Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File:                     RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier:          sr13xyjPiPkAJ61woFEbyDfd26dR5U88XhQc/A00kR4=
Subject key identifier:   DB:E7:20:C4:7D:22:58:7D:66:43:73:14:11:17:BD:56:D4:6B:7B:0E
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer:       /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial:       01974779E18C27A0C23261B312DE86786935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number:          157C
Signing time:             Fri 06 Jun 2025 23:00:59 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:59 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:59 +0000
Files and hashes:         1: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: rIuNgindfCsk/vyluldiC+zYvnE+Q0cl4rsOqyn+DBE=)
                          2: W1HT74Ti-eehsN9aFk8FhX6Amk0.roa (hash: 3zzhU0Zo0DbhPnuXcPDdzKBUW4Glv+sVBLV3Zhd2+lU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:e1:8c:27:a0:c2:32:61:b3:12:de:86:78:69:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
        Validity
            Not Before: Jun  6 23:00:59 2025 GMT
            Not After : Jun  7 23:00:59 2025 GMT
        Subject: CN=dbe720c47d22587d664373141117bd56d46b7b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:74:4f:f0:30:a3:65:f5:07:84:7d:00:94:
                    31:4a:38:68:91:cf:8b:13:00:32:e2:86:70:99:a0:
                    7f:b9:34:99:95:b2:01:b0:86:fa:7f:bb:5c:f0:a0:
                    19:a0:ec:5c:ac:7b:1c:2d:1e:57:ad:73:09:43:7b:
                    6a:89:ca:75:b0:71:74:a2:37:85:e7:fd:1b:d4:d0:
                    2f:01:ab:1b:6b:f1:d5:54:dd:08:1d:a9:a1:53:36:
                    6a:c6:75:3d:3f:13:f3:51:54:c8:8b:1e:b1:8e:c6:
                    9a:92:bc:32:6e:5b:dd:ea:61:db:49:3d:25:8b:47:
                    91:cb:2a:5f:f4:71:c1:c9:cf:f8:2d:3c:73:9d:9d:
                    08:e7:95:88:b4:5c:19:57:20:76:bf:24:68:b1:c4:
                    2d:53:35:1c:ea:54:38:b5:4a:08:1e:67:eb:31:6d:
                    b1:36:31:2a:17:20:17:09:2e:b9:cd:83:e8:1e:e3:
                    cf:9c:42:94:63:c0:8e:13:64:61:02:b8:26:73:93:
                    76:88:eb:fe:96:27:b9:c9:45:f6:a9:ab:1a:b0:7f:
                    3e:a6:8a:67:63:27:e6:e5:6f:65:18:93:bb:ea:49:
                    b8:5a:cf:f0:ba:e9:eb:5c:0b:d7:02:a3:f3:83:46:
                    f7:ec:be:a2:8f:aa:42:d9:97:de:92:e6:7f:14:4a:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E7:20:C4:7D:22:58:7D:66:43:73:14:11:17:BD:56:D4:6B:7B:0E
            X509v3 Authority Key Identifier:
                keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:38:17:96:4b:51:ec:56:d7:60:5e:51:a0:d8:45:8a:d5:f0:
         63:87:78:5a:60:b8:13:62:41:35:fc:37:8f:59:c5:4d:aa:51:
         73:89:a2:f4:f8:d9:04:66:20:5a:1d:7b:1a:bf:b2:a9:01:0a:
         b9:d9:c0:87:82:bd:45:dd:97:60:a9:51:71:f3:89:d1:f0:3d:
         39:43:5a:3c:de:a6:7e:8f:a9:3d:d9:79:ff:a7:bc:fb:21:13:
         6b:e8:4b:e4:1f:62:9a:88:dd:e9:99:04:fb:f9:ff:22:42:d0:
         dc:f9:3a:79:71:17:38:94:da:d0:00:7a:3d:42:03:f4:9f:c7:
         4e:c9:74:3c:de:54:06:83:46:7d:da:87:26:57:34:d1:f1:95:
         a4:d0:fa:47:36:9a:13:f3:7b:84:8f:ef:73:eb:96:bc:90:35:
         76:43:bd:61:66:29:18:7a:77:b1:28:b6:e3:c1:0f:00:97:de:
         79:13:27:09:0b:cc:d5:6d:c1:bf:33:9d:a1:0d:83:bd:9e:a4:
         de:c9:62:88:90:e7:2e:4a:37:8a:cb:e4:a4:1e:9a:6e:ed:0e:
         87:c0:1a:78:e0:17:43:d7:0d:5b:92:59:4e:bc:03:7e:c8:e4:
         f0:0d:c3:20:66:0f:d1:9f:48:b1:e5:9b:a2:3c:e6:ce:33:c4:
         57:29:42:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:05:15 2025 by rpki-client