Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File:                     xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier:          AEicDYh1NToodDRA2T7274m0SdJpquDG7FvgKt7c7J4=
Subject key identifier:   CB:88:F8:EB:8C:24:02:1E:43:1F:39:D9:F7:05:EC:D5:E5:59:9F:61
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer:       /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial:       01974B56492A031F0076F08157523E1ABB1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 17:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:35 +0000
Files and hashes:         1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=)
                          2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: x0JOe1tzv335Fz5vxtvRN4ADxXIZES0QiZQpJv7fy9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:49:2a:03:1f:00:76:f0:81:57:52:3e:1a:bb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
        Validity
            Not Before: Jun  7 17:00:35 2025 GMT
            Not After : Jun  8 17:00:35 2025 GMT
        Subject: CN=cb88f8eb8c24021e431f39d9f705ecd5e5599f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:15:41:7f:76:70:c5:f6:c8:60:b6:31:53:
                    eb:67:ee:46:8f:cd:84:ea:b2:dc:86:1e:3e:26:c6:
                    0b:ff:f5:5d:0d:29:f1:07:b5:e5:f6:28:d8:42:1e:
                    60:47:69:e4:aa:5f:22:69:f0:1d:ed:62:e4:90:99:
                    a6:f7:8b:85:04:ea:67:fc:16:25:81:e7:fa:e1:20:
                    a7:eb:50:de:b1:c5:48:bb:e8:37:d7:57:52:6b:e2:
                    47:23:0b:27:8e:5a:c0:c9:77:e5:c6:31:5b:1b:6b:
                    13:f4:33:36:e2:f8:36:7b:e9:2d:1b:3e:18:15:db:
                    c1:d3:04:68:41:93:8e:87:e3:ef:19:99:ec:e6:44:
                    f1:ea:ae:3d:e8:50:6f:5d:f3:b1:c1:ee:e8:c0:b6:
                    b0:91:d2:f1:e3:f8:f3:eb:af:10:c3:5f:dd:5d:f8:
                    80:04:5a:90:d8:3f:07:7b:55:f7:b1:af:0d:d6:3f:
                    47:41:24:66:0a:71:53:60:66:13:cc:ad:05:d4:a4:
                    44:6e:20:cb:1a:93:b1:38:25:8b:ce:b4:54:9d:47:
                    d7:b3:db:55:3e:da:43:89:e4:69:b3:06:96:6a:bd:
                    92:44:ec:8b:59:3a:f4:98:db:1f:11:56:eb:0c:5f:
                    83:a5:b6:7c:65:33:0f:2a:36:1c:bb:92:70:1d:75:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:F8:EB:8C:24:02:1E:43:1F:39:D9:F7:05:EC:D5:E5:59:9F:61
            X509v3 Authority Key Identifier:
                keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f1:aa:d9:83:16:b9:30:bb:69:6f:2b:64:f2:c9:d0:ca:79:
         69:3b:1e:1b:8e:4a:b2:db:e2:d8:40:e9:b4:5e:86:a7:cd:12:
         02:00:cf:f4:ec:f5:b3:1c:aa:52:7c:e2:cc:54:ac:f0:97:3c:
         c2:8f:40:6d:a5:e1:f2:48:a6:bb:5a:28:4f:12:e9:05:50:3e:
         61:dd:3c:3a:06:24:a8:3e:bf:68:49:ad:ad:66:77:85:9e:5a:
         4b:56:0b:1c:37:51:9e:63:d9:84:94:91:9b:23:aa:77:3b:2c:
         c5:20:36:37:4d:62:cd:56:e6:c0:3a:2d:b4:7c:73:6a:a4:6b:
         0f:16:42:b0:5c:dc:45:1a:26:0e:8a:69:86:b0:ad:a9:8e:61:
         15:28:c9:ea:8f:54:e3:b4:63:38:14:1d:4c:f3:94:43:68:c1:
         83:3e:60:c5:45:56:04:0a:98:6d:bd:49:25:e9:0d:ab:d4:bd:
         5e:3d:73:03:6e:d2:99:64:07:4a:de:db:2a:c3:9c:75:a1:15:
         79:21:d8:e7:e6:d0:fc:32:a6:6f:c6:86:f3:82:3d:af:86:20:
         1d:9c:17:1f:76:72:02:96:94:c3:35:7e:23:f9:ee:a2:63:06:
         17:32:d5:4b:31:77:42:58:d2:16:af:4a:7d:b4:93:ad:7d:91:
         67:e5:a5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:57 2025 by rpki-client