Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File:                     IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier:          6umjNQsHIiN4y+bWBz8bHbvDOi5Pjbb34trQtCOxcy8=
Subject key identifier:   D5:52:68:95:77:8E:6B:20:D5:D1:FC:20:29:5A:2B:82:8B:91:E0:7D
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer:       /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial:       0197488C31736266D15EBAFF5A472BF95E01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 04:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:36 +0000
Files and hashes:         1: DjsbeUScAR9EUfRE070QFYOZXx0.roa (hash: Jj0CL6iZxJ5XW4ZpctnqFGBbj6Ygbs9fspzlTAigxwY=)
                          2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: mVHUKtBneg8jXCKTMScnKAvSQg+50cEQR11m6pOg0C8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:31:73:62:66:d1:5e:ba:ff:5a:47:2b:f9:5e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
        Validity
            Not Before: Jun  7 04:00:36 2025 GMT
            Not After : Jun  8 04:00:36 2025 GMT
        Subject: CN=d5526895778e6b20d5d1fc20295a2b828b91e07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:0c:01:41:ca:fa:12:e3:69:b9:cc:27:3f:
                    22:3f:45:93:2a:99:02:ed:25:9a:7f:67:af:57:7f:
                    48:84:95:22:29:c7:cf:f3:da:1f:4f:0a:8b:ea:64:
                    48:5b:49:02:b3:a9:9b:3b:ca:5c:53:6d:48:c4:96:
                    2c:90:fd:2f:23:70:3b:88:ee:48:a0:6e:7f:e9:ab:
                    30:22:91:1c:3a:8e:39:04:d2:c6:56:a5:eb:8d:4e:
                    ba:f8:2c:42:64:73:5c:3b:a8:80:ab:10:6e:60:e7:
                    30:8e:30:36:89:fc:9f:9f:b5:c8:e2:2c:7f:ea:da:
                    9b:71:16:d2:0d:d3:e4:c7:1b:e7:ef:16:92:21:1c:
                    5d:a5:11:e2:2f:81:e7:09:08:1b:60:c0:c0:d1:61:
                    8e:08:1b:6c:72:50:dd:fc:ae:1b:3e:8b:c5:be:da:
                    7c:10:96:91:56:8d:53:49:88:67:ee:5f:d2:48:ef:
                    0e:4a:84:31:09:e6:27:e2:d9:4b:d7:7a:96:3d:fd:
                    88:4d:7b:4f:a0:05:22:a5:57:4e:87:5b:4b:61:7a:
                    b5:e9:34:69:8b:78:be:d7:99:f1:a6:04:a5:75:7e:
                    ea:5b:27:0f:b3:43:21:93:d8:51:ad:67:86:d6:3a:
                    9d:7c:31:94:53:62:cc:ae:5b:23:7b:10:2e:ff:09:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:52:68:95:77:8E:6B:20:D5:D1:FC:20:29:5A:2B:82:8B:91:E0:7D
            X509v3 Authority Key Identifier:
                keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:48:9e:c8:0d:e7:a3:c3:7e:57:c8:b7:10:9a:ec:f6:7e:51:
         b5:55:86:79:44:0e:64:52:c7:8b:e3:35:e4:51:84:1c:1c:10:
         7d:fc:5b:70:ad:ba:df:d3:ec:31:02:f6:ef:db:91:67:1d:7e:
         aa:09:b8:24:da:a2:68:26:e8:8e:18:b4:17:07:97:e9:d9:a5:
         47:3f:91:fb:c4:62:84:45:0c:3e:49:33:57:4e:ab:da:bc:73:
         c9:ad:46:9a:4f:82:64:9d:0a:73:cf:bf:e5:97:b7:ae:54:18:
         ac:ff:01:8c:54:2b:23:20:0a:f6:26:45:dd:50:d3:76:ea:10:
         d3:14:f9:46:9c:0e:d3:d9:15:39:c4:9a:df:87:8b:a6:3a:3c:
         de:c3:73:59:cf:6d:0b:88:d9:e1:22:9c:04:71:d5:8b:00:f9:
         81:8a:25:e1:94:82:98:3f:fe:66:de:4d:b6:e0:25:51:a3:ac:
         d1:ee:1c:65:71:64:22:1f:a5:4d:52:1e:d8:1e:bf:7b:ac:27:
         f9:65:69:15:69:a7:64:c2:e1:d1:d2:9e:79:72:c4:05:2a:85:
         a7:c0:09:14:f2:d2:8d:b3:da:e9:c4:aa:67:2f:ca:12:cb:58:
         ea:9b:8f:1d:ac:6b:54:57:19:48:53:e8:8d:96:1e:ce:16:30:
         0a:e1:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:08 2025 by rpki-client