Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
File:                     T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json)
Hash identifier:          FxEPIILLfKajRzsDBPNV0QD20tu7wRqOd1ebZ0Q63Ig=
Subject key identifier:   01:7B:FB:78:67:0E:FE:67:76:9A:5F:B1:FB:89:C9:85:9B:FF:F3:13
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Certificate issuer:       /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial:       01973DD1E534F032E4D80F2702ACC69C46F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
Manifest number:          157D
Signing time:             Thu 05 Jun 2025 02:00:55 +0000
Manifest this update:     Thu 05 Jun 2025 02:00:55 +0000
Manifest next update:     Fri 06 Jun 2025 02:00:55 +0000
Files and hashes:         1: 0t9k3VKpg5XpD7MVkMNQX_l1tfc.roa (hash: BzUj07EejYyyMT4Im9XK7eLGF3C5NwrA/MzbT6j9keY=)
                          2: 1-Z-EbEbGe8yxK4SqLWDT6Ei8Xlk.roa (hash: bPXgwf4I2BdmZ9+4bAlYkkYHbKJWbKtWdjpO/HrVdSE=)
                          3: B45XvbozhNWjXkQPI-m-mjKZzQY.roa (hash: De0OPO+1rvRKuUyNflE2BB3lX6yIPfgqlTtFfQgcSF4=)
                          4: OdvTtHevTUmaiwlyF527qNO0goI.roa (hash: gUCiyrPmcDrIhpr3CW3AI5xYss+1xZqhcT0JZQL6Dj0=)
                          5: OognzbRI52-tUVqPrupLJHIhUV4.roa (hash: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=)
                          6: SX7Fh5D5SSmhzFcwpzLVfpnGjio.roa (hash: hS1AFnLFbyQCTAlmoU4gf8KnF5G/ZsoLJZ6QNcU/zBo=)
                          7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: 9j0rqnZwpaCf4ZaEL+Isv/fsqt38ttNpV9F74ptvOSM=)
                          8: TW9ksFbGISrm8bYlqs2ozzpmjos.roa (hash: 0ziWkPMeV4t+G/bAbhTQxZYd+oOXOylZPAVdkzMUOzI=)
                          9: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (hash: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=)
                          10: psSTG0Xrqssglub7odw_Aeumxw4.roa (hash: ZT7znN26M2IQ2XLLuIQT50IETg9WXMqInwpcq6t20hA=)
                          11: yMcsDqcikj-Oh_XyHzZuU6ywJns.roa (hash: Rs9ukiIBzgtbtWyPVHVA61SngL94EX769rrYMrF5bW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3d:d1:e5:34:f0:32:e4:d8:0f:27:02:ac:c6:9c:46:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
        Validity
            Not Before: Jun  5 02:00:55 2025 GMT
            Not After : Jun  6 02:00:55 2025 GMT
        Subject: CN=017bfb78670efe67769a5fb1fb89c9859bfff313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:ed:e6:78:eb:95:f0:69:7f:3d:3d:01:21:
                    e3:09:8e:1c:21:c7:4f:c8:5a:a9:4d:6f:15:1e:15:
                    bb:56:c5:b5:ff:f6:0f:90:16:84:dc:19:89:d2:c5:
                    88:f4:22:ab:d8:b9:f9:d5:d0:b5:91:00:d2:e1:47:
                    5b:6c:97:de:a7:62:14:4d:e1:6a:5c:ff:1b:f0:30:
                    85:f7:48:30:21:ba:db:21:a8:90:b9:c1:23:d9:72:
                    cc:e6:2c:9d:a9:76:8a:c1:2d:5f:9d:a9:f7:ea:41:
                    1c:18:14:07:29:b1:4a:ab:45:69:4c:fc:50:83:4e:
                    98:91:55:ff:b3:9e:1f:6c:8b:09:1f:17:8a:0d:f0:
                    ee:b7:f2:cc:1e:9a:e2:b7:82:47:6e:f5:22:a7:86:
                    99:f6:cd:32:c8:82:df:34:4c:32:e6:e6:4c:c0:40:
                    2a:27:39:ca:8f:2c:d7:1e:17:63:e4:c7:90:3e:3e:
                    74:7c:d9:af:b5:d8:f5:2d:2e:35:31:ed:75:bc:5c:
                    a8:d4:77:6d:80:32:36:35:7f:1e:25:1b:a8:13:41:
                    d8:af:33:8e:33:a4:a7:6f:ec:c4:f3:74:94:43:20:
                    52:38:39:59:ac:e1:38:ea:ec:7b:62:1f:0f:18:80:
                    9b:9d:43:48:45:e7:84:51:cb:6c:d2:ff:1c:6e:06:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7B:FB:78:67:0E:FE:67:76:9A:5F:B1:FB:89:C9:85:9B:FF:F3:13
            X509v3 Authority Key Identifier:
                keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3f:0f:b6:90:3d:4d:d8:94:07:54:3e:d3:e7:20:84:c0:8c:
         85:58:52:56:2c:ea:aa:89:cf:33:be:73:4e:25:a6:89:16:b4:
         9f:cd:f1:4e:7d:93:7e:b4:a7:f3:6a:4c:2d:1b:47:2a:2e:d4:
         28:63:4d:d2:fb:6d:44:e7:10:fc:d5:b1:19:e5:25:8e:a9:7b:
         2a:c4:3a:fb:01:72:95:e5:b2:a4:99:af:12:42:04:15:be:eb:
         04:15:e0:fc:d8:d9:3b:f1:3b:68:af:36:02:e7:af:63:12:04:
         71:83:9a:5f:ee:09:e3:35:f3:e8:85:42:ed:ec:22:51:51:b0:
         0e:d0:ba:62:ee:da:18:ac:f2:1d:41:e1:0c:96:14:3d:36:5d:
         0d:32:28:45:6d:9e:27:36:6a:dc:ca:e7:af:a2:8a:74:1c:c6:
         09:af:70:f4:0b:c1:be:e6:8c:ec:57:50:5d:83:ed:a5:76:03:
         4d:c5:09:2f:96:b6:cb:b4:9b:a0:03:f0:7e:81:05:15:0c:b3:
         78:00:2b:23:ba:70:6d:03:70:65:eb:2d:31:16:89:01:53:22:
         93:05:2d:3c:e7:01:ca:b7:89:78:ad:02:6c:5a:fd:02:d0:87:
         b9:70:90:22:86:70:f5:d4:8c:90:08:8b:fa:27:83:35:f0:35:
         20:da:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 06:58:05 2025 by rpki-client