Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File:                     m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier:          u4Tm6Ds91ENgVXqSlrZVhGqPGmayMdwf5EEPVTPC7sw=
Subject key identifier:   FC:82:A2:81:A6:13:44:5F:65:36:46:F3:26:C3:33:CC:C9:59:BC:B8
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer:       /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial:       01976960884F2CDAF3578D124C1E5B7E8FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 13:00:23 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:23 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:23 +0000
Files and hashes:         1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
                          2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: UpdaqxnDtGxyJmi/G3i7ux8pyT05OfbA6mjohT5Bi2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:88:4f:2c:da:f3:57:8d:12:4c:1e:5b:7e:8f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
        Validity
            Not Before: Jun 13 13:00:23 2025 GMT
            Not After : Jun 14 13:00:23 2025 GMT
        Subject: CN=fc82a281a613445f653646f326c333ccc959bcb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9f:2e:e0:a5:c7:a9:02:3c:57:b7:ea:03:28:
                    8e:db:52:b5:da:e0:60:53:b8:c3:d0:83:d9:9d:53:
                    97:22:15:bd:96:3e:f9:32:d7:dc:f3:88:d6:e1:bc:
                    73:7c:3e:91:d5:0e:2d:99:75:ba:55:fa:83:1f:fa:
                    6b:8f:5a:41:57:b5:ce:4f:64:12:41:ee:b2:f7:6e:
                    56:54:8e:84:33:2d:f8:63:9e:64:72:ee:be:95:68:
                    1d:cd:ad:cf:6c:bf:79:26:c8:df:58:55:c8:ae:ec:
                    93:d0:bd:92:77:e0:6b:31:e8:8f:60:36:9f:5e:03:
                    f3:dc:43:33:4b:58:81:66:fa:47:56:3c:b6:ac:f2:
                    a6:61:69:0c:5a:21:a8:41:28:ee:70:a5:d5:34:20:
                    8c:bb:99:29:bc:44:b6:7e:6d:2c:89:ad:25:08:6c:
                    97:8a:11:bd:a0:7f:ab:03:88:a5:0b:e9:05:1f:8d:
                    36:9c:56:45:31:fa:36:30:29:f1:9f:8f:d3:4f:10:
                    6e:ab:9d:26:ee:22:cc:1a:6e:58:43:5d:a1:4c:ac:
                    b1:8e:53:e2:17:0c:de:81:2e:f0:ce:5d:db:dc:d7:
                    5a:ca:b1:d1:06:f7:b2:f9:07:c6:0c:21:b9:95:a4:
                    13:ba:13:31:ae:d3:af:d0:31:fb:fb:9e:6e:f5:57:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:82:A2:81:A6:13:44:5F:65:36:46:F3:26:C3:33:CC:C9:59:BC:B8
            X509v3 Authority Key Identifier:
                keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d8:c1:47:e1:8c:08:c2:59:10:96:09:3b:0d:64:ee:d4:f4:
         ce:7d:74:40:5e:59:ac:73:be:ee:2b:e3:44:16:76:7c:c7:9b:
         b6:e8:3e:7a:51:bd:bf:56:54:a8:8f:16:62:91:c9:a6:b4:38:
         0d:ad:12:f6:82:bc:ec:0e:5a:3d:a7:66:65:ba:f5:99:30:d7:
         11:0a:17:34:62:4e:c7:1e:67:93:fa:5c:84:7f:e2:d3:7f:d4:
         31:d2:80:33:be:6d:72:94:97:5e:67:8d:85:11:47:ba:52:e6:
         c4:38:e9:67:6b:8e:20:de:79:47:1a:6e:ed:cc:f3:fd:52:a3:
         20:e8:34:6f:89:63:3b:d5:ac:ef:40:17:66:32:e7:35:bd:b4:
         01:c7:d6:5f:fd:49:2f:05:5e:bf:45:2f:a5:3e:5b:2d:6b:01:
         19:9f:56:6b:7f:88:d8:ce:94:66:8a:8d:50:c9:ee:b8:d8:57:
         0f:45:55:5f:30:b0:ff:02:c8:a3:b8:11:8b:59:1d:7a:1a:f2:
         ad:ef:76:75:1b:c0:b9:75:af:9d:ed:5b:66:c2:51:92:74:d0:
         5e:16:b0:7e:2a:da:d1:7c:ca:9b:7d:02:6a:99:8e:1f:5b:67:
         43:b2:b5:f2:47:32:e9:0e:0d:d7:c1:87:67:fe:6c:64:2a:10:
         d1:59:bb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:52 2025 by rpki-client