Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File:                     quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier:          j2RZrgTQSOMOv1Nvsd9kd0tHQYKMsIP4hMHK/yLEFUk=
Subject key identifier:   13:14:84:4C:F3:85:44:F6:25:53:64:28:D9:55:31:04:DC:8C:F1:9A
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer:       /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial:       0197684DE43397324BC5566A3518DFCE8CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number:          158F
Signing time:             Fri 13 Jun 2025 08:00:24 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:24 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:24 +0000
Files and hashes:         1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
                          2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: dafBKaURglscdRida+ilO1345zZSuTwPhowRnaLbnJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4d:e4:33:97:32:4b:c5:56:6a:35:18:df:ce:8c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
        Validity
            Not Before: Jun 13 08:00:24 2025 GMT
            Not After : Jun 14 08:00:24 2025 GMT
        Subject: CN=1314844cf38544f625536428d9553104dc8cf19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:dc:76:9e:47:ce:47:6c:15:47:0e:56:99:
                    0f:c4:b8:8e:6b:f1:fa:20:88:8b:a6:f9:23:24:74:
                    4a:b6:c8:73:8c:6d:39:e9:ed:4c:66:c1:f4:73:6c:
                    b9:98:74:8d:e3:de:14:0b:fe:55:66:7f:88:c7:ea:
                    2f:bd:64:7e:4e:42:82:7a:be:af:67:67:70:b9:77:
                    52:74:68:54:80:b1:33:50:70:b1:8b:9b:2e:9d:00:
                    15:c6:b8:f4:81:3b:68:06:ca:82:84:1a:1a:6f:af:
                    e8:77:20:5b:3a:f5:4b:49:d3:e0:01:a7:38:0d:70:
                    37:3e:76:f8:a6:dc:c1:d2:10:da:37:1c:94:52:d0:
                    ae:2c:6c:55:d8:61:55:a1:41:d1:65:08:ed:c3:c8:
                    88:46:40:40:25:9e:6f:3f:74:20:44:59:80:96:b4:
                    b5:ce:12:bd:3c:ae:73:40:8c:fb:98:ae:c8:cf:69:
                    d1:8c:74:e8:3b:b5:d1:b0:2c:1b:e2:fe:3f:29:7c:
                    3f:39:b3:36:49:71:99:0c:09:0e:e9:fd:ea:62:68:
                    8d:7b:d8:1d:1b:55:d8:81:a9:69:fd:3a:67:72:0b:
                    49:8f:53:be:42:1c:85:c1:29:5d:22:19:bf:c8:cf:
                    ce:20:27:be:a0:b7:0e:3a:7f:33:34:bc:2a:db:be:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:14:84:4C:F3:85:44:F6:25:53:64:28:D9:55:31:04:DC:8C:F1:9A
            X509v3 Authority Key Identifier:
                keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5a:a0:94:fc:78:54:b7:30:91:32:ab:d9:fd:32:c1:a6:93:
         7f:fe:39:d5:8e:e3:b4:93:20:af:73:d2:ae:0b:82:c1:4f:3a:
         65:98:48:db:27:e7:8a:d9:eb:a1:51:64:6d:59:a7:26:80:05:
         4f:60:47:93:85:f7:41:b8:f6:30:62:76:a5:31:ea:0a:51:a8:
         e7:a1:9d:88:df:d0:50:d0:03:1e:11:1e:4f:2f:75:50:ff:2d:
         9e:b7:ec:74:30:f9:47:9a:c0:69:0e:53:1f:7a:28:e8:ea:c1:
         00:b9:22:f0:ee:f2:77:1d:1d:93:83:85:be:b2:cb:db:01:48:
         25:bd:7f:b9:b0:89:b6:24:14:ba:ba:e7:a8:8a:f9:53:0a:ff:
         1d:c3:89:20:fc:76:31:2c:55:e9:8e:10:78:52:96:18:24:de:
         25:ad:a4:b0:cc:00:5c:8e:d3:88:93:ce:3f:f3:d1:86:2d:be:
         12:1a:80:c1:70:39:c3:21:20:13:4b:0c:ec:e1:69:0a:6f:d9:
         b6:3b:55:43:37:ce:ef:43:f5:dc:fd:b8:b8:cc:8a:2b:12:b4:
         e4:c8:97:0c:26:35:60:f1:e6:24:e9:f6:fe:76:e2:6e:97:e9:
         96:7c:35:c5:78:4f:68:a7:ba:18:ec:82:3e:63:0e:16:7e:0a:
         7c:cb:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:01 2025 by rpki-client