Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
File:                     kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json)
Hash identifier:          glOffeuovCwY2G92AsWDXFDcxlxmO/dHQL5NMaqzqig=
Subject key identifier:   58:60:F9:1C:CA:86:F3:0F:E5:C6:0A:64:08:3D:4D:C0:96:FA:89:56
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Certificate issuer:       /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial:       01974C691CA7E0E3660796CE06F6456A0AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 22:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:46 +0000
Files and hashes:         1: AJkLm8QLqcA4cpdlMxjyYpGgKig.roa (hash: Kdq77qB2Z4PyfWGbDab2B0pk/vx4xIRx3C/YwD+0yYQ=)
                          2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: NkZn25C+aCcTWE311UAgMMYJBVNXUwzqRzRuzzEYoMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:1c:a7:e0:e3:66:07:96:ce:06:f6:45:6a:0a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
        Validity
            Not Before: Jun  7 22:00:46 2025 GMT
            Not After : Jun  8 22:00:46 2025 GMT
        Subject: CN=5860f91cca86f30fe5c60a64083d4dc096fa8956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:69:43:1c:ac:d1:93:ac:be:85:86:23:fe:b0:
                    e5:a4:0b:32:e8:76:aa:88:3c:57:79:83:42:26:42:
                    c1:6e:97:82:66:d5:db:50:cf:32:04:b6:c1:e1:4c:
                    64:e2:fd:7f:73:f7:96:80:1f:ec:a8:5b:a2:7f:d4:
                    de:9c:79:a0:6c:ea:e0:ac:b8:fb:36:00:b2:0f:f5:
                    b8:33:56:5b:5b:4b:55:c9:8b:fa:de:e5:c5:85:42:
                    93:bb:a2:52:e1:00:92:89:b4:6e:cf:ac:fc:f7:9e:
                    3a:90:bd:5a:35:4c:ec:6c:91:4f:be:9f:c0:97:31:
                    93:b4:59:2a:a5:8e:14:b6:f3:11:6a:7e:09:41:f1:
                    6b:af:00:97:cc:1f:bf:9c:e6:6e:76:11:5f:58:ba:
                    db:1b:16:3e:28:97:53:7d:8d:83:f0:5b:00:e9:3c:
                    95:3e:86:a7:fb:cc:c1:0e:11:06:db:3b:cc:8f:01:
                    9d:6d:00:4c:21:50:e6:27:6d:9d:5b:31:93:8b:16:
                    38:7d:f3:0b:36:4b:75:cc:10:b5:45:86:1c:bb:99:
                    ff:ce:05:f0:fb:80:a3:b6:3a:87:f0:60:3c:62:79:
                    68:7f:98:ae:fa:ec:5b:ae:51:c8:c3:28:76:a6:7d:
                    ad:cf:11:85:22:48:ee:c4:b2:b7:91:f6:b4:1d:0d:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:60:F9:1C:CA:86:F3:0F:E5:C6:0A:64:08:3D:4D:C0:96:FA:89:56
            X509v3 Authority Key Identifier:
                keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:c8:13:58:c1:74:c1:91:29:c4:ed:ab:95:ab:a1:3f:8c:
         5e:d0:8c:21:6c:12:f2:6c:d6:8b:53:ea:f1:5a:8a:2c:90:07:
         26:25:cc:cb:04:db:bd:20:68:e3:70:94:90:b6:64:c9:21:a1:
         ca:6a:0d:29:95:5e:d5:38:9f:32:75:51:57:14:a4:0e:3a:cb:
         61:04:a2:55:e3:2e:0f:47:97:c7:78:21:5b:21:59:47:a0:3a:
         3d:c7:f0:75:b1:b4:e0:a0:8c:8f:38:46:e1:2a:95:6f:d8:d6:
         18:35:48:6f:1e:b4:31:3c:9f:15:c8:4e:84:94:6c:1b:8d:59:
         d2:c1:83:8d:76:d9:01:6c:ba:7c:30:08:af:f4:f0:70:db:c7:
         c8:df:19:6d:d0:32:bb:71:85:5f:61:56:e7:43:f5:1e:33:c0:
         e7:0a:db:c9:d6:e6:49:89:38:48:95:63:f7:d6:78:e3:d4:c8:
         a7:a3:e2:36:f3:56:f5:4a:fc:08:ec:73:1b:10:85:00:2b:30:
         9d:92:53:33:81:5b:5d:59:d7:ba:83:c3:1a:29:16:fe:f2:ed:
         d1:ec:c4:eb:1e:52:d3:f9:66:2c:c8:79:19:2f:66:6f:8a:00:
         49:a3:cd:68:1f:27:25:88:43:c3:00:4b:a6:44:31:c3:79:6d:
         a6:cb:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:15:09 2025 by rpki-client