Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File:                     BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier:          7oKl2WQF/2EaJvMmncIiA7w4WShPovhta/WLuNQpsC8=
Subject key identifier:   48:16:BA:01:B3:1D:EF:B1:BC:DB:23:5A:12:47:8B:50:6E:D7:EA:4A
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer:       /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial:       01976C9891DA8BC7283063DF41C5297E4835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 04:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:27 +0000
Files and hashes:         1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: L6hse3yFIFV8wzvvKMjlH5YtTzISuOszHYbOTC8lDfQ=)
                          2: pa3jfF65O1LeusJmZP9_Hq2CHUA.roa (hash: DB5zR9clFk0B3PVw7uwrAY7t9bq1MxHbsRq/+LHkr9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:91:da:8b:c7:28:30:63:df:41:c5:29:7e:48:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
        Validity
            Not Before: Jun 14 04:00:27 2025 GMT
            Not After : Jun 15 04:00:27 2025 GMT
        Subject: CN=4816ba01b31defb1bcdb235a12478b506ed7ea4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:95:a1:f5:5c:2b:a7:5f:0c:e3:92:5d:a6:
                    ae:fd:a0:a8:d5:6f:09:d9:91:cf:06:e3:fb:c5:16:
                    73:25:93:c9:7a:9a:be:96:d4:0b:56:f8:b0:ae:70:
                    66:6d:5c:c8:46:a9:56:3d:83:f8:ed:a5:dd:1b:6b:
                    54:8a:5a:2c:d1:a6:a2:ee:82:cf:64:ef:e1:fb:ec:
                    2c:d8:94:a5:b4:3c:ed:04:32:04:e6:46:9a:ac:6a:
                    16:15:cf:ce:4b:dd:b0:d0:34:70:da:4a:2b:af:eb:
                    8a:bb:55:94:fe:55:f5:c4:49:79:47:3a:b1:74:4a:
                    d7:d6:bc:19:33:c2:f6:4d:f5:c4:29:22:0d:42:56:
                    7b:bf:32:f3:f3:54:1b:df:77:f9:d5:be:f2:19:92:
                    68:df:4b:8e:9e:e8:2e:82:c6:1f:a1:66:22:4a:4b:
                    c5:e0:09:ef:c8:b3:8e:3a:11:8b:97:d4:55:00:b3:
                    7a:35:e4:66:8f:d5:13:7b:c6:5d:e6:d9:66:38:a0:
                    5c:bf:95:39:5e:82:fe:9a:d9:cf:7c:1b:62:9f:ff:
                    9a:da:b7:75:77:c7:0a:9f:7c:0b:ff:20:c7:14:cc:
                    68:cd:2a:ea:2b:48:9d:ab:a7:2c:6a:9c:1f:e8:9f:
                    61:37:a1:76:08:e6:58:ac:b9:3c:19:c5:43:90:d7:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:16:BA:01:B3:1D:EF:B1:BC:DB:23:5A:12:47:8B:50:6E:D7:EA:4A
            X509v3 Authority Key Identifier:
                keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:00:f1:85:9e:f0:8f:6b:1c:17:e2:05:07:4c:39:42:f3:30:
         0c:0a:21:4a:02:c8:bb:91:88:40:50:93:04:9d:ac:7a:ba:d0:
         28:e4:4c:83:30:2d:9c:9c:7e:ec:34:b5:c2:a7:3e:05:19:ba:
         2a:2c:fc:a1:15:31:6d:10:c8:28:ec:cb:3e:c8:14:6f:b6:d1:
         e3:ce:d7:bd:9b:6a:2c:4e:af:34:5f:93:8d:7b:e7:90:0c:c5:
         ba:34:2b:df:01:c5:09:cf:63:f1:97:5d:73:a0:a0:47:6d:d4:
         e6:58:93:ce:6e:a5:82:e0:0b:b9:e1:c9:88:bb:62:44:b5:5e:
         a3:dd:08:90:6a:50:f7:62:7b:ed:bb:01:4a:9d:82:51:03:2b:
         23:a1:5a:e8:b2:d2:c7:b9:46:e6:1f:2e:ee:9a:7b:38:f8:90:
         8f:66:47:7e:58:ee:18:be:af:41:5c:bd:4c:e1:64:8e:71:88:
         7f:b9:b6:81:3b:18:de:2c:55:cb:2d:12:41:42:24:77:d7:46:
         ab:8c:0f:f5:f9:f7:35:06:18:a6:2c:71:bd:0c:15:44:3a:41:
         a3:f0:7c:8b:f7:d5:89:b5:b8:be:a0:53:78:f3:0b:63:29:bb:
         88:88:23:5c:1a:5a:94:a9:21:04:07:df:4d:b0:8e:eb:65:d5:
         fb:1d:ff:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:12 2025 by rpki-client