Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
File:                     B7tb-mSw1dGKMGGphpscpXFy6ro.mft (raw, json)
Hash identifier:          /QpqSxlhM0oIOjNoxPDuSc2j1QvlgS8snJluA0FyuDU=
Subject key identifier:   90:EF:53:44:98:FC:97:D7:79:1C:B0:41:FE:1D:0B:FB:64:30:4C:17
Authority key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
Certificate issuer:       /CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Certificate serial:       0197684E525921434311C01B5A152E12169A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 08:00:52 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:52 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:52 +0000
Files and hashes:         1: B7tb-mSw1dGKMGGphpscpXFy6ro.crl (hash: kZ+/VG6YfeOe0lfnwZGlKTO66UgHQPzFISBnSTYZ4MY=)
                          2: LDJYdCgEn8OHisMoTT81wCOejnM.roa (hash: eRVNCz8Pk6p2554eo6icsKHVU7mmhCMFdPhBfpeYBU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:52:59:21:43:43:11:c0:1b:5a:15:2e:12:16:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
        Validity
            Not Before: Jun 13 08:00:52 2025 GMT
            Not After : Jun 14 08:00:52 2025 GMT
        Subject: CN=90ef534498fc97d7791cb041fe1d0bfb64304c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2a:e1:53:00:6c:63:73:0e:c2:0f:b8:69:33:
                    f3:e6:e6:a7:ff:11:dd:68:62:4a:d6:08:88:02:d6:
                    00:3c:23:1a:aa:51:f9:9b:18:0f:d8:c7:47:b6:e6:
                    49:ec:4a:8d:a6:ba:2e:4f:35:6d:38:f4:24:96:1a:
                    37:d8:69:94:eb:6c:85:4c:72:db:06:34:bf:ee:22:
                    ca:65:db:0d:80:54:14:90:95:42:b9:86:f5:2b:a0:
                    91:f4:4d:e7:85:22:6d:a6:37:c2:98:f0:c0:18:2a:
                    1d:3a:e9:95:a0:fd:a9:bd:36:4d:2a:06:b0:d5:12:
                    11:ec:72:7e:06:47:6a:16:e6:37:b0:cb:ef:84:70:
                    c6:fc:d1:3c:ea:c5:70:df:91:60:a1:0d:48:51:df:
                    92:49:59:eb:27:8f:a5:df:48:a6:4a:54:ca:71:57:
                    b8:a6:b6:54:99:b5:19:ff:b9:70:9a:e7:d6:9a:7a:
                    64:46:a0:de:db:8c:ca:c0:8d:6c:a1:92:f2:5f:d7:
                    4f:c7:a0:0a:21:23:2c:9f:38:fa:d9:72:b2:98:5d:
                    7a:f8:a5:94:40:87:9e:e1:1d:46:f6:6f:29:ae:1d:
                    e6:66:d2:a1:31:08:b5:5f:cc:d9:23:9e:05:2e:09:
                    f9:84:1a:c7:05:d3:e7:b1:01:91:f4:d7:38:39:cf:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EF:53:44:98:FC:97:D7:79:1C:B0:41:FE:1D:0B:FB:64:30:4C:17
            X509v3 Authority Key Identifier:
                keyid:07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:46:44:c6:e0:c1:0d:86:79:81:84:56:d4:a6:83:2e:3f:a6:
         a7:96:d1:dc:c5:e5:28:95:b2:25:02:1e:d1:cb:2f:1a:d3:c9:
         b5:83:f7:97:1f:9b:36:6b:fd:f5:9d:54:6b:73:b5:8f:e5:fe:
         b8:6e:2c:ca:60:51:55:1a:a8:b7:e7:0b:a7:2f:44:e5:38:c1:
         fd:c6:d0:d0:5f:e3:ca:ee:9a:94:08:63:1e:34:f3:26:b7:b5:
         c6:77:6c:e8:4c:72:3d:de:55:ce:66:e9:d7:b2:16:df:c1:b2:
         1e:61:c6:c7:3c:07:e9:0b:19:01:12:60:1b:22:4a:5f:84:9c:
         a4:8d:71:ae:d3:bb:cf:32:54:4f:2b:ae:32:12:c1:2b:3b:2b:
         d1:4a:3d:31:b8:99:7c:3d:b6:07:35:9d:b1:bb:d5:71:7e:9f:
         7d:3c:29:71:f7:26:03:54:79:6c:d7:a7:ed:b3:37:5b:77:12:
         0a:66:7d:15:c2:03:23:4d:d7:73:9b:b0:a7:71:84:24:68:21:
         3e:65:3a:2c:73:1c:f7:ed:68:6f:f1:14:d7:de:d1:c5:ba:a8:
         b2:86:e7:b6:97:5b:66:1d:83:91:8b:57:82:a8:ee:19:82:f3:
         31:23:08:e7:84:e1:01:47:94:21:4e:df:0c:32:07:5e:46:cc:
         29:44:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:56 2025 by rpki-client