Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File:                     skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier:          Wxbq478dznagUasKvsbA6ZILCd2mnuM1n190dVS3+0M=
Subject key identifier:   17:E3:7E:FD:EF:C7:95:40:D0:7B:05:D9:D7:F3:48:D3:8A:DC:0E:4D
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer:       /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial:       019748FA80B233629A2DC52F1E581F56489B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 06:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:05 +0000
Files and hashes:         1: omiVo8lJOxBO3d2eFDOX09spiwY.roa (hash: 3VKQ20p2zglj9J79jWC9kZRYgl/DejI2kMckcoXVkGA=)
                          2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: exoZrsKfqdc4Y84DX6wwyjNLR2xDbNG38aZPremunLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:80:b2:33:62:9a:2d:c5:2f:1e:58:1f:56:48:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
        Validity
            Not Before: Jun  7 06:01:05 2025 GMT
            Not After : Jun  8 06:01:05 2025 GMT
        Subject: CN=17e37efdefc79540d07b05d9d7f348d38adc0e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:3c:6f:0f:84:a0:bc:03:52:5e:77:f1:43:
                    97:5d:aa:e9:4c:80:10:52:07:6e:e3:56:e1:d6:b2:
                    f9:69:4d:b5:bd:e0:ae:99:34:20:be:42:1c:1f:58:
                    bc:98:8e:86:78:e8:47:cd:ce:a9:ce:e9:b3:33:98:
                    da:87:f3:1f:2f:80:6c:63:3c:be:1b:2d:ea:73:9c:
                    ce:26:3a:c3:53:87:bc:6c:87:23:a5:7e:87:aa:eb:
                    2b:34:65:29:05:e4:54:4e:2a:90:a2:90:52:1c:fb:
                    6c:d4:8a:23:36:cd:3f:21:09:5d:c0:b5:9f:d2:2b:
                    50:64:44:b0:ac:ac:7d:7d:c5:34:ef:30:f1:90:47:
                    43:7d:e1:df:94:b2:de:d9:73:73:73:32:08:eb:16:
                    54:a3:cd:2e:4c:ad:9c:0f:ac:d1:09:07:3e:1f:5a:
                    13:dd:f4:3b:32:80:e3:6f:2b:88:59:e4:05:e6:f8:
                    66:af:c0:fc:d8:ff:c6:94:bb:70:ac:03:44:10:40:
                    e6:1b:ca:7f:af:2d:fc:b1:b3:c0:a6:d1:ef:7b:72:
                    0f:71:51:c2:5e:64:98:27:1b:42:19:27:bb:fa:16:
                    ac:97:cb:73:c5:6f:aa:ea:4e:99:34:7b:06:20:98:
                    f6:55:b2:f4:71:9d:b8:bc:c2:8f:48:c2:b4:67:7f:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E3:7E:FD:EF:C7:95:40:D0:7B:05:D9:D7:F3:48:D3:8A:DC:0E:4D
            X509v3 Authority Key Identifier:
                keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:5a:54:d1:40:98:a0:07:20:89:28:cd:14:e7:79:69:3c:8c:
         ee:54:0d:84:56:b0:64:8c:87:2f:7e:15:65:46:a4:7a:a6:89:
         56:7e:23:9e:35:e9:79:1a:b9:ee:c4:2c:1f:55:51:f9:e4:c0:
         71:4d:1b:13:78:eb:0c:b1:b5:3f:44:c6:0e:82:ac:58:90:3d:
         9c:90:97:5f:b9:0f:34:1c:82:ec:0f:1e:af:8b:ab:61:07:10:
         bd:a5:04:41:11:7e:08:a3:48:e0:e7:de:0e:d2:7b:08:e8:93:
         05:7a:79:9b:f3:98:b6:a4:90:23:3e:ed:1b:f4:37:ac:4e:df:
         31:01:ea:99:b1:90:fb:25:bf:65:df:e1:b8:a5:b3:8a:dd:e1:
         e9:49:84:17:82:04:11:85:3b:a0:f1:9c:93:3c:88:0c:33:8a:
         7f:7a:88:1c:c5:55:1f:6a:5d:c4:40:5d:1f:20:f3:11:8e:28:
         a9:a1:d1:a1:e3:b6:ba:4a:b5:cf:bf:d5:c0:23:9b:16:39:fb:
         77:dd:76:74:8c:4f:bf:df:2e:c1:5c:11:d1:34:b7:d6:3e:17:
         a0:8b:8f:d6:27:96:15:67:b0:16:03:e6:76:ac:de:96:eb:cc:
         2c:e9:61:19:ca:e8:9d:61:a8:46:3d:a2:f6:2d:cc:b3:20:17:
         7d:13:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:34:30 2025 by rpki-client