Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          CC/+hv8m8/9KSaR+zh/M7jaITrcZvKQZW+uQFGzY7Dc=
Subject key identifier:   FE:B5:BA:B5:C2:F2:04:CF:26:7C:21:E9:E9:D4:F1:F5:CB:F0:65:33
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       019781A026D3BAFC2E40CC21F0B433C23753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          159C
Signing time:             Wed 18 Jun 2025 06:00:45 +0000
Manifest this update:     Wed 18 Jun 2025 06:00:45 +0000
Manifest next update:     Thu 19 Jun 2025 06:00:45 +0000
Files and hashes:         1: aqDSlJI6fRe1RN2uayTTFYQxD-s.roa (hash: KcsQCykFuSuY+9QOJB4kYVylQTDKAT5qMJFTxYEhYPg=)
                          2: cQ6SdnmY7fIgfdAemGXpWF1FOPQ.roa (hash: rE5sWP16qEy550XaQGyvVum39Vv1f9SuBJn5Bpfsn24=)
                          3: is06NJF_pdLdCky9_vvySjLbIWk.roa (hash: iohuFwFwemTLBjzODMRz2CDiXJBSgnTn1Frh7C6hyPQ=)
                          4: kAy4RLfssItqnKihng08SJ24kLU.roa (hash: NzDxF5VtRsVHoeFsy5okPqrnmIPsJbnNlHuQYgmsl+0=)
                          5: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: FkpiX22GARYY0iN92jCHskkhelUbSt74S8sL5ytq/yw=)
                          6: oRY9iKk0D5CyNjGBBRC8EKK0Png.roa (hash: ptEHHc6sV9bAwsAg48r335Aq1U2u7iI0S6DteNymbm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:81:a0:26:d3:ba:fc:2e:40:cc:21:f0:b4:33:c2:37:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: Jun 18 06:00:45 2025 GMT
            Not After : Jun 19 06:00:45 2025 GMT
        Subject: CN=feb5bab5c2f204cf267c21e9e9d4f1f5cbf06533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:51:81:19:34:5c:3d:fa:82:7c:9c:55:14:
                    fc:66:9e:0a:c9:0d:b4:88:9b:91:7d:fa:38:35:96:
                    fd:cc:a4:ee:21:b0:9e:f4:dd:b8:2f:14:84:42:2b:
                    8f:65:e3:32:88:e9:db:21:85:f0:20:ef:b6:37:0f:
                    1e:19:64:85:2e:f8:77:e1:76:1d:fe:9d:3d:cf:67:
                    77:65:c3:e2:e3:c0:66:c3:81:84:91:bc:89:26:aa:
                    ec:75:6d:3e:08:a2:be:41:8a:c7:70:dc:d5:a4:58:
                    c2:75:24:6c:1c:38:bf:b6:b5:b4:56:fa:2f:30:c1:
                    ad:43:30:39:1f:b6:ad:5b:a7:8a:e4:e0:9a:60:b8:
                    37:57:7b:64:40:b5:8c:95:b4:de:e7:8e:0d:26:3c:
                    b8:a8:c0:ed:4b:40:92:cf:ff:c4:4c:a3:de:dd:95:
                    a5:87:87:30:ed:b5:91:bb:97:30:af:84:61:2d:7c:
                    9d:0c:30:c4:51:4e:84:06:e2:2e:f1:6f:72:62:e5:
                    a2:73:28:1f:6a:16:65:5d:2f:af:59:42:26:62:56:
                    9a:19:10:dd:df:2b:5a:5d:bd:ff:4b:67:8a:ca:b1:
                    82:cf:0c:98:33:cc:15:28:fd:0e:c8:81:0d:57:0e:
                    56:6e:40:36:e9:8c:32:4e:9e:09:de:4f:d1:08:80:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B5:BA:B5:C2:F2:04:CF:26:7C:21:E9:E9:D4:F1:F5:CB:F0:65:33
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:90:c0:6d:41:8d:c5:66:59:13:73:31:35:fa:fe:1b:4a:fc:
         0f:0c:6e:60:69:24:86:2d:79:d5:60:b9:3c:aa:36:cb:f0:61:
         a4:2c:7e:5e:c6:bb:c8:f0:1a:bd:79:b6:b8:ec:8a:6f:75:5b:
         4d:dc:15:21:63:2c:1f:fd:36:be:b4:c3:66:c8:df:ab:6f:70:
         46:47:79:58:ce:89:cc:bd:93:3e:a2:2f:9c:c4:8e:d5:bc:5a:
         40:3c:5a:0f:6e:35:66:c5:90:76:4f:31:b1:f8:94:e8:0e:3e:
         d9:27:f8:41:3d:bc:8d:ac:1e:72:b2:7c:4f:a4:e9:44:2d:94:
         4c:59:a1:63:20:30:26:5c:12:e8:c5:dd:70:5d:df:0c:93:f1:
         57:f9:55:c0:16:8e:bd:ba:7f:71:f0:df:25:69:0d:ca:94:4e:
         76:95:8b:26:6b:45:e1:5a:4f:d5:4b:41:c8:ec:3b:0d:67:9f:
         40:39:e4:2c:a0:6a:62:74:d7:78:a8:03:aa:3c:96:e9:0a:f6:
         de:24:a1:92:79:78:70:3c:35:ed:7f:b8:b6:36:8b:17:0f:6c:
         9c:36:49:7d:48:41:5d:e9:1b:14:97:fb:0e:bf:be:a2:ce:12:
         2c:cd:65:51:02:30:a2:23:44:b1:a9:fa:cc:85:87:47:09:97:
         0a:16:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:38:57 2025 by rpki-client