Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File:                     YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier:          yd/2nTZB8WIXVr1HBFj/ZrM1bstspkNaea1naItgF/g=
Subject key identifier:   9F:27:51:96:3A:AA:6C:0A:29:B6:9A:92:AB:32:CD:F3:DF:86:4B:00
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer:       /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial:       019747E725BA0A7492FB23DFEF5C5731A031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 01:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:20 +0000
Files and hashes:         1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: RI9grSc/09dssegK21GPi6YZQBia6deXYorTW2fxJQ0=)
                          2: i1y7TAu4eZuINLnbMHWhraWkV7Q.roa (hash: 5W2nC+zCGbvk80Gay8OtFwwtbb47Ru26+BBu/lW2iZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:25:ba:0a:74:92:fb:23:df:ef:5c:57:31:a0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
        Validity
            Not Before: Jun  7 01:00:20 2025 GMT
            Not After : Jun  8 01:00:20 2025 GMT
        Subject: CN=9f2751963aaa6c0a29b69a92ab32cdf3df864b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:ff:e7:01:97:07:f1:86:38:ba:e5:0d:a0:
                    cd:34:a4:c8:c8:1a:f2:eb:d1:e8:eb:88:12:3f:3e:
                    4a:c1:d7:8a:3a:f5:97:0c:e8:da:45:1e:24:41:f8:
                    90:47:ed:11:d2:68:d0:07:18:5f:90:00:3f:2a:f7:
                    0d:60:ad:fa:bc:08:a9:7c:8e:54:a4:7f:a0:f0:d4:
                    68:fe:2e:1c:89:dd:37:c6:9d:62:80:ff:4f:aa:51:
                    c0:0c:5e:b2:39:91:c1:62:1f:9d:0d:cf:79:30:83:
                    5b:0a:7d:0a:ac:e7:4c:32:85:31:12:90:5b:3e:2e:
                    82:0e:49:bb:02:7e:60:8b:6d:27:77:3f:ee:c0:a8:
                    39:ee:e9:c8:ec:e1:66:3f:61:a0:63:95:54:0c:41:
                    fd:98:3f:b4:7b:7d:d6:97:b1:68:d7:62:67:9b:27:
                    ec:0a:cd:9c:00:c4:07:79:97:e2:25:d4:f4:49:ef:
                    ef:c3:3e:7f:4e:d9:eb:39:60:93:6a:68:72:42:77:
                    09:59:e7:c9:56:a2:ad:fb:cb:38:12:1a:26:e4:1d:
                    d3:2e:c7:6f:a6:45:f8:c9:db:2e:dc:de:f2:82:9d:
                    b5:04:df:06:5b:db:70:11:4e:47:96:b8:72:4a:d2:
                    d8:aa:56:b7:0a:93:4c:17:49:74:89:f2:b1:a2:2b:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:27:51:96:3A:AA:6C:0A:29:B6:9A:92:AB:32:CD:F3:DF:86:4B:00
            X509v3 Authority Key Identifier:
                keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:db:49:8a:16:fc:8a:40:74:35:75:ee:57:9a:47:3f:c9:a5:
         cc:ef:d9:a2:d1:08:1a:5e:b9:e3:1b:b8:83:a7:b8:90:d6:69:
         f3:66:4a:a7:ba:c8:0e:95:ed:f0:9a:3b:3c:f6:84:2d:4c:fc:
         3d:98:95:91:2d:6a:ae:e2:fc:6a:c8:70:4f:4b:93:68:ef:18:
         8f:f2:f5:97:14:1d:e2:d8:e4:1b:0c:6b:7a:f2:6c:cc:39:ed:
         c0:4a:77:60:e0:06:7a:d6:55:51:57:56:9c:f4:6c:37:06:c7:
         3d:e0:24:2c:2f:64:83:4c:80:a9:4e:df:84:ac:4a:81:b6:ab:
         ed:4f:29:b4:ad:30:ae:ce:4d:ba:3c:d7:9d:2e:e6:f1:b3:dc:
         5c:47:32:aa:fd:f5:1a:3b:e8:98:2d:ad:51:66:3d:a0:30:7d:
         7f:5d:57:e6:7a:8c:ff:90:bb:8f:77:88:ea:ac:18:ff:fd:04:
         75:2c:37:d9:f2:96:1a:92:ee:c2:b7:c3:4d:51:ec:ae:e9:e2:
         33:1e:e4:e7:bb:0e:2a:6d:af:33:c8:2b:61:b0:73:91:a0:7e:
         5c:57:d2:c3:64:fe:df:81:cd:46:62:cb:6b:33:5e:ad:60:1b:
         2d:75:a3:24:a7:d8:ee:b9:3c:b8:53:6d:77:dc:21:9b:c8:37:
         9b:40:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:49 2025 by rpki-client