Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
File:                     vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json)
Hash identifier:          terkPSUbcMNsShJK7Pzdtq7PSP+YUp4nJgQuztFMG9Q=
Subject key identifier:   D8:71:66:9D:30:54:D7:2D:52:67:16:3A:D5:1D:CC:5A:B5:95:04:DB
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Certificate issuer:       /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial:       01976C98DE038C35CA7381C17F5CD1D675E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 04:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:46 +0000
Files and hashes:         1: qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (hash: AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=)
                          2: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: w7a0XNGrGmM68Q9sfupGQF082DPNpSxBxCiJHSdu1Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:de:03:8c:35:ca:73:81:c1:7f:5c:d1:d6:75:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
        Validity
            Not Before: Jun 14 04:00:46 2025 GMT
            Not After : Jun 15 04:00:46 2025 GMT
        Subject: CN=d871669d3054d72d5267163ad51dcc5ab59504db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:ac:3f:f2:a4:2b:5b:0a:37:17:ee:f4:2f:
                    ab:3f:b1:65:56:56:bc:73:db:c7:f3:da:e8:c3:bf:
                    89:8d:11:02:c2:fc:f7:b2:c1:47:20:14:74:61:06:
                    ce:64:40:4c:69:73:a5:ad:8a:c8:07:d3:b1:85:6d:
                    d8:a0:c5:37:80:1a:a3:95:60:9e:b3:68:d6:e5:09:
                    ea:ec:0a:6f:c0:6c:7e:34:3f:4f:11:ac:50:a5:b3:
                    a0:95:33:a1:58:02:1c:3f:52:31:66:5c:fb:dd:95:
                    d6:87:7b:90:96:97:80:28:40:bd:58:ce:98:d9:d4:
                    a3:43:f5:ed:3c:35:23:c3:62:cc:2a:4e:2a:80:51:
                    17:be:2e:44:1c:61:54:af:76:de:bd:d5:80:e2:a7:
                    32:9d:ca:91:f0:71:7d:42:a0:6f:24:20:b5:bf:7c:
                    d6:2c:f4:b5:18:cf:55:45:10:a2:83:79:d9:b9:51:
                    52:ec:33:22:d2:f0:b9:3d:65:20:f6:45:e3:0b:34:
                    c5:40:8b:b6:5a:d9:0e:0c:c8:55:b6:1b:67:5a:da:
                    5e:c8:75:fc:36:78:a9:19:9a:37:5b:7a:0c:ca:fe:
                    f4:61:dd:49:bf:ee:e1:a9:d0:85:cf:f8:55:08:c3:
                    1b:c2:d6:fa:9b:03:1f:8c:1f:c8:13:6f:4f:19:36:
                    c7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:71:66:9D:30:54:D7:2D:52:67:16:3A:D5:1D:CC:5A:B5:95:04:DB
            X509v3 Authority Key Identifier:
                keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1a:08:05:21:91:a5:80:b8:a6:e9:b8:9c:49:75:75:f2:58:
         ee:f6:ef:58:fd:ba:f7:41:16:af:f3:e3:65:5f:a9:27:5a:07:
         d4:4b:bd:a6:ba:7b:74:72:4b:ca:a2:29:cb:77:6a:76:ee:74:
         9e:d4:60:71:35:83:f0:f1:1c:25:95:4d:81:50:7d:a9:98:bf:
         c0:4d:08:78:f7:8c:8a:d3:35:7f:71:07:26:5f:a6:5e:c0:81:
         2a:57:11:4b:25:74:0c:ba:de:47:3f:4b:c3:30:1d:0a:03:9b:
         86:00:85:90:42:b4:7d:86:a4:de:d0:fb:05:1d:33:29:c8:fa:
         27:b5:46:ff:7c:43:d5:5a:6f:3a:a9:43:8d:dd:d5:33:49:ce:
         bd:d8:ca:c2:3d:c5:93:68:26:44:13:0f:34:94:0d:bf:52:34:
         04:63:7a:b2:2e:27:dd:88:5d:80:e8:b6:45:03:49:45:b9:fe:
         20:d1:9c:c6:63:65:dc:7b:87:0a:32:68:57:77:7d:f5:d4:59:
         47:39:db:eb:12:8b:72:ef:87:b0:2f:e8:8f:16:2e:92:54:73:
         74:f3:2d:0e:69:c4:c4:99:d3:54:3e:7b:c3:04:a2:9b:c9:78:
         72:0c:3c:25:a7:cb:d5:33:cd:c2:90:14:c3:aa:f3:ef:e8:0b:
         91:3c:df:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:59 2025 by rpki-client