Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
File:                     5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft (raw, json)
Hash identifier:          q93cjS0ggmAaEaTtpX5PF9qeQBbnTvq/ecLx17NvZtE=
Subject key identifier:   97:67:59:E0:EB:76:05:FB:EA:CF:4E:6D:58:33:97:00:75:4A:54:5D
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       0196C683662B069C7B4BD0344391E671A7AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
Manifest number:          157C
Signing time:             Mon 12 May 2025 22:00:22 +0000
Manifest this update:     Mon 12 May 2025 22:00:22 +0000
Manifest next update:     Tue 13 May 2025 22:00:22 +0000
Files and hashes:         1: 3KkVFS5E_0OXY2I0JPm831xlJRY.roa (hash: O3hSmLSCj4vhYoS62smX0V+VSwAD/D1TNqXoWq8n6pI=)
                          2: 5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl (hash: 6PhRuICjTm8xkO5PrR68fDpPgZkOBCN0LHMbaxTyjKs=)
                          3: YYYjBm1cHK07qbUZvnPjiWS8SJc.roa (hash: MDsHneIlPDU9EFijEVHpgaP4TeikhndTgWyCvxSYX5M=)
                          4: ZLyEHguTDj7_eAwLYTv1l-ESnW8.roa (hash: kfxLXEBdhl8n9+7tXLKP0Rx1fp10fHwf5ZErtSpKDqE=)
                          5: np5ApzvF3lA5ni3WwjjgrcdZ2Tk.roa (hash: jhCq+3Rux2qXuCc1aEm0+2wjAzlzRIc5exfEKvJ2iL8=)
                          6: sJLQX0xj_JXH1h41N6UVjiWKBII.roa (hash: +Hmj+iesuGr60ujxMyJDlZF5PIcV2l7P1ugWqsp11rI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:66:2b:06:9c:7b:4b:d0:34:43:91:e6:71:a7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: May 12 22:00:22 2025 GMT
            Not After : May 13 22:00:22 2025 GMT
        Subject: CN=976759e0eb7605fbeacf4e6d58339700754a545d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:27:de:55:8b:b4:d3:9e:a4:5f:fc:fc:65:
                    5b:06:55:36:83:bd:9a:1e:02:2e:8c:a1:fa:d0:10:
                    9b:68:5e:c4:e6:c5:28:6c:32:c4:ed:29:84:60:b2:
                    90:ec:bc:ba:91:25:59:e2:5d:5a:58:50:ad:4b:4b:
                    30:b2:6a:e6:90:2e:a9:41:03:e9:ce:19:da:41:46:
                    4b:33:16:77:a2:7a:70:5e:7b:76:7b:1b:95:5a:45:
                    7c:4c:fd:4e:e1:21:1f:c4:6d:42:bb:30:90:8d:ff:
                    4b:b8:93:90:b3:da:db:6f:5a:a7:c3:61:f5:f6:a3:
                    59:40:3d:d5:68:53:33:87:6f:e8:ee:89:aa:21:9e:
                    3e:d6:9e:4a:be:06:00:7e:f0:29:f0:87:72:b5:0b:
                    56:75:e2:94:24:94:2a:62:12:da:7d:9f:57:84:32:
                    d0:f9:88:01:11:7e:d6:2c:33:9f:64:06:cb:b7:22:
                    37:8e:fd:8b:5a:26:60:2e:44:d7:26:0a:b3:74:a1:
                    9f:37:65:1c:5f:ef:87:93:3b:e3:a3:37:69:b4:3b:
                    d1:ec:eb:22:c5:4e:ac:e8:df:33:f7:13:ee:d1:14:
                    6a:8b:d0:cd:02:ec:50:5d:40:70:20:3c:eb:05:72:
                    28:a0:a6:3c:36:8a:4e:d7:e6:1f:cc:82:42:54:90:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:67:59:E0:EB:76:05:FB:EA:CF:4E:6D:58:33:97:00:75:4A:54:5D
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:68:f7:9c:f0:89:30:61:b3:3a:53:66:d2:34:5c:2b:33:e9:
         b8:35:88:fb:80:8d:5c:b6:b3:b2:10:63:79:0b:fa:ca:11:64:
         cb:73:5e:0c:b5:d4:9b:88:4c:14:7b:7d:38:1f:55:51:47:02:
         14:df:67:1f:01:b5:93:69:9d:cf:49:42:ef:94:b7:81:c5:c8:
         5a:95:ac:f4:9d:1d:0f:6a:88:f1:c2:df:41:26:53:ee:c0:d7:
         60:c8:41:e9:46:a0:35:40:65:63:89:c7:a7:e7:0e:02:d6:5f:
         3d:77:37:74:74:b8:ee:92:60:eb:7e:d7:39:af:0c:29:46:1c:
         81:64:6b:bc:23:fd:d4:6b:16:59:f0:de:07:7c:b3:f6:ba:37:
         b3:c0:a9:bd:c8:45:45:cd:52:50:45:ea:17:87:df:79:23:0a:
         00:bf:4e:ad:2a:d9:70:00:bb:d6:00:59:36:69:45:37:3d:1a:
         b4:e3:d7:f6:26:ad:07:c1:c4:ff:8a:a2:52:28:a9:9f:78:1b:
         8f:9e:7f:71:66:32:3c:ad:93:6d:e5:8b:9d:b2:c1:02:96:9c:
         fd:a3:f1:1c:07:41:58:a0:71:17:4f:de:f6:66:fa:cc:5a:7f:
         d2:31:f2:aa:33:42:a6:44:41:de:f1:e5:f3:cf:66:df:e1:d4:
         96:1a:d0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:30:42 2025 by rpki-client