         1a:bc:88:eb:4f:b5:68:cf:dd:50:21:56:f0:0f:54:dc:4d:fe:
         f1:19:6a:8b:d9:08:62:47:52:15:73:0c:37:53:6a:a4:5d:71:
         ec:56:5b:77:45:80:15:4b:90:b9:db:09:48:a6:b5:e8:c1:5d:
         f1:62:f8:77:be:e8:e8:ed:c0:1d:c6:21:22:1a:65:fb:d0:cc:
         1c:2e:2d:8c:2e:e7:3b:f2:37:70:ac:80:6a:f1:ef:58:44:99:
         f6:4c:2c:f4:f5:4f:47:e2:a2:09:63:77:ff:6f:f7:79:1c:7f:
         a2:3b:14:3c:8f:e8:2a:d0:9d:10:ea:ef:51:78:1f:89:b7:09:
         f5:90:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:04 2025 by rpki-client