Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File:                     0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier:          OaND35oops6iVot39rIFD6yig+clgry2sjpNrXz+QYk=
Subject key identifier:   71:EF:78:1E:4C:AB:71:0B:C7:9C:60:F9:CD:CD:C2:97:88:12:8A:66
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer:       /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial:       0197707533C1BF7DC757B5B9380A0AE545AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 22:00:18 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:18 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:18 +0000
Files and hashes:         1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: V0q10CQk5/uckIscm7j4SA8IncNwM5sdb7McumDJank=)
                          2: 2dNcgj6MvN9n_fYFlGVJH7IP5P0.roa (hash: NdXmI8eBdfB68znJPh1CIG8Aqd8Jvbrd0RbmQ639jeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:33:c1:bf:7d:c7:57:b5:b9:38:0a:0a:e5:45:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
        Validity
            Not Before: Jun 14 22:00:18 2025 GMT
            Not After : Jun 15 22:00:18 2025 GMT
        Subject: CN=71ef781e4cab710bc79c60f9cdcdc29788128a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:f7:c4:5b:e8:b0:18:2d:7e:fe:fd:f9:61:
                    4b:4c:16:5f:fd:48:d4:88:ed:5d:27:ca:84:0a:27:
                    cc:7b:f1:8f:bd:02:c7:d0:d2:76:5a:29:bb:81:c0:
                    a7:fb:fb:c6:bb:15:32:14:16:6d:d0:69:ad:53:67:
                    ae:0d:51:f7:2c:18:a7:51:cd:18:5d:3c:4d:7f:bd:
                    e2:41:0d:b1:87:66:08:6f:3a:31:a7:bb:b4:6c:92:
                    7c:d0:70:7f:4f:e0:9a:40:fc:2d:1c:a5:df:1b:8e:
                    e4:94:e2:55:95:54:d7:80:4f:73:29:c3:e8:0e:3c:
                    c8:13:c6:9a:be:e5:8c:9b:7d:eb:fd:67:65:43:c4:
                    e9:48:fa:57:6a:2d:62:37:14:78:a9:9d:5b:b7:4c:
                    18:f6:1a:0f:07:b5:8f:b8:1e:99:bd:64:20:2c:42:
                    f9:7c:43:52:e4:d9:79:7c:f3:88:d2:3b:c9:4e:78:
                    cc:4a:f8:f4:65:64:3d:9b:ee:0b:00:3e:a0:90:5a:
                    93:70:5b:e0:11:c5:b9:3c:cf:89:ab:94:20:6a:c8:
                    14:e4:56:15:36:5e:a7:6d:5d:3e:5f:d5:50:cb:53:
                    88:c2:b3:77:9d:85:0a:a9:19:ac:7a:61:16:2d:b4:
                    1b:26:71:4f:af:ee:8f:3d:82:16:c1:65:fa:8b:59:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EF:78:1E:4C:AB:71:0B:C7:9C:60:F9:CD:CD:C2:97:88:12:8A:66
            X509v3 Authority Key Identifier:
                keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ab:65:67:99:a9:6c:56:e9:9f:24:24:66:70:98:b9:7d:f6:
         12:91:fa:4a:55:10:be:e5:67:31:bd:7d:03:a6:96:f0:c4:f9:
         a8:6c:f3:68:dc:e1:48:e5:3f:cf:19:ed:9a:9f:b9:e2:fe:84:
         9f:2c:08:f1:be:e1:78:32:e2:d7:54:08:eb:05:60:22:6e:57:
         73:fb:ad:f1:ed:9a:84:a1:ef:0f:44:c5:a1:ae:00:ab:67:84:
         e9:28:21:f4:b2:5a:70:d8:4a:15:5f:8f:b9:80:8d:a4:ec:67:
         fb:ef:69:20:f0:83:ee:a7:32:22:93:be:72:b5:d3:34:01:59:
         ed:bd:ee:f3:bd:b7:3e:54:b4:45:74:19:00:6f:e9:e3:6f:e5:
         dd:2f:a7:65:6e:6c:da:bd:cf:40:68:5d:95:54:34:37:23:44:
         f6:66:e4:13:65:47:3a:a9:49:74:46:2e:b7:fa:a1:3c:3f:a4:
         a6:ec:c1:63:df:72:52:f7:b7:ec:4b:18:cc:2d:73:b0:0f:bb:
         19:0f:38:44:f0:3e:54:fa:27:85:3d:f4:a4:da:16:4d:f5:7a:
         f8:be:35:83:28:3e:e8:3a:2a:9e:de:23:c1:6f:ef:65:c7:ef:
         14:01:32:02:3b:4f:69:44:ed:49:87:5f:5e:99:4b:52:88:90:
         62:35:20:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:45:58 2025 by rpki-client