Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
File:                     SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json)
Hash identifier:          Ob4Dl08LW5CtXdOpOuvMdOyOSNpjn87pEYGRGgrqisM=
Subject key identifier:   14:B7:8A:2F:28:0D:C1:69:1B:C7:D2:4B:42:F8:EA:84:93:60:29:88
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Certificate issuer:       /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial:       019770AC663610C9769FFFB15A48D8235335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
Manifest number:          159C
Signing time:             Sat 14 Jun 2025 23:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:35 +0000
Files and hashes:         1: CgdiB-LvALW6eF8te_abb7XhHzw.roa (hash: FMmsOk3IFJDqEQcmSu8en9nadePYE7fdzLtSrsLGOLw=)
                          2: DheYS6kXlTHMFO59gGUyPsW4eds.roa (hash: n/9tk9beMA1XkkvC1xAFHfiOMzHgwQU8810EuXnnbI8=)
                          3: PBiMn82gChQHdPPkS-Oqs-Fnbh8.roa (hash: egCOLbWqDbWYCFc5/6lxhgVs+rP+45wHq+Te93L2gCw=)
                          4: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: LN8ZaPi77QOk8NSZvaZs3WNH2JrtU4iGpjDrEwFhC2I=)
                          5: heiFtANLkWlLrNLuIvdxl9kb0CQ.roa (hash: TnGpURbkXAESJ2Gk47wlG4sEj84D3SKrlpwSgF/8yys=)
                          6: jj0FH0DBvDqihM_PehNtHmRi9os.roa (hash: YyltTND33n/AiLCX9ViD6/mj27hWtc2LPtOCmOwTReA=)
                          7: lH-qHFc7crMLSf4GUnVsxi7d5S0.roa (hash: mgWBS9e4WAOzI2AGy8eUIJvq5GzFNK7+k2P1TPWDi18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:66:36:10:c9:76:9f:ff:b1:5a:48:d8:23:53:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
        Validity
            Not Before: Jun 14 23:00:35 2025 GMT
            Not After : Jun 15 23:00:35 2025 GMT
        Subject: CN=14b78a2f280dc1691bc7d24b42f8ea8493602988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:ce:c7:86:b1:fe:d0:c3:61:e4:e9:7f:a9:
                    f1:7b:13:13:91:bc:ff:39:aa:96:12:06:9f:9e:59:
                    92:a2:84:f8:5c:c7:9a:cf:cc:18:33:89:40:80:91:
                    c9:19:d5:fc:66:c7:fc:a1:df:74:cd:00:5a:96:80:
                    23:44:f9:83:e4:24:e8:f0:ff:39:02:3f:a7:b7:52:
                    8a:99:d8:02:88:6c:ca:17:09:eb:80:87:74:46:a2:
                    b9:e8:ef:14:4b:fb:9c:d4:93:ea:fe:77:ca:ee:2e:
                    a4:1a:50:d5:6b:33:f3:1c:b1:6b:25:d4:a4:06:60:
                    d6:fe:3c:dd:cc:cb:cd:a3:ff:6e:7d:50:dc:9c:e5:
                    92:98:9b:8a:68:cf:44:0b:45:e6:07:95:1a:d9:09:
                    ed:47:0e:82:cf:b4:b4:2d:b5:c4:64:73:a8:a3:85:
                    8d:ab:5b:93:19:24:6b:e1:a9:f6:57:f8:95:38:ae:
                    0b:00:44:86:cf:31:4c:5e:cf:91:db:82:e0:b8:1b:
                    b6:06:30:c4:b4:45:72:35:44:41:4c:aa:f7:bf:41:
                    0a:5b:57:65:f7:2e:bf:75:e6:36:91:dd:99:e8:36:
                    ef:e0:7f:d4:5b:1b:8f:1b:07:03:c1:51:c4:60:38:
                    c2:70:1f:4c:51:b2:2c:1a:55:cb:fc:14:d1:4d:c4:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:8A:2F:28:0D:C1:69:1B:C7:D2:4B:42:F8:EA:84:93:60:29:88
            X509v3 Authority Key Identifier:
                keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d7:5a:2c:59:d7:48:f5:0b:41:6e:33:aa:19:bd:1b:8a:67:
         8f:72:b2:73:9b:ef:ea:05:4d:c5:92:91:fb:00:a9:3e:e2:4d:
         bf:05:2f:51:ee:6c:ee:02:ea:b3:89:11:be:7e:f1:4c:cb:d9:
         65:58:c3:24:78:86:0f:43:ff:39:e1:5b:63:13:00:d8:7e:b8:
         95:a6:be:79:06:5a:5a:d2:59:29:eb:a5:88:38:62:90:8a:fc:
         0d:bd:76:46:3f:24:78:ab:3f:54:59:2c:1f:8b:d2:28:a1:a6:
         da:36:91:ce:f0:29:f6:6d:15:ec:d0:95:41:32:e3:1d:5b:ef:
         cc:55:a7:5b:50:b7:f6:52:f7:06:71:bc:a0:38:1d:eb:0d:96:
         c0:fc:d2:e2:25:1c:55:1c:f5:43:8b:bc:e3:80:c7:72:67:0c:
         23:a3:43:01:27:b6:c3:24:30:95:6e:d1:8b:70:d1:48:9c:70:
         43:38:0f:e5:b5:7a:29:03:ed:14:9a:67:cc:23:59:5b:eb:94:
         48:d5:2d:6c:aa:a3:b8:cf:d2:19:07:e8:96:1d:74:2f:28:09:
         1c:4c:6b:3d:78:2a:0f:40:ff:ca:20:f1:da:9b:4c:8a:17:8d:
         e1:c5:7a:2c:d9:3b:86:02:c5:a1:f2:7f:ac:fd:78:42:3a:a0:
         fa:a9:89:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:37 2025 by rpki-client