Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File:                     RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier:          tSJmvwA4k5dEJKzxpXivntBQrA6PtHIL2Psjrzq3xpg=
Subject key identifier:   AC:27:43:21:19:04:3D:59:5C:D1:69:68:57:8B:EC:7B:5D:D9:69:37
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer:       /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial:       0197696116E1B83C7C930BA8D443ECD65E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number:          158B
Signing time:             Fri 13 Jun 2025 13:00:59 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:59 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:59 +0000
Files and hashes:         1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: c2IpnxZwf+oaEXAxgeJspUp+Ucoezdj2TEqISO378JY=)
                          2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:16:e1:b8:3c:7c:93:0b:a8:d4:43:ec:d6:5e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
        Validity
            Not Before: Jun 13 13:00:59 2025 GMT
            Not After : Jun 14 13:00:59 2025 GMT
        Subject: CN=ac27432119043d595cd16968578bec7b5dd96937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:88:ae:66:71:47:98:91:7d:52:81:fb:1e:
                    1c:c1:07:ca:92:f5:38:80:99:f3:da:82:af:ef:43:
                    22:d4:9a:a2:e4:65:66:e5:0e:03:4f:5a:05:53:f1:
                    d9:9f:64:ed:72:4c:23:9f:fc:54:46:22:b3:fc:cb:
                    43:b6:56:1c:ce:29:e9:4b:fe:35:56:7f:05:7e:09:
                    58:f5:ef:f9:aa:33:c7:1e:92:3a:93:c1:63:20:74:
                    14:b6:8b:c2:9d:d9:e0:27:ef:5c:fd:a5:85:84:50:
                    fe:29:c3:c3:fd:ea:34:db:7a:71:c2:50:9d:e8:cb:
                    06:1a:ae:58:47:9f:55:13:e9:b1:b2:a0:9a:71:0c:
                    b5:80:e7:66:d0:95:d6:a5:07:3b:48:e9:90:45:cd:
                    d0:c5:aa:95:a3:c7:3a:b1:a9:32:43:aa:99:64:ff:
                    d6:55:1d:76:cd:86:bf:72:9c:34:96:48:7f:2f:13:
                    35:93:3b:2e:62:25:98:47:29:2a:6e:b9:b9:6a:fa:
                    ae:96:62:7c:4d:08:fe:be:b7:32:8e:67:19:2b:6c:
                    4c:d9:f9:c2:ae:9c:10:8a:1e:87:2f:10:80:98:52:
                    79:c1:9c:5d:ae:2d:40:2b:66:a2:46:9f:5e:e3:b5:
                    8a:5a:b7:3c:98:fc:67:9a:f1:f0:92:43:bd:01:69:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:27:43:21:19:04:3D:59:5C:D1:69:68:57:8B:EC:7B:5D:D9:69:37
            X509v3 Authority Key Identifier:
                keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:25:55:96:c2:2f:ae:28:82:90:d0:b2:83:75:57:ad:29:e9:
         92:d4:09:a2:cc:73:de:ce:d9:21:3f:b0:5d:d3:ee:77:ff:50:
         b6:1a:cd:10:4c:a5:3d:14:9c:8d:10:4f:27:2f:25:4e:9a:78:
         3a:07:c5:b4:d8:0f:4d:bc:b8:d5:34:6c:ca:46:1f:95:64:e7:
         33:e8:58:7b:5c:dc:92:38:a0:8b:df:5c:e3:92:94:ee:1e:19:
         67:00:8b:e3:27:c0:5c:d9:4d:68:93:20:a0:c8:7a:24:fc:f3:
         ca:41:0b:fe:71:2c:3d:5e:fe:7d:9f:73:37:39:8a:ac:28:0e:
         eb:a2:1b:a8:14:33:93:e5:d8:71:26:82:46:c0:45:34:5b:ba:
         2c:86:36:fb:63:07:5e:99:83:f0:5c:07:9c:92:de:a0:10:7b:
         75:05:bd:a9:22:7e:e1:5a:e6:ae:0c:51:dd:7a:df:c2:34:1d:
         82:f3:78:55:df:32:70:a2:25:ed:b8:0b:81:37:85:36:8b:a7:
         dd:53:b3:47:88:e9:76:76:aa:fd:ec:7a:9b:d0:46:e2:2b:15:
         14:38:87:d2:11:c1:c0:84:41:86:28:02:59:3a:fa:51:94:2f:
         48:60:97:80:d6:a3:92:05:85:9a:cf:a6:e5:2b:8d:75:bb:e9:
         8e:67:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:32 2025 by rpki-client